Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft
File:                     H_HOmuJWMQK_jqcqieBhUu9wWLI.mft (raw, json)
Hash identifier:          LTsIAxkQc6lDJa55BfUwhS0pmwO22OtmGlPb1D47mK8=
Subject key identifier:   75:06:D7:28:6E:E7:A8:7C:9D:E9:94:FE:73:DF:C5:7C:00:6A:6F:4B
Authority key identifier: 1F:F1:CE:9A:E2:56:31:02:BF:8E:A7:2A:89:E0:61:52:EF:70:58:B2
Certificate issuer:       /CN=1ff1ce9ae2563102bf8ea72a89e06152ef7058b2
Certificate serial:       0199FEEBA1922DF87BCBAA0082428E444307
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft
Manifest number:          0A30
Signing time:             Mon 20 Oct 2025 00:01:19 +0000
Manifest this update:     Mon 20 Oct 2025 00:01:19 +0000
Manifest next update:     Tue 21 Oct 2025 00:01:19 +0000
Files and hashes:         1: H_HOmuJWMQK_jqcqieBhUu9wWLI.crl (hash: QSDFWhTjkj1wjQPZcDcRCYPhO+Gi5s82GKv8sVTvEv0=)
                          2: y725qdTMwrOghX8GfkxscKc-PM0.roa (hash: EDVLr0vu1gCBKbpCOMXFSj7zevxafD+c2G6jh65rh+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:eb:a1:92:2d:f8:7b:cb:aa:00:82:42:8e:44:43:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff1ce9ae2563102bf8ea72a89e06152ef7058b2
        Validity
            Not Before: Oct 20 00:01:19 2025 GMT
            Not After : Oct 21 00:01:19 2025 GMT
        Subject: CN=7506d7286ee7a87c9de994fe73dfc57c006a6f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:03:9d:c0:12:65:c3:ff:48:cb:ad:2c:f7:9c:
                    bf:da:f5:e0:d5:1b:84:90:eb:98:f5:21:3b:9f:d9:
                    26:d1:dc:bd:4c:c6:66:58:ce:7d:f2:db:bf:fe:ec:
                    9b:a2:22:9c:f1:fe:7c:dd:c2:5b:0c:0f:37:77:b3:
                    bd:c2:65:fd:58:26:12:f3:9d:08:11:73:5b:6b:34:
                    95:1c:19:e9:99:5d:f7:1b:70:c9:85:b6:e1:a6:64:
                    bb:c0:79:d4:4d:c5:34:7a:e6:47:c1:61:73:ed:5b:
                    6a:49:c0:73:8b:82:96:a8:c2:84:76:28:fb:f7:2c:
                    e2:64:58:19:3f:7b:45:24:ac:f6:e4:b3:ca:4c:44:
                    bb:e2:6b:15:30:83:3a:52:80:af:e6:af:34:9f:fe:
                    64:a4:58:c4:77:2b:87:cd:c6:30:b7:fe:86:9e:56:
                    0d:9c:37:f7:44:b4:f3:9d:46:ff:ad:2c:d4:ec:b8:
                    df:d7:15:7d:27:1d:45:62:98:fd:61:49:76:1f:20:
                    3b:c7:49:6c:4b:c2:0a:c4:72:94:3c:fd:92:07:0d:
                    46:b4:f1:2a:02:88:68:72:79:fa:af:6a:2c:33:df:
                    11:3b:bd:b9:c2:33:88:fa:20:cf:11:7d:21:42:03:
                    2b:56:47:4e:43:af:a8:ee:4c:e4:3b:0b:51:30:d5:
                    aa:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:06:D7:28:6E:E7:A8:7C:9D:E9:94:FE:73:DF:C5:7C:00:6A:6F:4B
            X509v3 Authority Key Identifier:
                keyid:1F:F1:CE:9A:E2:56:31:02:BF:8E:A7:2A:89:E0:61:52:EF:70:58:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:a3:0f:fa:cc:4c:dc:80:a1:83:c9:2e:cb:4f:db:25:51:ed:
         20:c1:d4:c0:06:7a:45:2f:9b:9a:49:93:5d:12:f9:b1:a9:3e:
         4a:2c:f1:ef:91:0d:0e:5f:82:04:11:d6:cd:09:c7:21:88:cd:
         36:63:f8:4d:73:1b:b3:e6:68:e8:d7:b1:c4:c6:ca:be:76:d0:
         20:83:55:46:b2:c7:4b:04:56:ea:b5:f9:38:3d:5a:5c:2d:e4:
         60:2c:11:a1:44:e9:56:e3:6d:50:55:f4:0f:c4:26:5c:4b:8e:
         35:0b:a0:66:5f:c6:2a:57:28:41:5c:3e:7d:5c:69:69:5c:7e:
         7a:f6:38:4f:53:6e:0a:ef:f3:2d:38:21:01:62:74:24:27:bf:
         ee:40:4e:c5:c8:b2:f1:41:8b:c5:39:7f:1b:bd:8e:7d:4b:a0:
         68:a1:64:54:2f:5e:48:69:1a:8f:fa:cd:5f:44:66:7d:ed:bf:
         cc:38:1c:6c:91:46:20:bf:64:a7:90:75:31:e7:8f:e5:6c:90:
         ae:5e:86:07:18:7c:02:76:08:bb:b7:9e:b6:0d:a2:40:03:48:
         5e:32:48:4f:76:9c:46:5e:86:62:ca:d2:db:f8:4e:d1:f9:59:
         dc:80:b8:47:35:e5:05:f5:aa:a5:03:92:e1:ea:d2:24:f3:68:
         d3:31:78:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:41 2025 by rpki-client