Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
File:                     HWW3t7iY-q7nB2fQlxXENqg_zcI.mft (raw, json)
Hash identifier:          CpF30hDXZJqQaid/SAnXaxn6sDM3W/b4EVi5Z+LVivM=
Subject key identifier:   69:8D:97:F2:AD:08:F5:09:CA:9C:0D:8D:F4:CC:72:99:6F:9B:9F:A1
Authority key identifier: 1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2
Certificate issuer:       /CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
Certificate serial:       0199FC58B0747E0E3F11960E4C80E9778F79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
Manifest number:          16EA
Signing time:             Sun 19 Oct 2025 12:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:34 +0000
Files and hashes:         1: ESdFHrMTT9CdnTueAws85KzTpOo.roa (hash: EFe4+WtiIfRKsYq3EhY1PIgLIFzMrHc8WS2QY4wWHBs=)
                          2: HWW3t7iY-q7nB2fQlxXENqg_zcI.crl (hash: Ftfr+h+1kc0XSlsZmDNKbcMXS0mzUM7jHiog24KgpfI=)
                          3: S7dw96BjJHjSAZkMcxGi_FB5doA.roa (hash: KE2tpzq8RhZkUzoGjIN+rbgmJi4KOhIPNewQQ1O2Z3o=)
                          4: lHt_Mh1w-7vs8I-ZaeWKv1xW2Ps.roa (hash: /8Glm1hc9AeZKEAxOBVRVagGt2gyvK5usk/gBvfbgls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:b0:74:7e:0e:3f:11:96:0e:4c:80:e9:77:8f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
        Validity
            Not Before: Oct 19 12:01:34 2025 GMT
            Not After : Oct 20 12:01:34 2025 GMT
        Subject: CN=698d97f2ad08f509ca9c0d8df4cc72996f9b9fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:64:b6:bb:c5:67:8d:d9:ba:16:a2:cb:55:53:
                    b8:fb:e3:61:98:65:1c:b5:97:71:f2:17:f6:34:e3:
                    af:e7:fd:85:dd:3f:b9:15:eb:5d:57:64:01:29:0f:
                    01:ac:60:1e:f2:c6:72:c4:df:ec:6e:f2:b7:3e:b9:
                    c1:25:31:5e:0c:52:be:e3:e9:2d:dc:56:ef:00:e6:
                    3f:df:9d:b0:c3:61:79:d0:2c:10:df:b7:4d:72:3e:
                    da:f8:9e:94:0f:7e:ad:72:d4:96:22:21:d1:5c:0f:
                    6b:3e:8f:46:7d:ef:f5:41:fa:ff:99:92:c9:52:8c:
                    e8:f1:b8:23:a4:dc:a8:e0:3a:03:89:8f:a0:cd:1d:
                    c9:52:74:07:79:ba:2d:2d:f0:6d:c7:a6:a4:6d:b8:
                    34:5b:82:24:48:43:30:3b:c6:da:78:13:72:b8:01:
                    f7:c8:61:7d:19:9a:18:81:0b:75:7b:ff:bf:ad:63:
                    f4:fc:e2:cc:fa:09:12:7a:2f:71:81:42:c1:86:2f:
                    46:ce:94:45:48:76:bb:f8:1e:fd:74:51:35:ac:f6:
                    b4:6c:87:a4:aa:74:82:fb:71:5b:89:af:bf:98:d8:
                    a4:ee:29:3c:3e:84:de:56:a5:b4:d4:75:ad:99:26:
                    b3:37:54:6a:26:81:5a:65:b5:ba:fc:45:90:e5:ae:
                    e5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8D:97:F2:AD:08:F5:09:CA:9C:0D:8D:F4:CC:72:99:6F:9B:9F:A1
            X509v3 Authority Key Identifier:
                keyid:1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:94:d3:0f:0c:a6:f7:de:da:a6:cf:50:19:eb:a9:00:fc:f2:
         a6:d8:57:51:3e:90:bf:cb:00:3d:88:74:e1:11:8a:21:a0:ce:
         22:ee:a0:fc:18:78:9d:2d:22:09:28:57:a3:2d:5f:29:3b:3d:
         56:47:84:cb:75:6e:16:10:3e:33:a8:5f:ac:77:7f:cc:23:e3:
         7f:d2:0a:ac:e5:d2:a2:8e:5c:d9:67:cb:8e:f2:bf:55:0e:fa:
         e9:e1:44:7a:b9:56:20:53:95:4c:d3:20:1e:66:f0:b1:b1:cd:
         48:9e:5b:92:a8:4e:80:bd:85:51:02:a8:7a:38:13:ba:dc:06:
         a5:34:a7:c8:6b:80:a5:d0:88:6f:e2:19:36:00:9b:49:28:3b:
         7a:f1:e7:a3:ee:39:89:1f:da:d1:1e:46:f5:2f:a7:80:3b:e0:
         d5:75:91:46:80:e3:09:0b:f2:cb:65:f9:b6:e8:88:10:c1:d6:
         fb:c4:1b:37:a8:de:c2:4d:a8:15:66:78:bf:6f:03:51:8c:aa:
         32:48:44:00:94:1a:56:da:b6:15:bc:c2:bf:b0:2e:b9:7c:2f:
         f1:14:4c:1b:5a:c6:33:8c:d8:2f:2d:bc:86:d7:45:79:0a:29:
         9a:a9:4d:0e:44:9a:96:f3:83:a1:95:f2:5a:11:57:60:98:0e:
         f2:63:fc:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WLB0fg4/EZYOTIDpd495MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNjViN2I3Yjg5OGZhYWVlNzA3NjdkMDk3MTVjNDM2YTgz
ZmNkYzIwHhcNMjUxMDE5MTIwMTM0WhcNMjUxMDIwMTIwMTM0WjAzMTEwLwYDVQQD
Eyg2OThkOTdmMmFkMDhmNTA5Y2E5YzBkOGRmNGNjNzI5OTZmOWI5ZmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWS2u8Vnjdm6FqLLVVO4++NhmGUc
tZdx8hf2NOOv5/2F3T+5FetdV2QBKQ8BrGAe8sZyxN/sbvK3PrnBJTFeDFK+4+kt
3FbvAOY/352ww2F50CwQ37dNcj7a+J6UD36tctSWIiHRXA9rPo9Gfe/1Qfr/mZLJ
Uozo8bgjpNyo4DoDiY+gzR3JUnQHebotLfBtx6akbbg0W4IkSEMwO8baeBNyuAH3
yGF9GZoYgQt1e/+/rWP0/OLM+gkSei9xgULBhi9GzpRFSHa7+B79dFE1rPa0bIek
qnSC+3Fbia+/mNik7ik8PoTeVqW01HWtmSazN1RqJoFaZbW6/EWQ5a7lUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmNl/KtCPUJypwNjfTMcplvm5+hMB8GA1UdIwQY
MBaAFB1lt7e4mPqu5wdn0JcVxDaoP83CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZWFlZjEtNjI0MS00OWFiLTk4MjUt
OGZjMzczNzU3Njg0LzEvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kZWFlZjEtNjI0MS00OWFiLTk4MjUtOGZjMzczNzU3Njg0
LzEvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5TTDwym
997aps9QGeupAPzypthXUT6Qv8sAPYh04RGKIaDOIu6g/Bh4nS0iCShXoy1fKTs9
VkeEy3VuFhA+M6hfrHd/zCPjf9IKrOXSoo5c2WfLjvK/VQ766eFEerlWIFOVTNMg
HmbwsbHNSJ5bkqhOgL2FUQKoejgTutwGpTSnyGuApdCIb+IZNgCbSSg7evHno+45
iR/a0R5G9S+ngDvg1XWRRoDjCQvyy2X5tuiIEMHW+8QbN6jewk2oFWZ4v28DUYyq
MkhEAJQaVtq2FbzCv7AuuXwv8RRMG1rGM4zYLy28htdFeQopmqlNDkSalvODoZXy
WhFXYJgO8mP8ag==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:33 2025 by rpki-client