Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
File:                     HCcW7wn65JDMfNvTYJTbXz0KHHI.mft (raw, json)
Hash identifier:          J89i1bX5SIzaBsHS6yllJZQc4SAE9soZYAaH+c5T+1g=
Subject key identifier:   5C:22:86:58:1B:A0:EC:F7:62:8B:2C:74:EE:4F:08:D7:2C:C2:35:98
Authority key identifier: 1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
Certificate issuer:       /CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Certificate serial:       019A03353A42CD1EF957EF15150C64EC51A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
Manifest number:          0656
Signing time:             Mon 20 Oct 2025 20:00:11 +0000
Manifest this update:     Mon 20 Oct 2025 20:00:11 +0000
Manifest next update:     Tue 21 Oct 2025 20:00:11 +0000
Files and hashes:         1: CpQOplnmKu5LLulHc8JnvbebR4w.roa (hash: 5reIQFf+aPQY/29qAhB9EgFnG+Par8TwmIu2wMdsT6g=)
                          2: HCcW7wn65JDMfNvTYJTbXz0KHHI.crl (hash: U8s277yPVRtlm26t1dhdK/i+7EfTlqMd57BTgQMwRKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 20:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:03:35:3a:42:cd:1e:f9:57:ef:15:15:0c:64:ec:51:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
        Validity
            Not Before: Oct 20 20:00:11 2025 GMT
            Not After : Oct 21 20:00:11 2025 GMT
        Subject: CN=5c2286581ba0ecf7628b2c74ee4f08d72cc23598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:43:c1:28:96:e6:70:7a:60:9a:f3:39:19:a2:
                    1a:2b:19:2b:05:25:3e:4a:62:0b:56:1b:73:fe:1c:
                    ab:af:b0:a3:14:9a:87:23:9d:46:c6:d5:cd:dc:58:
                    df:41:f2:9d:69:72:37:ff:aa:ef:fe:cb:ab:3c:03:
                    aa:c1:4a:1a:b2:8d:a6:0e:e4:41:cb:a7:82:41:f4:
                    c1:01:e1:dd:db:af:fd:fc:02:ac:f3:6a:6e:ed:f9:
                    e4:d2:49:d0:8c:dc:a4:16:b9:13:d1:69:c5:02:24:
                    1c:99:b4:28:6d:f8:99:6f:83:2d:17:e8:44:6b:51:
                    32:c4:80:50:25:c2:50:f3:52:79:f8:0b:45:f0:60:
                    d9:bb:da:7c:e8:f8:6f:d7:da:41:e4:1b:3e:0e:59:
                    fb:d4:b0:ac:07:43:96:37:74:fb:f5:a0:19:c0:ec:
                    34:04:82:5d:2a:84:c7:0d:29:b9:d4:20:52:a8:bf:
                    07:df:e6:0b:ab:73:72:ef:4b:87:e3:40:85:59:58:
                    b6:c9:0a:b4:36:6f:13:80:12:2e:0f:b1:7d:40:90:
                    51:02:aa:78:7c:89:88:e9:99:40:77:d2:06:9c:e4:
                    d6:eb:90:16:42:bb:ea:b6:01:bd:bc:5a:1c:49:9f:
                    e7:15:9b:11:df:3c:d2:8a:c8:12:ca:05:45:e4:e0:
                    21:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:22:86:58:1B:A0:EC:F7:62:8B:2C:74:EE:4F:08:D7:2C:C2:35:98
            X509v3 Authority Key Identifier:
                keyid:1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:45:c4:ec:9f:79:da:1f:47:ae:7f:18:97:9d:32:25:9d:75:
         e2:b1:05:7f:9b:1a:5b:8f:09:7b:21:27:5b:5a:98:94:c6:33:
         7d:40:9d:8c:9a:19:88:d3:c8:e4:6b:11:bb:6c:8a:61:a8:a6:
         04:b5:3b:81:c3:ac:10:cd:eb:55:77:e0:bc:01:b3:a7:41:7c:
         8a:25:2b:be:53:5a:28:69:3a:59:0d:68:74:fb:59:0d:12:7c:
         73:df:06:26:73:4f:b2:d7:da:11:40:ba:56:02:36:6f:1b:b7:
         f6:1e:5c:41:c0:89:78:8f:c1:a3:fa:b3:cd:fe:06:6c:5d:f6:
         54:c2:49:72:22:eb:7b:88:f9:ae:f8:d6:e9:d4:7b:1c:76:c2:
         6d:bc:d3:af:a3:27:bf:99:08:ae:56:79:ea:3b:ae:a1:5c:06:
         9f:1d:5e:81:11:c8:5b:c3:2f:ad:7b:b5:9b:cb:b5:01:82:38:
         8f:eb:9d:ef:1a:87:ae:bd:b2:65:bc:10:14:6d:c4:63:64:d9:
         d5:12:7a:04:ad:d6:46:92:bc:c0:29:30:84:3f:71:ed:27:c5:
         55:93:69:0e:32:76:21:3f:fe:44:c2:3f:54:88:14:e6:2e:07:
         55:1e:81:06:f4:99:f5:2f:47:13:44:bf:35:4e:6a:91:82:c5:
         98:32:ec:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoDNTpCzR75V+8VFQxk7FGlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMjcxNmVmMDlmYWU0OTBjYzdjZGJkMzYwOTRkYjVmM2Qw
YTFjNzIwHhcNMjUxMDIwMjAwMDExWhcNMjUxMDIxMjAwMDExWjAzMTEwLwYDVQQD
Eyg1YzIyODY1ODFiYTBlY2Y3NjI4YjJjNzRlZTRmMDhkNzJjYzIzNTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEPBKJbmcHpgmvM5GaIaKxkrBSU+
SmILVhtz/hyrr7CjFJqHI51GxtXN3FjfQfKdaXI3/6rv/surPAOqwUoaso2mDuRB
y6eCQfTBAeHd26/9/AKs82pu7fnk0knQjNykFrkT0WnFAiQcmbQobfiZb4MtF+hE
a1EyxIBQJcJQ81J5+AtF8GDZu9p86Phv19pB5Bs+Dln71LCsB0OWN3T79aAZwOw0
BIJdKoTHDSm51CBSqL8H3+YLq3Ny70uH40CFWVi2yQq0Nm8TgBIuD7F9QJBRAqp4
fImI6ZlAd9IGnOTW65AWQrvqtgG9vFocSZ/nFZsR3zzSisgSygVF5OAhZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwihlgboOz3YossdO5PCNcswjWYMB8GA1UdIwQY
MBaAFBwnFu8J+uSQzHzb02CU2189ChxyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENjVzd3bjY1SkRNZk52VFlKVGJYejBLSEhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82YTdlYTItYWJmZC00NGQyLWE3YWUt
MTRkMWFjMzRhNWYyLzEvSENjVzd3bjY1SkRNZk52VFlKVGJYejBLSEhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82YTdlYTItYWJmZC00NGQyLWE3YWUtMTRkMWFjMzRhNWYy
LzEvSENjVzd3bjY1SkRNZk52VFlKVGJYejBLSEhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUXE7J95
2h9Hrn8Yl50yJZ114rEFf5saW48JeyEnW1qYlMYzfUCdjJoZiNPI5GsRu2yKYaim
BLU7gcOsEM3rVXfgvAGzp0F8iiUrvlNaKGk6WQ1odPtZDRJ8c98GJnNPstfaEUC6
VgI2bxu39h5cQcCJeI/Bo/qzzf4GbF32VMJJciLre4j5rvjW6dR7HHbCbbzTr6Mn
v5kIrlZ56juuoVwGnx1egRHIW8MvrXu1m8u1AYI4j+ud7xqHrr2yZbwQFG3EY2TZ
1RJ6BK3WRpK8wCkwhD9x7SfFVZNpDjJ2IT/+RMI/VIgU5i4HVR6BBvSZ9S9HE0S/
NU5qkYLFmDLsGw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:42:17 2025 by rpki-client