Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
File:                     H0MPwJpxOySayqdniRHo0eMjOv0.mft (raw, json)
Hash identifier:          CDzz+gkWco2ZtQjVz98OnfPexpMr76udY3x3fJhnBAc=
Subject key identifier:   3D:26:8A:E3:6A:41:19:BD:01:35:85:85:76:85:FB:8E:AE:23:B9:64
Authority key identifier: 1F:43:0F:C0:9A:71:3B:24:9A:CA:A7:67:89:11:E8:D1:E3:23:3A:FD
Certificate issuer:       /CN=1f430fc09a713b249acaa7678911e8d1e3233afd
Certificate serial:       0199FB463724B3249C0198A3767B779BFA70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
Manifest number:          152C
Signing time:             Sun 19 Oct 2025 07:01:46 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:46 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:46 +0000
Files and hashes:         1: H0MPwJpxOySayqdniRHo0eMjOv0.crl (hash: UDvP3zZ+0YK8GY2yzoLWZyAkCZlL9XsP7GH6WK1mbDc=)
                          2: z1mTOG8VE9-v8P-Co5yPmIlf6B0.roa (hash: qAv01E+pevkkYz421oysRUur++ptzgLO7RhPrCkAgu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:37:24:b3:24:9c:01:98:a3:76:7b:77:9b:fa:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f430fc09a713b249acaa7678911e8d1e3233afd
        Validity
            Not Before: Oct 19 07:01:46 2025 GMT
            Not After : Oct 20 07:01:46 2025 GMT
        Subject: CN=3d268ae36a4119bd013585857685fb8eae23b964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ca:cc:5a:09:c2:99:ae:9c:24:30:69:1b:18:
                    86:da:4a:8b:24:7a:8d:03:76:3d:3e:fd:d4:b8:dd:
                    de:29:32:24:39:e1:10:bc:d7:bf:75:46:6e:dc:d9:
                    7e:08:9c:7a:35:31:5d:dd:ac:27:66:de:f2:3f:d0:
                    ae:50:8e:29:ff:64:f5:ce:23:77:e6:13:97:de:d9:
                    73:96:ed:8c:bf:7a:95:69:b5:5f:9f:d0:dd:3a:54:
                    4a:73:d7:21:85:d2:0c:4a:6e:d5:56:47:03:76:ef:
                    18:63:2f:29:35:3a:91:5d:0c:39:a4:68:66:51:7c:
                    94:36:b2:a3:d3:a6:9c:a6:a6:c9:af:d8:68:6e:29:
                    dc:bc:25:e5:cd:0b:75:a8:9b:12:72:5d:43:83:c1:
                    dc:96:d4:c3:cd:6c:c8:b9:18:56:be:cf:18:39:b4:
                    d1:b2:5f:f3:fa:2f:76:4b:1b:94:3d:3b:58:f0:d3:
                    12:7f:43:fb:9b:cb:d7:2d:80:a6:59:d5:38:a4:0b:
                    e0:ca:55:a9:75:ea:1f:6c:bf:99:f3:58:a8:36:65:
                    4a:51:9f:ab:5b:aa:88:f9:f0:98:d3:79:d6:0b:28:
                    9c:b7:42:81:fe:fa:99:7e:12:35:d3:d2:01:fa:61:
                    e8:26:6f:43:37:c0:a8:cd:26:c7:b8:aa:ef:48:7f:
                    37:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:26:8A:E3:6A:41:19:BD:01:35:85:85:76:85:FB:8E:AE:23:B9:64
            X509v3 Authority Key Identifier:
                keyid:1F:43:0F:C0:9A:71:3B:24:9A:CA:A7:67:89:11:E8:D1:E3:23:3A:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:62:5c:ea:92:8d:73:25:1d:08:84:96:31:6d:81:e5:56:94:
         0a:69:fc:ef:58:b2:43:f5:44:46:46:97:f4:00:f9:85:e8:49:
         5c:f3:99:98:14:0a:d1:59:24:a6:6a:14:6f:ce:ee:3c:a6:8b:
         34:f5:ba:3f:97:23:29:d0:7c:8c:eb:48:d8:28:a3:38:59:3d:
         9a:8a:1c:0d:13:d9:5c:e8:1b:f5:3b:bc:07:42:7d:66:d8:f4:
         ec:7a:49:a0:8f:82:97:8d:92:20:0b:08:ca:63:90:ba:c6:af:
         ac:44:36:ca:a4:77:8a:e4:3d:a9:ac:f6:0d:4b:a8:41:03:6e:
         16:9b:de:95:4b:a3:45:60:3e:6d:01:c3:df:28:86:83:63:bd:
         d3:68:77:54:e0:02:4f:32:03:bc:fb:4e:d3:f1:11:9d:3d:bb:
         cb:00:e4:ab:7b:c3:cb:53:44:59:6d:00:e8:63:cb:8d:1c:f2:
         ba:92:02:f9:7a:e4:45:b8:16:56:dc:fd:fb:c8:52:f1:c4:5d:
         7c:e9:d9:42:46:09:70:96:23:aa:bb:de:86:91:12:e5:ca:af:
         73:ef:6d:1b:3f:a9:ff:56:c7:4c:4c:83:67:c6:34:4c:2c:7d:
         09:b2:3c:7b:b3:b2:ef:65:c7:41:8e:bc:e1:76:88:d2:23:23:
         8a:4d:a5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:30 2025 by rpki-client