Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
File:                     HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft (raw, json)
Hash identifier:          ZPGzmPBrirulYTZk2qlQHanwzID38X8yD6oZRt+d6S8=
Subject key identifier:   C5:1F:8F:61:90:B2:35:EF:3F:B1:EB:D7:55:D2:B8:3A:97:5C:59:89
Authority key identifier: 1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E
Certificate issuer:       /CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
Certificate serial:       0199FE7D9786F20298476B261FE033466BC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 22:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:07 +0000
Files and hashes:         1: HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl (hash: xHvYf2oc0bYWgVSiKafa/toJQlQ5SYszDABo7Vkw+sA=)
                          2: ZFvHbKMASPTw38lOs9oWeuw1U-4.roa (hash: HZhplikQvG33rAVAtLNyD/3IfM/BXxh9qsmuRDaoo/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:97:86:f2:02:98:47:6b:26:1f:e0:33:46:6b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
        Validity
            Not Before: Oct 19 22:01:07 2025 GMT
            Not After : Oct 20 22:01:07 2025 GMT
        Subject: CN=c51f8f6190b235ef3fb1ebd755d2b83a975c5989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ff:9c:5d:d4:69:1d:0e:1e:42:8e:52:3a:b9:
                    a0:ee:81:f7:6e:77:91:52:1c:07:51:84:e4:d9:17:
                    48:49:c0:08:06:48:c9:dc:b9:d3:1d:2f:9d:fb:29:
                    6e:f2:5c:0e:b0:9b:d1:52:7a:b8:99:28:d3:26:f5:
                    4d:20:69:62:23:3a:71:67:73:05:97:79:0c:e7:39:
                    38:15:6b:e2:e3:29:d2:29:07:c3:17:c3:29:bb:68:
                    9e:c3:ca:69:22:42:1f:21:8a:fa:a6:98:da:ad:30:
                    7b:ac:68:6e:6c:73:4a:bd:e7:13:c1:46:73:a5:23:
                    bd:38:fb:9d:78:02:47:1f:3a:38:59:d6:5b:7f:56:
                    26:65:2d:b8:92:81:9f:58:03:93:2f:cc:2c:ba:67:
                    7e:8b:94:5d:79:09:5e:89:25:87:db:e7:0b:59:dd:
                    af:a7:42:03:4d:4b:a1:b5:6a:42:28:70:12:dd:b5:
                    1e:c1:d7:f9:38:de:37:f0:68:04:89:6b:d4:14:6d:
                    84:31:60:b6:d3:f2:ef:bb:de:48:64:f4:2d:06:d2:
                    d4:90:e7:3c:42:17:ce:1d:1a:4d:2f:17:6d:99:2e:
                    5c:1a:26:67:88:be:77:89:1e:fb:38:ed:b1:9f:85:
                    89:ac:f6:c5:00:e5:a0:55:90:a9:29:e5:85:18:aa:
                    07:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1F:8F:61:90:B2:35:EF:3F:B1:EB:D7:55:D2:B8:3A:97:5C:59:89
            X509v3 Authority Key Identifier:
                keyid:1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:62:31:11:a0:67:02:f2:9c:d3:18:42:48:61:b9:4c:76:30:
         d9:5a:b5:eb:5a:67:bf:ca:8b:0a:7e:63:52:f9:b5:c6:9c:33:
         73:c0:6f:fa:af:89:4d:1d:15:5c:2e:b1:2b:23:d9:e2:a2:17:
         83:4a:7b:af:1e:78:bb:ac:62:38:12:95:99:37:0e:bf:83:15:
         91:86:15:50:14:02:1b:5f:ea:71:29:a5:84:5d:69:b3:b8:09:
         cb:34:77:b7:a9:4e:a6:23:f9:00:82:bc:31:92:5e:8a:74:08:
         a4:b6:bb:11:e0:6a:33:07:c3:28:b2:c0:a2:4d:c7:39:b8:62:
         ad:69:83:f8:c0:44:5d:b8:a4:2a:48:9e:44:6b:2f:02:06:11:
         41:c8:c0:08:79:15:df:cc:55:82:fd:f1:67:7d:53:83:e6:40:
         51:ae:68:4f:25:d5:9f:23:6e:ec:25:9b:89:80:d6:b7:3f:91:
         0d:0c:64:1a:78:af:85:03:6a:99:4e:f9:da:25:89:07:06:36:
         fd:00:d1:23:9c:92:bd:82:05:4f:2a:d9:bc:c8:dd:7e:a4:2a:
         d2:5a:97:61:10:a4:97:b0:b5:41:d7:f8:59:80:df:c1:e1:18:
         02:e4:bc:8d:4f:26:a2:92:71:94:d2:c5:e3:a8:25:6f:ec:b7:
         7e:3a:3d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:15:43 2025 by rpki-client