Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
File:                     HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft (raw, json)
Hash identifier:          pEGZUOZoAQWBW33mTUPv+mWgfM/tDbBzeRah/CdyzsY=
Subject key identifier:   64:0D:F2:64:10:45:F3:52:82:15:C5:E1:4A:16:1E:29:FC:3B:C1:5A
Authority key identifier: 1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E
Certificate issuer:       /CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e
Certificate serial:       0199FBEBD27A2B9BEB528418C886A7610166
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
Manifest number:          075C
Signing time:             Sun 19 Oct 2025 10:02:39 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:39 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:39 +0000
Files and hashes:         1: HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl (hash: DkdBSY43AptHANcANLJkPzDaWIoEmUVW3W7wRZ7ThXA=)
                          2: bIBmhUC2WLWBXyi5VaCHLFuHkDs.roa (hash: F54YraMKL44U0jhJwgmaruTpnrxsP2uQrqeXw7OujLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:d2:7a:2b:9b:eb:52:84:18:c8:86:a7:61:01:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e
        Validity
            Not Before: Oct 19 10:02:39 2025 GMT
            Not After : Oct 20 10:02:39 2025 GMT
        Subject: CN=640df2641045f3528215c5e14a161e29fc3bc15a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bf:81:18:ee:a6:91:96:df:4f:75:dd:39:cc:
                    90:bd:d8:33:3b:48:1b:a4:87:00:a7:05:f7:4d:c8:
                    fd:7b:cf:73:1f:eb:93:2e:06:e9:b2:8b:f8:27:ab:
                    d8:f6:ca:94:d3:ec:1d:4b:b1:e7:16:80:a0:12:c0:
                    a5:2f:05:fc:a3:5d:da:bd:45:58:ef:ef:0d:43:e9:
                    1f:af:15:a0:dc:aa:ac:be:1b:c8:af:7a:3a:e6:4f:
                    27:a1:6f:85:d2:7c:d7:4f:0e:80:61:d6:01:4e:6e:
                    52:99:95:c1:d3:1b:f7:01:2b:43:08:6a:77:9e:32:
                    0d:12:5f:31:0f:c5:62:4b:8a:61:c3:77:00:00:3f:
                    a8:2f:af:73:cc:f7:59:cb:01:11:72:ce:44:a1:a1:
                    e2:0f:9a:07:b3:dc:79:04:e6:06:7f:a4:f0:9b:37:
                    92:a3:50:e8:32:74:b7:8f:70:6f:c0:0b:18:d2:c7:
                    f7:e1:1e:22:f8:88:12:80:c6:ef:6f:2e:1f:49:f2:
                    92:25:f7:a7:31:76:50:14:a8:e5:6a:54:f6:8a:2c:
                    a3:01:08:af:a2:39:dc:fd:08:b7:ac:0e:05:a1:80:
                    13:be:36:93:cf:bd:ca:0f:be:f7:87:10:1a:8d:e4:
                    7f:f0:39:97:ba:35:28:0c:e9:91:7c:3f:68:cc:c3:
                    53:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0D:F2:64:10:45:F3:52:82:15:C5:E1:4A:16:1E:29:FC:3B:C1:5A
            X509v3 Authority Key Identifier:
                keyid:1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:31:97:7c:79:bf:b8:49:e9:ab:37:d7:4f:a8:c3:0a:cb:d3:
         75:78:37:03:a8:03:e7:22:6e:1d:d5:28:90:25:c1:92:e4:3d:
         e9:c2:ca:ef:d1:53:0a:30:e6:66:3a:93:f2:65:9c:67:7e:44:
         73:80:2b:9f:88:df:a3:09:15:6a:0a:11:e0:77:ac:62:58:d1:
         c4:60:8f:af:83:a1:3f:99:fb:cd:22:41:ab:fd:33:f5:5a:4b:
         90:1d:75:d4:b0:e5:a8:80:5c:ce:7f:d9:af:dd:a1:3c:16:3c:
         fa:67:e3:11:04:55:3a:58:16:ab:3b:3b:94:4c:af:1b:c9:c1:
         53:5c:fd:38:72:75:5c:4b:f5:58:f9:e3:ac:dd:c3:c9:1e:ff:
         a6:10:f7:f4:a7:9b:ad:ee:52:53:23:8d:2f:64:58:a9:ae:0e:
         a2:1b:c1:c7:02:5d:d6:a0:2b:84:38:37:a7:0e:31:b8:05:87:
         76:9f:76:e3:b0:09:1a:6f:57:01:bb:49:1f:f1:7e:fa:2c:cd:
         5c:a3:26:c2:da:6d:2b:ba:bf:93:22:9b:35:48:76:50:41:11:
         6a:15:5c:96:af:6d:c7:90:ec:f5:96:b6:7b:33:46:19:3c:d0:
         69:ac:18:ed:d0:79:14:04:55:4e:01:ea:ab:e0:5d:85:a1:87:
         9a:5c:04:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:12 2025 by rpki-client