Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
File:                     HHOn_DBLwC2AdEdtB121zc0tq94.mft (raw, json)
Hash identifier:          ui+u0tT6Z0xQUtGKem8OsumNnzCh3WG+8krFaiS/Uz0=
Subject key identifier:   60:01:97:81:2F:36:13:19:0C:EC:43:86:63:7C:46:E5:5C:B7:23:A3
Authority key identifier: 1C:73:A7:FC:30:4B:C0:2D:80:74:47:6D:07:5D:B5:CD:CD:2D:AB:DE
Certificate issuer:       /CN=1c73a7fc304bc02d8074476d075db5cdcd2dabde
Certificate serial:       0199FDDA3CBFA35B270B82CF77CB787EA05B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 19:02:42 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:42 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:42 +0000
Files and hashes:         1: HHOn_DBLwC2AdEdtB121zc0tq94.crl (hash: 9m2w4Y9fFoylhiUZKr8HzxAZKI5TKgVouls7jd3vGk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:da:3c:bf:a3:5b:27:0b:82:cf:77:cb:78:7e:a0:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c73a7fc304bc02d8074476d075db5cdcd2dabde
        Validity
            Not Before: Oct 19 19:02:42 2025 GMT
            Not After : Oct 20 19:02:42 2025 GMT
        Subject: CN=600197812f3613190cec4386637c46e55cb723a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:40:ee:ee:10:bb:dd:59:ff:05:6c:75:7c:41:
                    b9:24:58:5b:26:98:67:77:f8:97:2e:ea:50:6a:a6:
                    75:a0:8b:8e:4a:98:ea:0b:79:c0:86:01:88:3c:7b:
                    55:e1:76:43:04:d8:8b:47:56:6a:ab:0b:c9:d1:21:
                    20:d1:82:30:2e:dd:56:a8:fe:f1:58:3e:f5:ed:60:
                    14:cb:3e:f7:f8:fd:de:e4:d2:62:00:fb:6d:53:cf:
                    59:cd:cc:b5:bc:c6:1d:d8:93:63:37:93:e1:f8:ff:
                    1b:3b:00:e9:91:79:bd:eb:c6:41:a9:c5:51:ba:7e:
                    dc:bd:4e:3a:ea:57:e8:b7:84:03:4b:f5:06:b1:99:
                    6e:d9:e3:33:a2:a9:54:d8:07:32:64:0d:18:6b:b8:
                    e7:a9:7d:98:2e:d7:7b:cc:0e:0d:7b:0c:27:67:37:
                    67:df:e9:d5:86:51:da:a0:c9:cb:62:74:9f:3a:fe:
                    e1:81:75:11:a7:50:73:6f:d9:62:79:95:7b:56:86:
                    a4:56:da:1a:f0:c1:2d:0d:3e:aa:24:52:14:e6:44:
                    92:05:a8:07:02:dd:2b:c7:ee:24:77:a8:45:f5:96:
                    97:2a:ce:47:71:2e:2e:e6:58:32:91:54:e2:ff:6c:
                    af:be:b4:6f:18:4a:79:48:4c:d5:79:18:f2:f6:4c:
                    0b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:01:97:81:2F:36:13:19:0C:EC:43:86:63:7C:46:E5:5C:B7:23:A3
            X509v3 Authority Key Identifier:
                keyid:1C:73:A7:FC:30:4B:C0:2D:80:74:47:6D:07:5D:B5:CD:CD:2D:AB:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:3e:6d:d4:8e:83:2f:ff:0d:be:1c:7f:0e:16:59:2f:77:d5:
         fc:37:b2:33:61:21:9c:1c:03:ad:89:2a:8e:18:7e:a0:36:81:
         67:a2:2e:85:c4:b0:6e:a4:fc:62:08:59:89:ed:3b:f5:72:f0:
         1d:49:6d:d0:fd:ab:39:c8:ef:64:fd:cb:02:26:10:52:fb:84:
         44:96:33:80:47:66:59:1d:18:8b:2c:45:5b:c3:c5:c4:f9:32:
         ff:6f:b3:52:c8:4d:58:cb:a9:88:29:3d:e3:ac:03:b2:1a:18:
         bb:ed:7d:7f:64:5c:d5:b8:40:71:0e:cb:7e:64:45:05:ec:7f:
         0b:3c:e9:83:6a:c7:fb:f1:74:35:38:17:17:b9:06:d3:6f:25:
         89:ce:70:4f:ca:75:be:61:64:e4:0a:39:90:bd:2f:cf:67:12:
         f6:89:03:85:a3:f1:ff:e6:a1:92:66:f0:41:c4:b1:c0:ff:00:
         f9:72:45:4d:cc:76:56:96:da:17:ff:94:cf:0a:35:8b:5c:a5:
         5a:9f:d6:63:5d:83:31:82:da:df:28:05:23:ed:c8:38:37:af:
         63:d3:84:01:61:1d:9f:29:2e:96:28:cc:02:e6:8b:0c:36:bc:
         9e:e4:75:f7:8b:7d:e1:37:99:e0:91:aa:a6:61:94:c5:02:53:
         47:11:8b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:45 2025 by rpki-client