Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
File:                     HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft (raw, json)
Hash identifier:          0HlncVOFIeV2X5fzJMBEZOEiTp1mSVdkGXGOCzG+Yvg=
Subject key identifier:   26:AE:43:B8:5B:49:13:8F:54:5B:99:BE:81:6F:DD:74:30:45:6D:78
Authority key identifier: 1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
Certificate issuer:       /CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Certificate serial:       0199FB7CB01BD763428C7BB6B1D7000B89D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
Manifest number:          104E
Signing time:             Sun 19 Oct 2025 08:01:16 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:16 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:16 +0000
Files and hashes:         1: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl (hash: jcoYDmhvOCj3jspjesSTKdXRpsmR8YcPIwhlsTAaVs8=)
                          2: LjvscEK241_TnXIZYmD9gfa2eq0.roa (hash: 0euqfqSMh1dqgtwiYuyK1jN/xv8/2F/xzn29uxLt1Bo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:b0:1b:d7:63:42:8c:7b:b6:b1:d7:00:0b:89:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
        Validity
            Not Before: Oct 19 08:01:16 2025 GMT
            Not After : Oct 20 08:01:16 2025 GMT
        Subject: CN=26ae43b85b49138f545b99be816fdd7430456d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9b:29:93:aa:73:c5:95:20:f5:43:9b:be:a3:
                    a0:56:06:6c:f7:4e:95:92:94:82:06:79:94:cc:67:
                    9c:f0:0b:d5:53:f8:b9:b4:47:1e:0e:c9:47:5f:6d:
                    39:e8:80:b0:5d:42:df:89:cf:dd:e1:3d:04:1c:85:
                    74:db:38:3f:e8:76:4c:26:db:9e:4d:c6:47:5c:8e:
                    cc:c3:e3:ee:ed:3b:07:45:32:f8:23:37:9b:5e:a9:
                    24:e7:9e:58:b2:78:d1:cf:4f:c3:e9:5f:e4:6d:ca:
                    46:36:7c:6e:e2:7c:69:c1:b1:92:6d:67:f6:17:06:
                    2e:04:df:8b:83:10:46:53:44:73:00:5a:5d:e3:e5:
                    f6:d7:17:91:56:88:21:3a:d6:19:c7:8c:6e:17:32:
                    b1:b0:c2:db:1e:c9:13:f9:95:23:cd:54:c9:5f:4f:
                    cb:b8:ba:0f:42:af:6e:67:36:9e:c4:38:f4:80:b0:
                    73:cd:98:69:26:06:86:09:1d:7a:fe:92:71:af:13:
                    0f:ed:ca:ab:ec:35:b4:f0:d9:c0:a7:ed:f3:b8:48:
                    5f:8b:26:bb:bd:48:6e:32:44:38:f6:3e:8f:bf:73:
                    88:6c:71:c1:94:8e:d2:2e:19:9d:29:d1:1c:02:53:
                    33:72:00:22:34:4e:ed:f2:6a:8e:ca:fa:7d:c1:92:
                    d7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AE:43:B8:5B:49:13:8F:54:5B:99:BE:81:6F:DD:74:30:45:6D:78
            X509v3 Authority Key Identifier:
                keyid:1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:8f:df:8c:f5:64:7f:c0:b4:55:7b:7a:b5:1b:53:29:12:7a:
         67:6d:22:69:2b:e9:a1:db:70:68:b2:9b:31:c3:d7:e1:42:28:
         21:62:00:72:fe:f3:c1:12:ab:b4:d7:16:ce:a5:1e:0d:c6:bb:
         4e:b7:03:91:c6:f4:f7:b7:a1:d0:25:42:98:df:45:2f:a1:b1:
         f9:c1:bf:c0:82:c7:53:54:4c:fe:9c:60:6d:55:e7:f9:a9:04:
         e6:65:5e:c9:67:97:99:5d:50:09:65:9b:0d:99:73:ef:84:cf:
         a7:47:bf:90:02:37:f2:fb:58:be:33:dd:36:8e:bf:f2:b5:9c:
         20:ce:83:af:6a:67:7d:fd:da:cd:ad:1b:7f:73:fb:74:ec:e2:
         32:81:90:b3:90:4b:39:12:d2:4f:ea:23:af:9f:be:33:2f:63:
         88:0c:d4:33:c6:9d:35:44:c9:1c:3f:4e:2d:11:5c:37:72:49:
         c6:67:00:75:f6:76:35:c3:8c:23:f2:82:1a:be:24:4a:0e:18:
         72:56:7d:90:c3:76:e6:85:42:9f:44:68:03:4b:18:9f:49:78:
         9f:7b:6c:a2:c7:2b:ad:43:2d:06:a6:1e:92:f4:09:cd:ff:fa:
         39:23:e7:3d:f0:7a:a7:b3:12:c9:0e:73:75:41:7b:f1:17:6f:
         bb:a5:86:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:30 2025 by rpki-client