Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
File:                     HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft (raw, json)
Hash identifier:          CK9NsFMtTDblipRVPaK9m8ybZ/sBdpXN6fU1zwikq5U=
Subject key identifier:   7C:C7:77:D8:C6:B1:64:6B:18:04:02:2A:1A:32:F3:C1:42:04:FE:15
Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
Certificate issuer:       /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Certificate serial:       0199FB45811D255076E9AFE46BC5FFD15C49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
Manifest number:          16E7
Signing time:             Sun 19 Oct 2025 07:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:00 +0000
Files and hashes:         1: HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl (hash: 0pxna5ZCYvA1m7Blj/8C8KJ3kb9JahJ2UZ5rQxS7i30=)
                          2: JrMu8Fv-EJ0gYHcDKiU_A3eevzc.roa (hash: 6s6fSOnj2fawBTt5pakrIRbKDkLV0dgDjLyUP/ka7Zs=)
                          3: Yv3OBlam3VOOyrqHnKRvnmbQqTE.roa (hash: c4F3qlWubFRDD6IUHkMCGZaiuQoE5JPsyXqZuaXssXk=)
                          4: sZOw6ZmAV-eW5usk1RjXBfJwu3k.roa (hash: xYRWDuxjHSuoMKKmk6k/DnQlZPxerY0wU1cLVyqv9fE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:81:1d:25:50:76:e9:af:e4:6b:c5:ff:d1:5c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
        Validity
            Not Before: Oct 19 07:01:00 2025 GMT
            Not After : Oct 20 07:01:00 2025 GMT
        Subject: CN=7cc777d8c6b1646b1804022a1a32f3c14204fe15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d0:f8:a1:87:ef:d9:3d:95:ae:89:2f:27:96:
                    c9:38:13:34:2c:72:02:27:42:be:4f:7f:ab:33:be:
                    da:48:f5:05:e0:6c:a9:79:63:ca:cd:9c:d1:fa:49:
                    3e:2c:d5:33:b1:ee:57:8f:fe:0a:aa:50:8f:00:31:
                    69:ef:d5:a1:20:e2:f3:06:5f:49:bb:6e:05:f0:7a:
                    08:7a:b1:ca:8a:e9:c9:84:94:49:06:16:0e:32:57:
                    28:62:b9:06:82:e5:0d:8b:4f:23:42:8c:1d:7b:c8:
                    fd:eb:26:a6:46:8e:d4:a6:a3:3a:49:7f:4e:ab:a6:
                    29:e7:bb:bc:37:fe:da:39:e9:b4:da:84:87:ac:f1:
                    68:7c:50:25:d8:d7:3d:ca:6a:47:10:87:eb:0b:d4:
                    a3:cb:20:3c:3d:06:66:ed:73:2b:bc:7f:4f:1d:39:
                    d1:a0:70:17:c2:af:8d:7c:7b:be:d7:19:fd:e3:d8:
                    a2:e6:65:22:0a:a7:4b:02:a4:55:74:25:2b:3f:e1:
                    e9:05:b1:35:3b:bb:14:b7:c4:b9:f4:a9:13:5b:42:
                    d9:12:34:22:09:0a:5c:3a:ec:9e:d5:bd:9e:60:97:
                    75:81:e2:f4:9e:74:01:fe:91:ae:0e:d1:89:c8:87:
                    ae:70:93:e5:3f:3d:b0:b8:7a:8f:f8:54:c9:38:aa:
                    ce:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C7:77:D8:C6:B1:64:6B:18:04:02:2A:1A:32:F3:C1:42:04:FE:15
            X509v3 Authority Key Identifier:
                keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d1:77:59:f7:ec:c7:34:95:35:d0:8a:50:f1:de:3b:66:b3:
         f5:af:5e:02:98:15:9c:f6:fe:55:d2:be:9e:03:f1:3d:95:da:
         eb:60:dd:78:38:18:57:e0:d1:9f:7f:77:12:1e:20:fd:9a:ec:
         df:09:88:f8:9a:6f:85:cb:9c:27:22:48:3b:b0:eb:c4:c9:e3:
         6a:17:50:02:be:30:87:d7:9c:c1:a6:a5:6d:20:f4:0a:8c:6a:
         17:b8:57:79:21:18:06:29:f6:4c:a0:dd:b5:14:92:6c:95:95:
         f2:f8:bf:5a:22:fb:7a:bc:36:0c:cc:d4:46:25:f7:73:6b:20:
         cc:91:45:db:3e:61:9d:64:e5:8a:8d:05:e3:11:5b:b0:d2:d1:
         86:37:81:40:89:06:6f:16:ef:f1:9b:c5:ae:e9:38:4b:73:bc:
         62:c3:b4:5f:6c:3d:3a:12:90:da:5c:ad:45:cd:82:42:5f:62:
         59:8e:82:6a:78:65:60:6a:5e:0f:8c:9e:7a:83:29:d6:bb:07:
         86:00:05:ac:3a:71:dc:50:47:a8:c9:5a:8d:ea:e6:c6:a2:55:
         45:58:6b:ec:25:c6:bf:a1:77:b4:b3:40:36:8a:31:fd:74:7a:
         46:9e:ee:cd:4c:42:35:17:cd:94:42:12:c1:eb:2a:fb:62:2f:
         a9:96:1f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:06 2025 by rpki-client