Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
File:                     HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft (raw, json)
Hash identifier:          zPpCvTQAg42ND8JzTNStu4GyeUFHDmDHWzHM+TYjAqE=
Subject key identifier:   6D:F6:B1:3C:23:A7:13:0D:23:C5:FC:2A:4D:50:6E:9A:56:B6:F4:87
Authority key identifier: 1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C
Certificate issuer:       /CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
Certificate serial:       019961D98D49DD753C5FE8718AFF7BB1DFA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
Manifest number:          169C
Signing time:             Fri 19 Sep 2025 12:01:11 +0000
Manifest this update:     Fri 19 Sep 2025 12:01:11 +0000
Manifest next update:     Sat 20 Sep 2025 12:01:11 +0000
Files and hashes:         1: GWr4Sme5UYzDHbUjsjhY0fpO0ug.roa (hash: 49YBW2j0tiBN16/cc6cP9HT+URCIjSHjxZeBvIsvdsc=)
                          2: HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl (hash: SZQfUPeLvGud4WQ7pCHCVw2GACOasYOclzvsYH1/xtk=)
                          3: mLoigfB9vrInWq3nJ0J7Wxmf0t4.roa (hash: 4FwhfGdWmlyBhnx1X+ZJalRnXOeqaX7xZDQnuMN3V5I=)
                          4: sic7I93GRhDt57SAuLWMJM0rRcU.roa (hash: qQ7zCE3q2zMcN3JY5v3N1hOAaebaA4wsKuaRsrsFUDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:61:d9:8d:49:dd:75:3c:5f:e8:71:8a:ff:7b:b1:df:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
        Validity
            Not Before: Sep 19 12:01:11 2025 GMT
            Not After : Sep 20 12:01:11 2025 GMT
        Subject: CN=6df6b13c23a7130d23c5fc2a4d506e9a56b6f487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9a:76:75:6c:f3:4d:e3:69:6e:55:6e:62:25:
                    82:d8:30:a6:d6:21:77:9d:e6:fd:09:ad:3e:06:05:
                    b7:54:3e:1a:2a:83:91:0b:d9:dd:ad:0e:42:86:1f:
                    9d:8e:f5:4f:a9:ab:da:91:8e:74:dd:46:be:c1:6c:
                    ab:ba:48:8c:da:d6:1c:83:6a:a2:88:47:0b:de:d7:
                    7b:26:4d:11:39:b0:2d:56:97:d0:56:0f:37:51:4a:
                    39:d9:32:92:3c:83:d8:53:17:6e:f1:a6:25:a7:15:
                    e9:2f:e9:02:46:38:6a:c4:40:5d:00:58:4d:85:fa:
                    4b:3e:a3:a4:3e:7e:05:5c:e0:ef:03:62:48:69:b3:
                    09:c0:1d:fe:45:59:d5:d7:c5:56:28:b3:af:d2:e3:
                    cf:1d:37:c3:e7:1d:bc:83:44:9b:c8:5d:52:ff:40:
                    3c:97:fc:79:b1:38:8b:d9:9b:29:4d:c6:38:c8:b6:
                    60:9e:26:b1:23:e0:f8:7e:21:ed:88:c5:1e:63:2f:
                    c9:04:0f:44:cb:9b:22:75:f3:c6:e4:1f:f5:14:00:
                    bc:bc:28:9a:7e:de:17:e7:6f:ba:21:09:df:90:a4:
                    02:86:1e:2f:b4:41:0a:06:b8:c0:76:81:41:79:80:
                    6a:27:51:50:da:8d:8d:2f:19:97:00:1c:85:cd:39:
                    18:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F6:B1:3C:23:A7:13:0D:23:C5:FC:2A:4D:50:6E:9A:56:B6:F4:87
            X509v3 Authority Key Identifier:
                keyid:1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:2b:94:8a:ae:1d:38:3b:d5:80:91:56:2a:c8:0b:7e:32:9d:
         0b:b4:b6:7a:a1:a3:ce:1b:6f:80:1c:ac:5d:ca:f8:89:6a:c6:
         9f:f9:a8:2c:fe:19:62:03:69:f0:d6:01:8c:16:60:4c:84:82:
         16:c1:c0:7f:7a:a3:46:26:c6:36:79:f6:24:de:10:7c:18:a3:
         2e:a2:d8:65:76:35:c9:b6:61:58:f0:c9:d4:1a:34:7e:70:f2:
         63:4c:02:5c:9c:78:1b:c4:12:54:40:77:dd:dd:ea:3a:fd:c5:
         ec:79:ef:e2:69:82:4f:82:84:dc:f8:be:1b:3d:f7:d5:33:3c:
         02:22:ba:f2:8d:6a:45:b4:e5:39:00:91:58:59:f0:8f:d1:7f:
         5d:d6:5d:43:ea:79:5b:02:91:41:ca:99:e7:c6:84:65:c3:21:
         85:a7:71:42:3d:bd:70:e2:77:1b:54:5e:98:92:ca:a0:e4:be:
         7a:c7:56:b3:ec:de:91:84:96:ad:60:03:7b:eb:e6:17:4b:9c:
         9d:61:f9:e3:1e:47:e7:64:8d:7e:68:5c:c5:36:42:16:b2:82:
         36:61:0a:16:d5:c3:03:56:00:cd:34:1c:03:1d:c1:74:93:f7:
         c4:89:68:05:6e:75:9a:22:60:2b:31:78:ec:45:ca:0c:46:ed:
         8e:41:fd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 15:30:46 2025 by rpki-client