Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
File:                     2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft (raw, json)
Hash identifier:          GrMnbgTjVlGb1Vel8pOojf7Hf6FLELurrhbRS4pTDxU=
Subject key identifier:   93:90:9A:A1:2A:06:45:71:2B:09:95:4D:99:82:1D:C2:0A:1D:FE:E1
Authority key identifier: D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6
Certificate issuer:       /CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
Certificate serial:       019A047F988F90E308E38092E0553AE7162E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
Manifest number:          15D4
Signing time:             Tue 21 Oct 2025 02:01:02 +0000
Manifest this update:     Tue 21 Oct 2025 02:01:02 +0000
Manifest next update:     Wed 22 Oct 2025 02:01:02 +0000
Files and hashes:         1: 2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl (hash: sfUz64zqxFTGY09dgU2C+/t4Gal/vr1pEuCeaSciHlU=)
                          2: B5m6j_K3O894W_R_t6V6YidAg_M.roa (hash: bXrv4zwrH5nVqybqsixx97jvkGY3LFCIFwVY3pH6Bk8=)
                          3: KqKhKARLMvPV_bRfQE5O-Q0jitE.roa (hash: g5DaBAVimvDHhHZlO6bebh2BYJNntLdIOufL8sw6/TA=)
                          4: PSzX4ETQs2L8cNC3MHgmvmQQifU.roa (hash: UakKPUPcxegOjzkx7/qLz6OeHL3ixKpktOgsps0SIHU=)
                          5: gpM2Niv38-bAPpYWDWu_AiD_7fU.roa (hash: U97/Bujuoe+UqbMI2I87geGUh9XKKMGTDgPKSh0HsUc=)
                          6: v_tCnLJbfmXfnX8r8TkiKrJdo6U.roa (hash: 2qeSRWLeCZqoEkwlBGulwS0BehW+dyHuoHpo1B95cR8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 22:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:04:7f:98:8f:90:e3:08:e3:80:92:e0:55:3a:e7:16:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
        Validity
            Not Before: Oct 21 02:01:02 2025 GMT
            Not After : Oct 22 02:01:02 2025 GMT
        Subject: CN=93909aa12a0645712b09954d99821dc20a1dfee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:44:ba:74:d0:a0:cf:fb:d0:ed:1e:bd:d6:90:
                    4b:6a:3d:2c:bb:52:75:76:e6:34:88:bd:48:fe:5e:
                    8a:0f:60:ca:3b:82:ea:a5:98:05:6e:e6:86:88:8d:
                    18:73:1d:83:2d:81:9e:3e:e9:35:02:d5:d9:0b:da:
                    a1:f1:27:60:ba:3d:7e:ae:5c:19:d5:f3:32:ee:89:
                    1e:dd:1d:97:de:2a:ad:d1:63:63:69:97:62:f5:d7:
                    e2:4f:f1:75:bf:51:b3:17:2f:a7:0f:a8:b6:10:ec:
                    d9:33:ce:cb:14:d3:6f:80:23:c6:d9:f3:60:09:8e:
                    3e:5b:10:dd:84:9b:fd:ce:44:d9:3d:06:57:82:2e:
                    c7:01:2c:67:84:12:d5:ac:da:d9:50:11:e2:a9:7e:
                    e3:39:c3:0f:b6:a5:2d:3b:e0:90:61:62:87:bb:64:
                    45:c3:da:8c:85:da:8e:98:5d:1a:48:58:e8:e5:31:
                    71:c3:5a:96:80:79:43:14:c9:54:ea:b0:f2:79:1f:
                    da:49:dd:fd:32:e8:7d:6b:3f:8f:e4:7f:57:21:bb:
                    97:95:35:6f:70:9e:b3:84:75:81:88:dc:a3:19:22:
                    ed:76:18:58:ce:6f:b8:5a:41:ef:5c:73:79:41:ca:
                    10:d5:c0:03:62:7b:6a:f2:16:a4:3b:25:d3:55:3c:
                    52:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:90:9A:A1:2A:06:45:71:2B:09:95:4D:99:82:1D:C2:0A:1D:FE:E1
            X509v3 Authority Key Identifier:
                keyid:D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:c3:72:0c:c4:ec:86:b4:36:87:f4:99:8a:de:df:23:1a:12:
         6a:e9:7a:8f:1d:c9:17:be:dc:a5:7a:d2:2c:61:fc:ed:94:e8:
         b6:f3:67:58:25:4f:bc:1f:cc:8e:bf:45:a7:3a:cd:42:99:33:
         68:83:ae:a7:19:90:c8:eb:2e:88:e6:46:82:81:58:65:45:dd:
         2f:8d:d0:2b:62:8f:88:97:29:8b:1c:19:df:a8:b3:23:3f:05:
         d2:ad:96:f1:56:24:b0:14:2f:3f:5a:4d:0e:16:77:fd:73:fd:
         d0:7c:16:b8:e7:dd:75:68:80:db:09:61:a7:1f:61:a4:51:30:
         68:02:37:ce:85:49:3c:53:d7:b0:46:c9:a8:4f:3b:e2:b2:9f:
         2c:bd:98:65:fd:d2:f2:39:27:3c:4f:af:d6:f0:41:a7:53:17:
         0f:57:a5:a7:05:e1:71:b2:fa:27:67:7d:7e:e1:a8:12:c2:6d:
         63:f7:ab:fe:7a:81:ab:14:c5:4c:bd:a9:0d:92:a5:24:84:36:
         32:44:b6:06:da:0f:22:38:8a:5f:88:4d:39:e3:e9:c1:41:c4:
         77:10:f0:f5:68:84:8f:05:de:d1:21:56:cd:32:b6:8f:ff:03:
         28:88:4b:ee:c6:14:83:b8:b1:4b:82:bc:c9:f0:af:b2:27:b2:
         5a:3f:54:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:29:45 2025 by rpki-client