Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
File:                     HkogILgtApTpCi1rLA8o0Rc7ZGU.mft (raw, json)
Hash identifier:          uNOIS4QkJse6lLenMrp1MuwJcwpJVZbN1/sIMiYYqg8=
Subject key identifier:   60:8F:92:44:A8:C1:D7:75:C3:97:A1:3F:78:85:4F:53:83:56:31:D0
Authority key identifier: 1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65
Certificate issuer:       /CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
Certificate serial:       019A1BAB5CAD307D8974CCE307D9DA465AE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
Manifest number:          16F3
Signing time:             Sat 25 Oct 2025 14:00:05 +0000
Manifest this update:     Sat 25 Oct 2025 14:00:05 +0000
Manifest next update:     Sun 26 Oct 2025 14:00:05 +0000
Files and hashes:         1: 7wJbNCUcwtFlKnAHPgTuv8Sn0i4.roa (hash: Yg17vxRzYWiVt6fOmSwVpKWZGt89EQyeG3U2CWqSktI=)
                          2: HkogILgtApTpCi1rLA8o0Rc7ZGU.crl (hash: U2F2m8A4rOmOD6XVaie2zZGu7gt+VyUcGVK5Sg+omnE=)
                          3: I1sRKyvYdSWFdpxY3K3hgfpLh8c.roa (hash: EW9DVDBND5j7A8L4kBfb9CEdZ+sujph27uho+pUx/m0=)
                          4: IWHxNStdjrSROqwuZe7sT7LT4Nk.roa (hash: S/bzV1Gz+VxqpXjM3Pl83zzxF5vyuBSuFK0LxiEoibw=)
                          5: yFf2Zz0VjYagA0shVIplpiusWp4.roa (hash: Sonq+rZh7+zVQsS+x3AiHiTrq12H+Dw70vUAQVtyO0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 14:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1b:ab:5c:ad:30:7d:89:74:cc:e3:07:d9:da:46:5a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
        Validity
            Not Before: Oct 25 14:00:05 2025 GMT
            Not After : Oct 26 14:00:05 2025 GMT
        Subject: CN=608f9244a8c1d775c397a13f78854f53835631d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:f2:61:8d:24:ea:b6:e2:32:3a:a8:62:0c:
                    44:00:95:c7:ef:3d:bf:0e:22:0e:17:54:1c:87:47:
                    55:6a:b4:4e:09:f7:47:fa:60:52:49:2e:32:8c:7d:
                    a2:9a:12:7d:8c:ed:8f:7a:5c:b0:24:39:9e:98:f2:
                    3d:71:7e:32:f0:8e:98:7c:b8:b6:ec:9e:cf:96:93:
                    4f:3d:7c:f8:8d:94:19:19:ed:09:22:e4:0e:96:ad:
                    9b:2b:4a:eb:d0:87:f5:9d:b7:83:c9:e3:2c:36:56:
                    e7:57:f2:34:0b:09:4b:dc:0b:5d:a1:93:df:29:0f:
                    0d:dd:78:2c:b5:d2:a4:9f:9a:28:49:a9:47:49:5c:
                    57:8c:4d:80:cd:41:dd:1d:28:dc:20:33:b5:1f:8c:
                    a5:ad:f5:d0:42:5d:c1:fc:68:b9:96:fe:54:b6:89:
                    69:05:0d:6c:3b:df:0e:02:7b:67:0b:8b:ea:e1:19:
                    7b:1a:12:0b:13:88:d8:9f:5c:ca:07:22:7b:d6:a6:
                    06:03:a5:5c:dc:11:fc:7b:48:5e:88:55:f9:c1:28:
                    2f:b0:30:4a:27:5b:a4:d7:45:34:ac:01:98:d4:51:
                    ad:ca:d5:6e:b2:e6:5a:4d:50:68:f9:ee:24:3f:73:
                    de:d6:d0:25:8c:19:6f:00:3e:a7:a8:5c:88:22:e5:
                    1a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8F:92:44:A8:C1:D7:75:C3:97:A1:3F:78:85:4F:53:83:56:31:D0
            X509v3 Authority Key Identifier:
                keyid:1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:50:c1:9b:9f:dd:b5:b7:ed:6b:99:20:99:74:55:27:30:8d:
         a9:03:6c:85:65:0c:de:f4:1d:a4:b6:db:b9:1f:58:6e:79:8c:
         48:38:a0:87:64:b2:b6:e6:e1:36:59:31:70:11:61:e0:fe:de:
         b6:fc:79:4e:17:a6:be:38:69:62:e8:fc:3d:4f:d6:96:ab:dd:
         2b:87:db:8a:3a:e4:72:e1:9e:8f:08:26:00:05:39:ab:df:56:
         3a:14:f4:1a:0d:bb:80:65:88:c9:72:09:bd:40:32:3d:51:70:
         bb:d6:79:1a:b5:4e:53:f9:ec:cf:32:1c:32:55:fb:57:d5:c9:
         79:51:f6:de:d3:aa:4b:e1:fb:2c:90:53:f5:db:86:62:8a:ec:
         2b:7a:7a:17:ee:32:1a:ad:61:50:ce:58:f2:68:3e:d2:b6:f6:
         00:0d:ad:20:f8:b0:6e:06:d5:79:2d:88:a3:5e:89:2f:6a:f1:
         9d:a9:b8:a6:a4:be:f8:5a:d6:9a:22:38:83:03:95:8f:0d:13:
         f4:65:b2:35:73:4c:8a:95:93:2f:60:37:d9:8b:74:93:e9:3a:
         09:d5:4c:c9:04:33:63:29:15:08:d2:1b:f5:7e:bb:d2:6b:96:
         d1:c8:66:9a:60:1f:49:62:01:d0:5a:7b:4a:a6:7b:98:8f:b0:
         39:fc:5b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 01:05:25 2025 by rpki-client