Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft
File:                     HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft (raw, json)
Hash identifier:          4agCrMev6cpSIzmopCd/1XYAGHVgjqdsYHTj7xsq8jI=
Subject key identifier:   F3:FC:8D:43:CC:A8:8D:7F:6C:8B:22:E7:42:10:25:1B:C6:DF:73:7C
Authority key identifier: 1C:FB:6D:F9:33:75:A0:6C:56:82:C0:57:C0:FD:2A:73:06:21:8A:54
Certificate issuer:       /CN=1cfb6df93375a06c5682c057c0fd2a7306218a54
Certificate serial:       019A4F6274A73F47CFCFB1232416E282393D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft
Manifest number:          0315
Signing time:             Tue 04 Nov 2025 15:00:43 +0000
Manifest this update:     Tue 04 Nov 2025 15:00:43 +0000
Manifest next update:     Wed 05 Nov 2025 15:00:43 +0000
Files and hashes:         1: HPtt-TN1oGxWgsBXwP0qcwYhilQ.crl (hash: K3ujPcO0nRa2lJWTwygtxB5XB502kN2sF24kfqG5d3A=)
                          2: hrf8r5UJmIJ-gpcc-QJ3NNPl6Ik.roa (hash: HeO4h7QnVdaGx6xIcy/JRsUb7wgneHjAuNSk52+vub8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:62:74:a7:3f:47:cf:cf:b1:23:24:16:e2:82:39:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cfb6df93375a06c5682c057c0fd2a7306218a54
        Validity
            Not Before: Nov  4 15:00:43 2025 GMT
            Not After : Nov  5 15:00:43 2025 GMT
        Subject: CN=f3fc8d43cca88d7f6c8b22e74210251bc6df737c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:04:f5:68:76:91:b8:0a:c7:69:73:a3:e0:bd:
                    fd:4e:10:a0:d8:b2:f9:4d:25:b2:c0:ac:c2:de:57:
                    30:09:fe:cc:f0:6c:60:95:f4:77:c5:d9:b3:53:6f:
                    2e:9e:15:ae:06:37:58:d6:fd:14:0d:57:88:28:40:
                    9a:aa:06:78:0b:31:cd:eb:8f:f6:b2:8c:ae:7c:0f:
                    c3:65:6a:51:69:6a:7c:5c:81:ac:87:92:0d:d4:3c:
                    bb:49:bc:fb:29:7a:87:bc:bf:9a:43:13:f2:80:8b:
                    b7:06:09:16:3d:50:af:86:c2:d9:2b:bb:ab:c9:12:
                    24:1f:35:62:52:5d:a6:21:0f:08:75:3b:64:16:a9:
                    da:11:ef:5e:09:13:22:6d:f3:77:59:10:8e:23:57:
                    d6:d6:89:1c:b6:89:40:fc:df:04:cb:2b:8c:68:5c:
                    c7:08:21:4d:9b:97:c7:07:81:35:93:d2:af:2c:46:
                    a7:74:01:b3:0f:86:5b:f0:45:eb:76:26:9c:22:cc:
                    87:85:2e:ef:2e:60:b9:05:b3:4a:09:79:9d:9c:57:
                    fd:65:2c:b8:f4:92:62:ee:8b:47:01:f9:8c:5c:31:
                    d7:18:77:ef:de:5e:14:73:55:cd:c2:a6:65:14:59:
                    4e:13:ab:ed:88:75:66:d1:12:56:64:74:c2:1d:89:
                    e6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FC:8D:43:CC:A8:8D:7F:6C:8B:22:E7:42:10:25:1B:C6:DF:73:7C
            X509v3 Authority Key Identifier:
                keyid:1C:FB:6D:F9:33:75:A0:6C:56:82:C0:57:C0:FD:2A:73:06:21:8A:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:64:a9:f1:63:b0:8a:b3:ab:c1:ea:0c:94:e0:57:cf:9d:11:
         58:75:c6:c8:58:89:65:17:64:2a:0b:f6:6b:39:6f:7e:9e:92:
         07:06:9d:46:c2:6b:12:64:3b:8c:8a:79:56:98:3b:b2:4c:60:
         72:03:84:4a:e4:63:63:3b:09:53:5a:1b:e9:4f:7e:79:cd:8d:
         53:7b:7a:3e:0b:b4:de:35:83:30:8a:3a:cf:47:3e:54:ff:53:
         67:c5:27:b0:e7:da:67:4c:e5:2b:fd:9a:a7:2f:13:3c:e6:3d:
         c8:4e:bb:ef:f9:da:61:65:b1:c7:2d:c4:20:14:55:5a:c8:b0:
         16:1c:e8:27:d8:a2:a3:5c:8e:90:75:b1:ca:84:d4:af:bd:2e:
         65:57:55:93:b1:2b:db:6d:99:4e:55:bf:55:c1:7d:a6:5b:02:
         0a:16:0f:99:fc:5f:0e:2a:d8:13:07:e3:d1:7d:6f:ec:c1:4d:
         af:53:cb:ec:04:be:04:e5:13:ed:21:32:56:1b:f8:9f:5b:33:
         ee:7b:f9:d3:65:74:60:d4:2c:17:5d:37:9a:e5:e8:0a:8c:64:
         b8:04:50:f2:b4:33:b2:fc:51:42:6e:87:cd:a6:31:05:47:4b:
         82:1d:e6:21:f8:09:57:c7:d6:6f:f5:53:6c:fc:46:ba:3d:5c:
         b2:5b:63:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:37 2025 by rpki-client