
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
File:                     HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft (raw, json)
Hash identifier:          /qWCG0BrUX93wUvnH0NfMPkfX3b0i993eGDVTuNz9OA=
Subject key identifier:   9B:0E:7D:32:30:90:4A:F9:CE:74:86:23:E6:D3:BE:46:85:0D:C5:65
Authority key identifier: 1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C
Certificate issuer:       /CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
Certificate serial:       019A4D73C3B4129A80A21454D16EC773EE44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
Manifest number:          1716
Signing time:             Tue 04 Nov 2025 06:00:23 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:23 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:23 +0000
Files and hashes:         1: GWr4Sme5UYzDHbUjsjhY0fpO0ug.roa (hash: 49YBW2j0tiBN16/cc6cP9HT+URCIjSHjxZeBvIsvdsc=)
                          2: HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl (hash: W0orZOxBMwb9rg2RgBTOmmJV5lnvwGRe/Ojwr8mv8J4=)
                          3: mLoigfB9vrInWq3nJ0J7Wxmf0t4.roa (hash: 4FwhfGdWmlyBhnx1X+ZJalRnXOeqaX7xZDQnuMN3V5I=)
                          4: sic7I93GRhDt57SAuLWMJM0rRcU.roa (hash: qQ7zCE3q2zMcN3JY5v3N1hOAaebaA4wsKuaRsrsFUDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:23 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:73:c3:b4:12:9a:80:a2:14:54:d1:6e:c7:73:ee:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
        Validity
            Not Before: Nov  4 06:00:23 2025 GMT
            Not After : Nov  5 06:00:23 2025 GMT
        Subject: CN=9b0e7d3230904af9ce748623e6d3be46850dc565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2b:79:d7:70:1d:1e:01:e1:64:74:c3:e4:59:
                    aa:74:e6:98:f8:da:3d:fc:01:10:11:65:d2:fe:de:
                    4a:01:ea:79:75:aa:bf:cf:70:a7:d6:2c:de:26:8e:
                    49:10:da:db:97:fa:1e:e2:d9:5e:fa:15:6b:1d:c1:
                    a3:88:11:1a:93:07:e4:41:53:66:1a:2f:51:39:26:
                    1b:ab:8d:46:58:0f:a0:76:99:68:de:4a:80:72:ab:
                    eb:ce:0c:0e:47:f2:a7:ac:36:22:40:49:90:a8:bd:
                    06:60:04:22:70:68:14:39:b3:57:7f:d3:9a:e3:6e:
                    c8:e6:3d:31:4f:a4:ef:70:ab:b4:06:ad:5a:90:a2:
                    b8:91:bb:4f:c2:62:6a:cf:0e:59:f8:57:1c:04:bb:
                    16:9f:1f:1e:75:4c:df:b8:e7:ee:ba:ce:ec:d4:f3:
                    fc:69:19:47:d6:b7:cf:ad:46:80:68:9a:dd:cb:7b:
                    cd:75:70:78:b7:9d:68:43:58:f3:d1:6b:25:dc:a6:
                    ec:69:14:41:43:14:e8:5b:68:9a:41:9a:43:38:23:
                    a0:97:43:f0:c5:d7:9e:9c:fb:a7:7a:4f:9f:5f:73:
                    74:5f:ed:d7:41:99:ae:6d:e3:f0:ac:52:27:b1:6c:
                    51:f8:21:ab:b5:7b:f8:c7:01:32:e9:c9:cf:ef:e2:
                    8f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0E:7D:32:30:90:4A:F9:CE:74:86:23:E6:D3:BE:46:85:0D:C5:65
            X509v3 Authority Key Identifier:
                keyid:1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         1c:eb:f0:94:29:49:65:9e:78:89:ca:ee:76:d3:64:b6:46:b9:
         38:92:b3:1f:ee:a0:b3:c3:92:9b:db:fd:7a:d3:c1:14:3f:95:
         90:31:45:90:51:01:b3:9a:b9:6b:d8:f1:f5:13:ba:48:04:9c:
         74:a0:21:a8:79:6b:88:6c:14:cf:f2:56:89:6b:31:5a:5d:d5:
         9a:fb:04:d7:e9:b7:36:6e:b1:d2:8e:8c:ec:a8:c4:ae:33:c9:
         89:15:b8:28:ca:46:34:d5:24:3d:31:97:b2:29:6d:d5:fb:5d:
         de:25:79:f9:d3:8d:76:45:31:88:d5:c1:88:a9:ff:88:fa:a8:
         61:61:cd:94:6f:7b:b4:2a:c9:78:8d:0a:ce:f1:a8:1b:78:38:
         dd:cc:3d:e2:5e:8a:11:64:43:c2:c9:d2:c9:bf:b4:93:7e:da:
         72:d4:b3:2b:60:ea:37:35:eb:c7:d5:19:e2:d5:24:da:e9:e8:
         78:37:8e:3a:59:15:75:2e:20:df:63:ed:99:eb:32:88:39:83:
         c9:df:62:14:b2:3b:75:33:16:0a:a3:61:6c:8c:63:e0:96:7a:
         27:8f:89:f2:fa:65:1c:a8:f8:0b:64:19:ce:06:27:43:d3:05:
         18:b3:8e:ea:f3:10:39:76:25:58:4d:6e:68:31:44:78:09:fc:
         24:a4:7e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:45:19 2025 by rpki-client