Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
File:                     HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft (raw, json)
Hash identifier:          h4r5gNtyb5Vu3B/eZCEEUGlJ+AufIOQn83a/nIigmJA=
Subject key identifier:   B2:1F:01:BF:6A:36:75:8D:BF:6A:2A:A7:A4:06:C7:C0:12:E7:F7:A6
Authority key identifier: 1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
Certificate issuer:       /CN=1c5c72ee422c61667e3056de6b3ffce034305175
Certificate serial:       019A4E865F7F5E1E478E8181E2D1F9336970
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
Manifest number:          1421
Signing time:             Tue 04 Nov 2025 11:00:20 +0000
Manifest this update:     Tue 04 Nov 2025 11:00:20 +0000
Manifest next update:     Wed 05 Nov 2025 11:00:20 +0000
Files and hashes:         1: 88WU_lo-nSRGdQfY40VdogAMLxE.roa (hash: Hb+L5mbmqk3uGoKDZkv33m+okuLc3B+yQYtGc3eHLEs=)
                          2: HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl (hash: gHPfJq1meq/bfvoNd9CKcS/YDE7QJUFdX36rsF2QyBk=)
                          3: qitb7VLMgvff1nrPh9k84ZNCZis.roa (hash: 5aKxoc3/ZFGyn8GlrxxZrkPDb3gc2rupmpy/hBVwGfg=)
                          4: sSMElgLodEbAl0Mf5M1CJAtGd6o.roa (hash: KsAmDiMwl01kc6yWzv4aB83pLDw7Wb/jRHOPdGc8zK8=)
                          5: uy9rotP4GfgGA6fEbMzkj5aiTZs.roa (hash: aVRFeZsETYjdOaMaKocLpddIBiAt91C1pjmXmkw2oUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:86:5f:7f:5e:1e:47:8e:81:81:e2:d1:f9:33:69:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5c72ee422c61667e3056de6b3ffce034305175
        Validity
            Not Before: Nov  4 11:00:20 2025 GMT
            Not After : Nov  5 11:00:20 2025 GMT
        Subject: CN=b21f01bf6a36758dbf6a2aa7a406c7c012e7f7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:69:85:c5:29:5c:ff:90:50:18:77:3b:fd:
                    12:48:1e:66:af:05:b8:c8:53:be:5a:cd:f8:cd:02:
                    7c:65:0f:2d:2d:a2:22:27:d7:34:ca:54:54:72:50:
                    c2:76:1a:61:9d:10:6c:63:ff:14:3a:ee:d9:9d:3a:
                    ab:39:2d:85:6b:92:c0:58:4e:59:4b:f2:48:b0:38:
                    df:03:02:06:63:46:78:7f:93:0d:dc:2d:01:76:cc:
                    97:bb:60:a4:39:53:a5:d1:3f:5b:c9:2a:fc:a9:62:
                    1c:f4:df:4d:cc:e4:e3:99:58:f0:9a:5a:3a:b4:09:
                    c2:7a:31:4c:ef:38:01:4e:7a:8c:f1:d1:d4:9b:24:
                    6b:ea:45:f8:e3:8a:0a:fb:1f:b4:e1:af:21:ce:e6:
                    68:af:42:2b:94:69:77:e5:9f:ac:54:30:73:9b:36:
                    b9:68:6d:f2:1e:fd:67:cd:a5:37:c7:cf:0c:bb:02:
                    53:16:e0:e9:bb:ae:eb:bc:28:4d:3c:f9:cd:f9:77:
                    f4:b3:b2:d5:30:40:9e:3d:76:a6:6e:d1:12:0b:c3:
                    06:91:26:6f:83:04:2b:1b:16:1a:83:36:13:64:57:
                    16:80:29:31:83:68:11:da:ed:f2:e1:d9:6a:95:59:
                    03:b7:11:ec:c9:37:14:86:c9:fc:05:de:f9:0a:91:
                    2e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:1F:01:BF:6A:36:75:8D:BF:6A:2A:A7:A4:06:C7:C0:12:E7:F7:A6
            X509v3 Authority Key Identifier:
                keyid:1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:0b:f9:5c:29:34:b1:9f:fd:17:ed:ed:19:2a:28:ce:8b:73:
         c4:ba:87:e3:2c:d4:24:28:bb:03:c7:66:f9:d2:c4:7f:bd:f9:
         6b:03:7f:70:d1:36:0b:fe:a5:11:c8:16:34:49:8c:7f:7d:49:
         00:c8:6a:43:ca:91:bb:31:e2:1d:b4:43:f8:9e:8a:c0:a9:97:
         32:72:ff:bb:7b:8f:66:e1:e9:70:70:42:0c:a2:8e:69:a6:50:
         6c:50:16:ba:6c:b0:6e:09:b2:f8:2d:44:15:81:d5:f2:14:29:
         83:8c:04:5d:f4:49:ba:9f:8d:13:b4:c2:75:8b:d6:c0:c7:ef:
         85:c2:03:27:ec:a2:89:c0:35:35:e7:67:4e:89:88:14:a0:db:
         10:20:46:06:26:6a:3a:dd:ab:fa:f3:f8:21:df:7d:04:1b:a7:
         66:50:d8:4b:76:79:9a:a3:cc:bc:05:b4:8b:7b:29:63:df:7f:
         78:a5:fd:9f:c1:9a:52:ce:d3:a2:c0:9f:14:5e:c9:02:7e:16:
         fd:00:64:be:bb:df:eb:6c:66:4c:8d:21:37:d5:d0:d9:e1:30:
         14:19:66:52:55:eb:3c:9f:f3:47:2f:7b:bc:72:2b:b9:79:61:
         59:4f:f2:0b:f4:5f:86:97:d4:fc:2b:4a:18:41:de:ca:18:b7:
         86:46:2a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:00 2025 by rpki-client