Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
File:                     Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json)
Hash identifier:          VotJovP42crSlkeE4vDi8BdVkwCDW9ps+0YISXfv7pU=
Subject key identifier:   00:F5:6D:6E:99:CF:83:0C:98:D8:52:38:38:4F:6C:66:83:7A:AE:E7
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Certificate issuer:       /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial:       019A50E40B733F06E04E22E85A5F914BA50F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
Manifest number:          1162
Signing time:             Tue 04 Nov 2025 22:01:53 +0000
Manifest this update:     Tue 04 Nov 2025 22:01:53 +0000
Manifest next update:     Wed 05 Nov 2025 22:01:53 +0000
Files and hashes:         1: 0YFrK6qX5oK4oz56JrHQD13FS0g.roa (hash: 2tfLb6Tn0cvmd2+fqOkkBuAviLh+tji+ZUyN/qd72mA=)
                          2: B1Q4xWffdUN7zPjy1sq3Dtrabr0.roa (hash: XSRbcDFmD2SBWhC9QVnlq9zNA7EtDeg2/jCNqGJ6Vow=)
                          3: EFpp1ecMW8TWRG-p4oYa7fPPvPI.roa (hash: a7nT0f4Aii6pfEA07RoNM/fESmlRPCmSXyaPHHhHtfc=)
                          4: G5aSz4shLC5EKgp2SbNK-UcpZls.roa (hash: ao0JJHFk2t7w93DBJFTmDX4+D2u79wITuPAaWZsRu74=)
                          5: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: 3NFa5LNe+ro9s4jGP6JX+iroKojmQahtpEpS6RjwMX0=)
                          6: K03TI5nYUitEhr3tDnZaspm3S48.roa (hash: 0GhwyXOcDmriRSuXnm9/II1OmPaoLu8Djc5b090uRNw=)
                          7: OHszSGY9IAc7LRuICB5fLtwPJEE.roa (hash: rQ/hF7bQMR8MBO0Cmc6ufUVgRC+5bZHKljx2lgxb3/s=)
                          8: RRfbWS9gJIpkQlUHUBT_C-4iKW4.roa (hash: 5YJMcnD8st6XyEBie4P9czS9E91f4FDnUOlRC1amfu0=)
                          9: RdAiuj0CKwGdWqOPsTysiaxS8RM.roa (hash: RUegU9jus91oC1XvjlC85kvkBYAhgdo3GTaU32XzLRI=)
                          10: VHuw9bCvd_xbchW3ciS0PDWXw_w.roa (hash: gsE8OKW+/bE0pDGpsJc+2dHPUTMKwzSWKQdDcL2OGGQ=)
                          11: VQdBddpukAmJt5hMDo3MH_s40gY.roa (hash: Ye0y1BoPENu4y2+F2w73JV34dGGP4dVDpycXyq9GQwY=)
                          12: XIaayusDHQd-T-OQnZeJmKeMqGM.roa (hash: 4YgriKRQoCnrntt03LwL2mbgR+kxZCmjlyyQb3gT+ZE=)
                          13: YPCVZfdLkRnpwRWt5j9ECFmQgkw.roa (hash: hjB0AgE/bEo2D0PnqWgeOepZ8iy64G1fbs2WbSURiyc=)
                          14: ZDwPo4eEroHvW0Q-cNvO-pGgd80.roa (hash: MhXd3/42bxWERGmNkex/8mTYhYeR1LhuzyC3QmH77TY=)
                          15: h9060_GP774mLO77LC6My7l_Iqk.roa (hash: xCF+i+qRMr0iOa+aUqi0JjRA0FfOBaa6KB7RH+xl9to=)
                          16: mvKNPFMV6qBSG3SFSM4qWTU0PTM.roa (hash: 0KVXMDqCW8pJ5nUQOv8p5VWslPhCTBVdym4Cj/bx29s=)
                          17: w5dYOa54vKNEPegbP1ILAe4B70k.roa (hash: UG3Pt6aB2V/te9hBV8WZU509/953v6ZJ4S6EVvmx5A0=)
                          18: wkc9yBg4lPDGjCfaJZRjyFM7mB0.roa (hash: qUIFrqdAEDEN9kEv6WmzzdSEX+yB2KZ5WLQVyM2U4m0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e4:0b:73:3f:06:e0:4e:22:e8:5a:5f:91:4b:a5:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
        Validity
            Not Before: Nov  4 22:01:53 2025 GMT
            Not After : Nov  5 22:01:53 2025 GMT
        Subject: CN=00f56d6e99cf830c98d85238384f6c66837aaee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c1:d8:f5:03:86:dd:27:52:2d:53:b7:23:9f:
                    b7:62:af:b9:a5:a8:22:b9:c7:65:0c:28:d5:70:51:
                    2c:1a:43:71:88:c0:49:48:aa:c1:42:96:65:31:1a:
                    62:75:39:f9:e6:a5:cc:11:15:19:1c:19:6c:68:9a:
                    1f:57:a6:00:2a:11:00:b7:2e:af:65:ba:a4:67:6a:
                    74:d0:08:f5:ea:4c:21:6d:0a:07:1e:c5:ad:e0:fe:
                    7b:54:c7:19:2d:66:30:ca:0f:95:70:da:67:32:85:
                    25:97:df:6e:74:32:8c:66:a0:fa:97:09:54:60:17:
                    76:ec:60:4a:d1:ec:2c:6b:76:84:78:4c:1f:42:74:
                    8d:c9:df:f7:54:77:41:2c:9c:9d:bf:5b:d7:69:eb:
                    02:bb:e5:bd:04:6f:ef:16:ee:26:11:a0:a7:87:79:
                    ac:86:07:40:4b:5d:a0:ab:eb:57:90:a5:29:7b:1e:
                    6d:c9:18:cf:61:92:a3:2b:48:d5:54:19:8d:1d:7b:
                    b8:71:27:7d:54:46:01:4b:90:ae:13:f1:22:e3:c7:
                    ee:34:85:06:e4:17:6c:b6:7d:69:84:89:f0:37:ec:
                    4d:bc:a4:21:77:49:39:40:20:45:18:96:26:02:bd:
                    8d:6f:c4:59:36:ef:ad:af:79:34:4d:c1:76:f4:44:
                    0a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F5:6D:6E:99:CF:83:0C:98:D8:52:38:38:4F:6C:66:83:7A:AE:E7
            X509v3 Authority Key Identifier:
                keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ca:9a:51:28:da:91:ac:2c:a5:c1:0b:e8:27:d1:e5:70:65:
         2f:36:1c:a9:0f:f0:23:b5:74:bc:57:c3:11:f7:dd:c1:85:70:
         f9:51:71:15:6d:f1:85:1b:0f:94:f9:07:0e:29:d4:8e:8e:fa:
         48:30:7f:bf:ca:3c:c8:0b:96:4b:ea:13:cc:2a:e6:07:69:f8:
         5c:6b:1c:88:0c:ed:6b:21:f1:ed:6a:27:09:12:d2:e9:f2:be:
         0f:e8:14:f2:16:12:29:49:a6:dd:39:a6:06:8a:3b:ab:06:de:
         48:84:a7:1a:fe:c7:9c:8f:b0:c2:fd:11:82:f0:df:8b:95:11:
         f0:8a:e1:a1:5d:af:7f:7c:87:14:29:6c:16:2f:dd:9c:6e:3b:
         da:df:66:a8:26:d4:dc:1a:22:61:97:c1:12:98:53:5e:b2:97:
         e1:94:c6:7e:55:4e:8b:6b:6e:4b:30:4b:3b:e4:38:ec:21:52:
         93:31:67:6a:71:0e:77:e5:f6:57:6c:98:96:5c:d3:21:c1:32:
         d3:17:9d:ba:6a:32:f8:c9:8d:27:7f:13:ca:fd:99:b1:b7:c8:
         53:db:da:97:0b:f8:df:5f:61:57:ab:cc:42:eb:66:48:0d:48:
         2b:bb:bb:36:e8:32:a1:35:7e:57:bd:60:fa:c0:37:b8:e1:10:
         43:7c:d7:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ5AtzPwbgTiLoWl+RS6UPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk
ZGVlNjkwHhcNMjUxMTA0MjIwMTUzWhcNMjUxMTA1MjIwMTUzWjAzMTEwLwYDVQQD
EygwMGY1NmQ2ZTk5Y2Y4MzBjOThkODUyMzgzODRmNmM2NjgzN2FhZWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcHY9QOG3SdSLVO3I5+3Yq+5pagi
ucdlDCjVcFEsGkNxiMBJSKrBQpZlMRpidTn55qXMERUZHBlsaJofV6YAKhEAty6v
ZbqkZ2p00Aj16kwhbQoHHsWt4P57VMcZLWYwyg+VcNpnMoUll99udDKMZqD6lwlU
YBd27GBK0ewsa3aEeEwfQnSNyd/3VHdBLJydv1vXaesCu+W9BG/vFu4mEaCnh3ms
hgdAS12gq+tXkKUpex5tyRjPYZKjK0jVVBmNHXu4cSd9VEYBS5CuE/Ei48fuNIUG
5Bdstn1phInwN+xNvKQhd0k5QCBFGJYmAr2Nb8RZNu+tr3k0TcF29EQKbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAD1bW6Zz4MMmNhSODhPbGaDeq7nMB8GA1UdIwQY
MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt
NjkxZmY1YjQ0YjAxLzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx
LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMqaUSja
kawspcEL6CfR5XBlLzYcqQ/wI7V0vFfDEffdwYVw+VFxFW3xhRsPlPkHDinUjo76
SDB/v8o8yAuWS+oTzCrmB2n4XGsciAztayHx7WonCRLS6fK+D+gU8hYSKUmm3Tmm
Boo7qwbeSISnGv7HnI+wwv0RgvDfi5UR8IrhoV2vf3yHFClsFi/dnG472t9mqCbU
3BoiYZfBEphTXrKX4ZTGflVOi2tuSzBLO+Q47CFSkzFnanEOd+X2V2yYllzTIcEy
0xedumoy+MmNJ38Tyv2ZsbfIU9valwv4319hV6vMQutmSA1IK7u7NugyoTV+V71g
+sA3uOEQQ3zXJw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:45:27 2025 by rpki-client