Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
File:                     hNt0eyiXF6BoTNasgjB6pnuy17s.mft (raw, json)
Hash identifier:          /mKDitsAUq0MO47xqY6Wooxz1yt93b9L9BnE1F9BULc=
Subject key identifier:   8B:57:08:A4:89:97:3A:DD:75:AC:5B:94:36:F6:F6:AB:43:0E:97:A0
Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
Certificate issuer:       /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Certificate serial:       019A53AC8E7E9A3210D0FC89420E731F5715
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
Manifest number:          1450
Signing time:             Wed 05 Nov 2025 11:00:08 +0000
Manifest this update:     Wed 05 Nov 2025 11:00:08 +0000
Manifest next update:     Thu 06 Nov 2025 11:00:08 +0000
Files and hashes:         1: 1-pbn6Ub3y6IFfhatJXpFv2oIg4Y.roa (hash: otqMBUJ0t81q8O5ZwH5j1LnN11Nn61m+zKuZ8xsbQeQ=)
                          2: F4E_A-3GsiPbrHv0FpBjWEBAnaw.roa (hash: Ib9TkfBhAWRiVd7E8+OAkowsQ7AwC9M2n6bdugTcuJM=)
                          3: _MYdCgDWaO6XB5gVesQLpQpeOag.roa (hash: nreKDXAy4j3D6W3Lae5rvKwQFMf1x+LsfYxvbzIyjhc=)
                          4: hNt0eyiXF6BoTNasgjB6pnuy17s.crl (hash: 6V/E2FVqpBAC9p4kXKOuq0efmEZLVWVhEijZQgt2mCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 11:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:ac:8e:7e:9a:32:10:d0:fc:89:42:0e:73:1f:57:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
        Validity
            Not Before: Nov  5 11:00:08 2025 GMT
            Not After : Nov  6 11:00:08 2025 GMT
        Subject: CN=8b5708a489973add75ac5b9436f6f6ab430e97a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:35:9d:60:38:cc:9e:c7:4f:4f:27:41:4d:03:
                    c2:1c:18:25:dc:fa:85:45:40:27:93:66:f6:6e:7b:
                    a7:88:6c:f6:22:64:4e:9d:24:0f:31:93:fe:68:f7:
                    72:53:29:05:28:6c:7e:17:05:d6:b5:c0:61:2c:7d:
                    18:64:18:4f:0c:91:45:66:65:d2:a3:9f:cc:d7:ac:
                    01:5c:a9:7b:2a:3d:2d:48:df:2a:75:a6:0c:60:65:
                    bf:39:91:ed:21:ea:44:b1:2f:8e:74:65:ac:e2:44:
                    25:dc:d2:c7:95:66:ad:a7:c7:60:dd:02:87:81:f2:
                    32:37:1e:1d:bb:ba:df:c9:57:e9:fe:69:f2:97:d5:
                    64:47:a5:03:3b:fe:06:35:e8:ae:92:d6:4b:29:b2:
                    ce:06:27:ed:d9:db:30:24:37:37:73:76:4d:b3:43:
                    84:f5:e6:17:be:19:a2:53:b9:f1:83:ac:52:13:37:
                    86:6f:c9:6e:a4:25:04:f1:0f:83:9b:a2:74:f0:aa:
                    95:15:84:ac:fd:3c:f9:79:f1:ba:3c:b9:50:f3:e6:
                    4c:93:25:d9:bd:c3:46:9c:84:ea:f0:de:7e:f8:82:
                    ef:b0:09:5b:cc:3b:d6:4c:2e:55:5e:40:51:81:b2:
                    74:32:bb:1d:61:e1:0e:57:9d:7a:df:c7:0f:a1:c6:
                    57:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:57:08:A4:89:97:3A:DD:75:AC:5B:94:36:F6:F6:AB:43:0E:97:A0
            X509v3 Authority Key Identifier:
                keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:76:86:98:f5:c5:f8:40:75:98:67:45:ef:8c:39:b8:78:36:
         21:5f:e2:c9:bf:5d:7a:f6:b9:8e:ee:be:f0:13:dc:a4:ee:f0:
         38:c6:96:de:67:2d:08:56:ea:c5:34:3c:ed:77:3e:62:10:8a:
         60:3d:de:05:f2:85:69:a3:dc:c9:cc:e6:26:b2:3b:10:2f:be:
         6c:2a:4c:5f:80:92:ab:21:fb:15:cf:61:32:5c:03:a7:67:0d:
         e3:a5:2b:40:16:cf:05:7c:f0:74:06:44:e9:a6:1b:c0:5c:ba:
         27:c5:b8:be:c6:f7:6e:98:1e:c0:d4:9d:c3:02:a1:e2:2d:9a:
         de:83:a6:d0:62:47:0d:4f:da:8b:18:3e:e7:16:ba:54:c9:8a:
         ec:c1:53:c6:74:21:3d:4b:02:89:b5:32:03:7e:1c:66:39:76:
         5b:16:ff:e1:cd:86:c8:b7:c0:e4:65:4b:9c:0e:b4:b2:7f:88:
         eb:9a:53:d0:a6:18:9a:36:61:00:2a:37:be:75:3b:27:1a:6f:
         b1:99:6b:59:a5:41:4a:da:6f:ea:7d:f9:71:8b:88:09:e3:e1:
         5f:20:69:1d:29:f8:22:17:02:ec:89:e3:ba:15:bf:ac:81:db:
         d5:62:95:5a:db:98:48:f2:6f:e9:7b:8a:10:b9:96:14:f3:1b:
         7a:d1:49:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:44:58 2025 by rpki-client