Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
File:                     HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft (raw, json)
Hash identifier:          VzKAVi4AfMxVWqKK1wn04h8ezOpeHG6BZtYwBMBPhCs=
Subject key identifier:   BA:63:26:DB:CC:1C:8D:68:79:97:AF:70:F3:BE:6C:DE:4C:6E:FB:2A
Authority key identifier: 1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
Certificate issuer:       /CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Certificate serial:       0196B74776AB8BCEC68DD5357396EFB98B5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
Manifest number:          03C4
Signing time:             Fri 09 May 2025 23:00:35 +0000
Manifest this update:     Fri 09 May 2025 23:00:35 +0000
Manifest next update:     Sat 10 May 2025 23:00:35 +0000
Files and hashes:         1: HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl (hash: EBYTz+wv7xnxdkLQtgKoyHEc1JENxop60ZPd4+RrySU=)
                          2: KnSUOMU4LVOd-681gUpAeZxW9tU.roa (hash: T8JMOCVoClcG2l35uDfqB6bKR7EcaF1TmNNZKykQwnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:47:76:ab:8b:ce:c6:8d:d5:35:73:96:ef:b9:8b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
        Validity
            Not Before: May  9 23:00:35 2025 GMT
            Not After : May 10 23:00:35 2025 GMT
        Subject: CN=ba6326dbcc1c8d687997af70f3be6cde4c6efb2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:22:5b:e1:0d:f1:68:62:d6:0b:24:93:be:5f:
                    a0:7d:8a:05:85:df:47:27:e1:14:81:73:79:38:2e:
                    0c:78:aa:25:7d:51:23:c5:2c:66:5f:6d:50:ee:ab:
                    4b:3e:7c:f8:06:79:c6:fc:8d:36:7e:26:77:3f:82:
                    ec:e1:1e:57:74:66:ba:f9:44:5b:89:81:75:d5:0a:
                    87:d3:15:1c:ae:88:b4:05:e2:ba:99:f2:d8:bd:38:
                    32:9d:3b:de:7b:a5:6e:31:fe:2b:23:ef:86:c6:13:
                    d1:d8:4c:e7:c9:95:4d:46:b2:da:b0:51:52:cb:82:
                    0f:9b:a1:48:2d:e4:a3:5b:b9:07:82:ca:b7:96:14:
                    fc:ef:1d:04:c7:01:3c:1f:49:95:18:b5:51:de:12:
                    34:9a:89:63:4d:8f:04:25:89:bd:37:9f:67:a1:b4:
                    1f:9c:83:26:cb:80:0f:07:80:5d:50:35:1b:26:72:
                    ec:58:ee:14:ac:d9:6f:fa:84:51:7e:9d:5b:0d:08:
                    73:25:52:b3:34:e9:1f:ae:cc:7a:e0:77:05:6d:95:
                    a9:79:08:38:e6:5b:5e:ab:94:96:ad:fe:87:e6:72:
                    94:65:e2:55:fc:5f:af:5d:5f:79:7b:0d:3a:b5:ab:
                    fd:6b:ce:8f:99:14:34:b8:bc:65:1f:39:a5:fe:ff:
                    66:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:63:26:DB:CC:1C:8D:68:79:97:AF:70:F3:BE:6C:DE:4C:6E:FB:2A
            X509v3 Authority Key Identifier:
                keyid:1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:9a:69:c4:c4:39:79:9e:09:13:75:aa:91:ff:0b:0b:9a:19:
         09:d4:77:1b:11:c7:be:d7:65:c4:37:67:57:ca:bf:4b:b9:d9:
         59:dd:a8:20:a3:c3:ec:b3:db:dd:6a:3b:d8:76:3e:87:c9:e7:
         67:b9:85:9e:e2:6c:6d:22:c4:b4:49:82:fb:1c:4e:b0:54:79:
         79:75:4a:d6:5b:f7:72:2e:dd:43:eb:e7:bf:fc:5d:9e:ea:9c:
         d0:a2:dd:72:d9:ec:80:0e:70:1d:12:10:54:19:51:29:65:2a:
         16:67:55:3d:d3:ef:3c:6a:ab:ef:c9:3c:d6:4a:24:cc:d4:09:
         22:b3:fa:2e:1d:6f:e4:a5:24:92:fc:50:2f:a1:86:88:b1:eb:
         13:3c:5b:eb:5f:83:8f:f3:d7:53:ab:a5:ff:0a:34:28:03:05:
         64:34:42:53:28:60:d7:5e:eb:af:ad:b7:c2:24:44:a8:01:cc:
         b6:78:ee:dd:08:1d:61:17:44:d7:2f:46:b6:ed:86:26:e2:2d:
         5e:41:4f:ad:40:5c:19:ae:72:04:73:78:5e:36:f0:26:87:b8:
         6d:7a:6c:24:8f:a0:1c:0e:40:36:9e:9c:c0:c1:c1:d6:fe:78:
         3d:53:a9:1d:33:5f:1b:79:68:1b:ff:9a:1a:12:ad:e6:96:09:
         8a:90:0e:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3R3ari87GjdU1c5bvuYtcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjY2FhYjBiMGRlZmM5M2MzMmY4MGM0NGIwODJmYjI5MDVm
MjNjNjIwHhcNMjUwNTA5MjMwMDM1WhcNMjUwNTEwMjMwMDM1WjAzMTEwLwYDVQQD
EyhiYTYzMjZkYmNjMWM4ZDY4Nzk5N2FmNzBmM2JlNmNkZTRjNmVmYjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCJb4Q3xaGLWCySTvl+gfYoFhd9H
J+EUgXN5OC4MeKolfVEjxSxmX21Q7qtLPnz4BnnG/I02fiZ3P4Ls4R5XdGa6+URb
iYF11QqH0xUcroi0BeK6mfLYvTgynTvee6VuMf4rI++GxhPR2EznyZVNRrLasFFS
y4IPm6FILeSjW7kHgsq3lhT87x0ExwE8H0mVGLVR3hI0moljTY8EJYm9N59nobQf
nIMmy4APB4BdUDUbJnLsWO4UrNlv+oRRfp1bDQhzJVKzNOkfrsx64HcFbZWpeQg4
5lteq5SWrf6H5nKUZeJV/F+vXV95ew06tav9a86PmRQ0uLxlHzml/v9mbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpjJtvMHI1oeZevcPO+bN5MbvsqMB8GA1UdIwQY
MBaAFBzKqwsN78k8MvgMRLCC+ykF8jxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE1xckN3M3Z5VHd5LUF4RXNJTDdLUVh5UEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83ODdhYWUtMTEzMS00ZDljLTg1OTQt
Njk0N2YwMmFjNmFmLzEvSE1xckN3M3Z5VHd5LUF4RXNJTDdLUVh5UEdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy83ODdhYWUtMTEzMS00ZDljLTg1OTQtNjk0N2YwMmFjNmFm
LzEvSE1xckN3M3Z5VHd5LUF4RXNJTDdLUVh5UEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpppxMQ5
eZ4JE3Wqkf8LC5oZCdR3GxHHvtdlxDdnV8q/S7nZWd2oIKPD7LPb3Wo72HY+h8nn
Z7mFnuJsbSLEtEmC+xxOsFR5eXVK1lv3ci7dQ+vnv/xdnuqc0KLdctnsgA5wHRIQ
VBlRKWUqFmdVPdPvPGqr78k81kokzNQJIrP6Lh1v5KUkkvxQL6GGiLHrEzxb61+D
j/PXU6ul/wo0KAMFZDRCUyhg117rr623wiREqAHMtnju3QgdYRdE1y9Gtu2GJuIt
XkFPrUBcGa5yBHN4XjbwJoe4bXpsJI+gHA5ANp6cwMHB1v54PVOpHTNfG3loG/+a
GhKt5pYJipAOow==
-----END CERTIFICATE-----
Generated at Sat May 10 05:18:30 2025 by rpki-client