Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
File:                     HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft (raw, json)
Hash identifier:          ix/CCtogwQS7Eh/YeiGk78dHkb1Iw16O+L/mtZ8JNpw=
Subject key identifier:   5E:A6:29:57:59:48:8C:9E:E7:92:E0:DF:82:D2:59:04:24:5B:AD:FB
Authority key identifier: 1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
Certificate issuer:       /CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Certificate serial:       0197B632E77853EA9A21F14588842C709085
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
Manifest number:          0448
Signing time:             Sat 28 Jun 2025 11:01:18 +0000
Manifest this update:     Sat 28 Jun 2025 11:01:18 +0000
Manifest next update:     Sun 29 Jun 2025 11:01:18 +0000
Files and hashes:         1: HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl (hash: OMmRbPcCsEdWgnQKKQBDOu1wJc9P1ryN/bOVQbOyLvY=)
                          2: KnSUOMU4LVOd-681gUpAeZxW9tU.roa (hash: T8JMOCVoClcG2l35uDfqB6bKR7EcaF1TmNNZKykQwnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 11:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:e7:78:53:ea:9a:21:f1:45:88:84:2c:70:90:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
        Validity
            Not Before: Jun 28 11:01:18 2025 GMT
            Not After : Jun 29 11:01:18 2025 GMT
        Subject: CN=5ea6295759488c9ee792e0df82d25904245badfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a4:cc:31:4e:d2:5d:1b:51:71:97:a7:d3:da:
                    43:58:44:6e:19:5b:2b:99:58:5d:76:d4:1a:93:83:
                    c4:c2:c8:6b:fc:cf:48:0e:2b:6d:72:0b:87:18:5b:
                    d6:8b:36:c6:b7:38:ca:fb:28:c8:3f:72:34:1f:87:
                    95:86:87:46:a1:02:09:35:12:be:27:16:d2:be:ca:
                    f4:22:82:ac:4b:42:a8:df:09:c0:7d:00:02:ed:ce:
                    27:db:2a:82:0f:ed:02:f3:5b:97:45:b9:c4:ad:6a:
                    3c:52:47:ab:d8:64:4c:e0:81:01:47:0b:44:ee:eb:
                    4f:65:76:56:2d:5a:ff:df:4a:f0:69:ad:6f:d4:ca:
                    fc:8f:db:d8:75:6e:27:10:ee:29:ca:1b:fb:09:07:
                    db:5a:ad:0e:4e:ca:de:74:de:89:01:25:a9:ea:cf:
                    aa:ed:e9:58:95:7a:52:6f:37:b6:cb:69:17:d4:d6:
                    c9:3b:31:57:46:83:95:7c:6b:c7:7e:41:b4:26:a3:
                    7d:e6:3d:a7:a8:5e:fe:21:ce:3b:79:21:f5:0a:81:
                    8a:6f:9e:fc:f1:92:af:31:16:f9:97:7f:1d:55:0a:
                    e0:c6:7c:1f:54:0a:11:6e:cc:55:27:2e:74:57:f8:
                    2c:04:76:88:f0:49:51:5e:6a:ff:f6:9c:93:bf:15:
                    26:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A6:29:57:59:48:8C:9E:E7:92:E0:DF:82:D2:59:04:24:5B:AD:FB
            X509v3 Authority Key Identifier:
                keyid:1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a9:36:9b:33:70:eb:8a:b0:06:74:5e:1d:ab:76:ad:31:45:
         44:e8:f7:8c:33:77:cb:72:e0:e0:6a:cc:08:2e:69:f5:ae:84:
         e3:16:8c:b9:29:da:b6:c0:2b:be:00:04:16:01:e1:4a:97:25:
         3c:5c:1e:3f:45:27:43:d7:73:b5:8a:6e:0d:56:66:ca:c2:95:
         15:a2:85:ae:fb:99:3a:bb:2e:53:45:f7:32:3b:d0:31:05:37:
         c3:b0:26:88:c9:ee:0c:8c:eb:43:fe:55:9a:1d:c0:d3:9f:23:
         7a:fb:05:fc:0d:dc:ba:0f:32:e5:31:07:c3:4c:01:f5:97:96:
         63:7b:93:1f:45:2d:2f:46:e9:f7:aa:88:b8:27:ef:58:21:14:
         a6:80:46:a5:20:64:ff:3e:5b:b7:a9:47:7b:c4:a9:bd:18:72:
         2b:ec:d1:d1:ff:5d:25:12:1b:c4:b5:27:30:cd:00:12:6e:7d:
         88:3a:6c:56:80:70:ae:b0:86:b8:7b:ee:c9:52:61:60:78:28:
         d0:38:6d:00:05:8e:bb:42:d4:af:8c:29:49:0b:2e:15:ca:5f:
         e1:76:da:59:d0:d6:59:d9:b1:8c:a5:2e:59:31:09:f4:44:59:
         16:20:2d:75:01:13:1c:8d:9d:f0:2e:db:2b:13:d6:9f:c1:b5:
         24:75:66:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2Mud4U+qaIfFFiIQscJCFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjY2FhYjBiMGRlZmM5M2MzMmY4MGM0NGIwODJmYjI5MDVm
MjNjNjIwHhcNMjUwNjI4MTEwMTE4WhcNMjUwNjI5MTEwMTE4WjAzMTEwLwYDVQQD
Eyg1ZWE2Mjk1NzU5NDg4YzllZTc5MmUwZGY4MmQyNTkwNDI0NWJhZGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaTMMU7SXRtRcZen09pDWERuGVsr
mVhddtQak4PEwshr/M9IDittcguHGFvWizbGtzjK+yjIP3I0H4eVhodGoQIJNRK+
JxbSvsr0IoKsS0Ko3wnAfQAC7c4n2yqCD+0C81uXRbnErWo8Uker2GRM4IEBRwtE
7utPZXZWLVr/30rwaa1v1Mr8j9vYdW4nEO4pyhv7CQfbWq0OTsredN6JASWp6s+q
7elYlXpSbze2y2kX1NbJOzFXRoOVfGvHfkG0JqN95j2nqF7+Ic47eSH1CoGKb578
8ZKvMRb5l38dVQrgxnwfVAoRbsxVJy50V/gsBHaI8ElRXmr/9pyTvxUmkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6mKVdZSIye55Lg34LSWQQkW637MB8GA1UdIwQY
MBaAFBzKqwsN78k8MvgMRLCC+ykF8jxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE1xckN3M3Z5VHd5LUF4RXNJTDdLUVh5UEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83ODdhYWUtMTEzMS00ZDljLTg1OTQt
Njk0N2YwMmFjNmFmLzEvSE1xckN3M3Z5VHd5LUF4RXNJTDdLUVh5UEdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy83ODdhYWUtMTEzMS00ZDljLTg1OTQtNjk0N2YwMmFjNmFm
LzEvSE1xckN3M3Z5VHd5LUF4RXNJTDdLUVh5UEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPak2mzNw
64qwBnReHat2rTFFROj3jDN3y3Lg4GrMCC5p9a6E4xaMuSnatsArvgAEFgHhSpcl
PFweP0UnQ9dztYpuDVZmysKVFaKFrvuZOrsuU0X3MjvQMQU3w7AmiMnuDIzrQ/5V
mh3A058jevsF/A3cug8y5TEHw0wB9ZeWY3uTH0UtL0bp96qIuCfvWCEUpoBGpSBk
/z5bt6lHe8SpvRhyK+zR0f9dJRIbxLUnMM0AEm59iDpsVoBwrrCGuHvuyVJhYHgo
0DhtAAWOu0LUr4wpSQsuFcpf4XbaWdDWWdmxjKUuWTEJ9ERZFiAtdQETHI2d8C7b
KxPWn8G1JHVmtQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:45 2025 by rpki-client