Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
File:                     hUwNsAZYRNlZTf6N2O_XftHkk_g.mft (raw, json)
Hash identifier:          mLzSQXjnS7s2LjqSDaHNHUYseVQwS7ZHVFtVch59ppw=
Subject key identifier:   C4:18:C2:37:F7:12:A7:70:8E:BA:F6:72:C8:C3:29:2F:79:0E:BE:36
Authority key identifier: 85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
Certificate issuer:       /CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Certificate serial:       0198D5BBB3CABD04B8A065B7961A582F2574
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 07:01:44 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:44 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:44 +0000
Files and hashes:         1: hUwNsAZYRNlZTf6N2O_XftHkk_g.crl (hash: +SsGtAM8SENWLtJE2jpTb7HtyWfmSUy0hWieSClfqtA=)
                          2: iM7SCQycar1nudDnDJd9cpfWE14.roa (hash: 7fSKbbU/ayenSU9Vz0FeCegebZtfdQUaQXiUz4lT3zo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:b3:ca:bd:04:b8:a0:65:b7:96:1a:58:2f:25:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
        Validity
            Not Before: Aug 23 07:01:44 2025 GMT
            Not After : Aug 24 07:01:44 2025 GMT
        Subject: CN=c418c237f712a7708ebaf672c8c3292f790ebe36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:05:c6:bf:7a:14:ef:3b:70:57:c8:00:eb:
                    eb:b5:c8:60:fb:2c:fd:46:8e:1f:ad:9b:97:70:7e:
                    8c:ba:ce:1b:80:70:a4:bb:61:a2:ba:7e:dc:6f:b3:
                    75:2c:4e:e3:15:8e:b4:0c:e5:3d:1f:94:d5:97:48:
                    6c:cb:ea:6f:42:74:02:34:d5:13:56:73:82:c2:39:
                    55:bc:b6:7b:b4:a2:dd:7a:17:9e:ed:a0:5b:be:5d:
                    c9:4d:ab:c8:a7:89:c7:86:70:29:b9:e7:37:17:28:
                    67:2c:32:34:e0:a6:63:5b:e1:ca:20:81:36:5a:bc:
                    41:52:e8:e3:71:69:ad:eb:1d:e7:e8:8f:d5:28:a2:
                    17:45:77:e0:9d:aa:3a:29:2a:c0:85:03:e4:c8:e9:
                    cc:77:66:a7:ab:db:8f:0d:65:92:14:36:8c:89:75:
                    6d:64:e7:ec:99:2a:15:3a:49:60:1f:de:34:22:89:
                    32:9e:78:7b:67:60:7e:98:5f:cb:9d:2a:74:10:1f:
                    d9:fc:7c:81:35:88:0a:aa:c7:8b:62:53:0f:0d:f3:
                    ac:cf:62:f9:7d:d8:fb:73:fc:e5:46:4e:35:ed:ea:
                    60:29:6a:91:88:ff:9e:b8:b6:98:15:72:6b:98:7e:
                    3b:fb:c1:3c:1c:01:73:41:99:f2:b3:e6:ce:35:60:
                    ef:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:18:C2:37:F7:12:A7:70:8E:BA:F6:72:C8:C3:29:2F:79:0E:BE:36
            X509v3 Authority Key Identifier:
                keyid:85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:eb:94:66:bd:f4:36:18:50:fb:83:61:85:19:27:ae:9d:66:
         d2:0f:ff:72:65:76:a3:33:d5:d4:0e:34:76:d5:58:75:49:9b:
         39:54:16:dd:8f:7b:c6:ce:f0:49:e6:f0:23:aa:43:e9:e6:ac:
         e1:d4:1c:92:c3:84:0b:a3:ab:03:03:6f:89:ec:82:ba:be:ad:
         13:d9:18:52:7e:22:02:30:57:ab:01:5f:4c:3c:76:7f:3d:9c:
         95:9d:a4:00:e1:ae:95:12:04:ef:9f:c1:c3:48:5e:1b:15:fc:
         75:93:1e:6a:4a:72:d1:b3:18:b3:d2:e1:b3:d7:9c:d5:d2:a0:
         9d:a7:3c:4e:ad:2f:91:6d:2e:16:de:1f:17:34:36:4d:53:cd:
         a0:0e:e0:e8:e1:35:f5:4a:ed:40:c4:55:ab:1a:b7:c6:0f:e8:
         d3:e5:d1:19:28:51:5c:cb:be:3e:9b:e7:63:17:80:a5:5a:d3:
         3f:ac:9b:19:c0:c6:f4:92:6b:19:86:fd:94:e4:53:b3:77:9c:
         26:fe:35:c0:7e:01:1c:0a:ad:6b:64:61:35:51:7f:69:70:a3:
         40:97:75:d7:0d:35:17:97:b9:7e:14:87:89:d0:f1:ec:28:58:
         cc:b7:d3:5c:86:89:dd:dd:f5:4d:fe:ac:77:ce:be:a1:82:d8:
         5a:8e:5a:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu7PKvQS4oGW3lhpYLyV0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NGMwZGIwMDY1ODQ0ZDk1OTRkZmU4ZGQ4ZWZkNzdlZDFl
NDkzZjgwHhcNMjUwODIzMDcwMTQ0WhcNMjUwODI0MDcwMTQ0WjAzMTEwLwYDVQQD
EyhjNDE4YzIzN2Y3MTJhNzcwOGViYWY2NzJjOGMzMjkyZjc5MGViZTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/0Fxr96FO87cFfIAOvrtchg+yz9
Ro4frZuXcH6Mus4bgHCku2Giun7cb7N1LE7jFY60DOU9H5TVl0hsy+pvQnQCNNUT
VnOCwjlVvLZ7tKLdehee7aBbvl3JTavIp4nHhnApuec3FyhnLDI04KZjW+HKIIE2
WrxBUujjcWmt6x3n6I/VKKIXRXfgnao6KSrAhQPkyOnMd2anq9uPDWWSFDaMiXVt
ZOfsmSoVOklgH940Iokynnh7Z2B+mF/LnSp0EB/Z/HyBNYgKqseLYlMPDfOsz2L5
fdj7c/zlRk417epgKWqRiP+euLaYFXJrmH47+8E8HAFzQZnys+bONWDvswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQYwjf3Eqdwjrr2csjDKS95Dr42MB8GA1UdIwQY
MBaAFIVMDbAGWETZWU3+jdjv137R5JP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFV3TnNBWllSTmxaVGY2TjJPX1hmdEhra19nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lYzY3ZGItYzdhMS00OGE2LWFiOTQt
NjBiOTM1OTViYWM5LzEvaFV3TnNBWllSTmxaVGY2TjJPX1hmdEhra19nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9lYzY3ZGItYzdhMS00OGE2LWFiOTQtNjBiOTM1OTViYWM5
LzEvaFV3TnNBWllSTmxaVGY2TjJPX1hmdEhra19nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+uUZr30
NhhQ+4NhhRknrp1m0g//cmV2ozPV1A40dtVYdUmbOVQW3Y97xs7wSebwI6pD6eas
4dQcksOEC6OrAwNvieyCur6tE9kYUn4iAjBXqwFfTDx2fz2clZ2kAOGulRIE75/B
w0heGxX8dZMeakpy0bMYs9Lhs9ec1dKgnac8Tq0vkW0uFt4fFzQ2TVPNoA7g6OE1
9UrtQMRVqxq3xg/o0+XRGShRXMu+PpvnYxeApVrTP6ybGcDG9JJrGYb9lORTs3ec
Jv41wH4BHAqta2RhNVF/aXCjQJd11w01F5e5fhSHidDx7ChYzLfTXIaJ3d31Tf6s
d86+oYLYWo5aNw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:26:57 2025 by rpki-client