Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
File:                     B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft (raw, json)
Hash identifier:          VFgjCxd/XenArSG2Vy+SNrnUZVVwdA/KNs9JUMPEdes=
Subject key identifier:   2D:87:8C:0D:A8:78:51:7C:AF:A2:80:D5:22:97:A9:EB:56:37:B5:98
Authority key identifier: 07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
Certificate issuer:       /CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
Certificate serial:       0198D5F178F1578B258F9E499E936D0BE052
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
Manifest number:          1148
Signing time:             Sat 23 Aug 2025 08:00:28 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:28 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:28 +0000
Files and hashes:         1: B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl (hash: pzkwxtqU9pC9fbJygu7Zxt0zDmQ9BTS82rF3W/JO2VI=)
                          2: jIFgf1lBNqu6NES_hhmJCRkx6WU.roa (hash: b4SkMZ2qfegq/aAVSnzcin5lHV5SoqB7AozMTZpTRfs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:78:f1:57:8b:25:8f:9e:49:9e:93:6d:0b:e0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
        Validity
            Not Before: Aug 23 08:00:28 2025 GMT
            Not After : Aug 24 08:00:28 2025 GMT
        Subject: CN=2d878c0da878517cafa280d52297a9eb5637b598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e4:2a:53:9f:9c:a0:78:ec:1e:55:6f:28:b2:
                    8a:ba:0e:55:53:4a:ac:54:2d:b1:0f:c2:7c:2c:6f:
                    e6:4f:8e:bb:57:4e:01:70:ed:01:05:09:26:39:cb:
                    07:8d:96:48:e2:4b:48:04:6d:b3:49:d8:c8:45:63:
                    a1:6f:0e:61:68:68:64:12:2d:0c:44:49:ea:6f:4f:
                    d7:c8:e5:1a:99:c5:81:5c:d3:ea:49:6e:c4:d3:59:
                    e2:06:75:4b:93:8b:e6:5d:b0:2e:0d:0e:64:8c:18:
                    e0:ac:6a:a9:48:a4:8b:eb:a0:7b:9a:e1:8b:46:0d:
                    b2:78:2a:f8:b5:31:5a:37:c2:1e:0d:3f:6b:6b:bf:
                    c4:f0:12:0e:57:3b:60:c5:89:38:83:45:6f:d2:61:
                    9a:f5:ff:cd:17:4f:1e:e4:59:7f:64:e5:3b:0c:03:
                    34:ec:68:01:89:ab:0c:c6:18:53:d9:8e:ad:75:4f:
                    5d:bb:6b:53:68:8a:b2:4b:6e:7f:16:93:41:64:1a:
                    96:b2:fe:f8:67:07:99:6a:e5:5d:47:c8:8c:52:43:
                    98:cb:3b:34:cc:3d:79:e9:e7:67:49:0b:d2:51:63:
                    fb:9b:cd:cf:1c:08:2f:9a:78:33:d0:75:dc:77:8a:
                    69:50:35:2e:a3:7c:fd:3c:fc:03:5e:ef:ea:25:89:
                    6f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:87:8C:0D:A8:78:51:7C:AF:A2:80:D5:22:97:A9:EB:56:37:B5:98
            X509v3 Authority Key Identifier:
                keyid:07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:13:26:9a:19:df:9d:43:ed:9d:68:73:20:ed:fe:7e:8a:43:
         80:e8:61:df:61:dc:72:dc:f8:c5:5b:20:7e:d7:21:d3:dd:0d:
         9d:0d:f0:5a:e3:f4:4b:bb:36:a0:92:68:a6:f6:c1:6a:53:41:
         5f:f1:14:81:9a:d4:8e:90:a2:d6:cf:ff:b7:d6:de:81:f6:0e:
         76:a4:39:83:c5:fe:ff:fb:28:cf:dd:1a:9a:4a:04:ff:21:20:
         84:0c:0e:39:c3:f1:2f:8b:9f:4f:7e:4b:85:e3:f1:2e:2a:c5:
         84:87:f4:da:44:4e:78:2e:fc:3d:1b:c8:e9:ce:4b:ae:fc:48:
         14:76:8b:b7:95:27:81:1c:57:af:d4:a8:51:c1:d5:87:91:74:
         82:fa:91:d4:4e:c5:d7:ad:f2:df:f0:43:a7:ac:3a:60:85:35:
         8c:2a:e8:58:0a:11:39:0b:e8:15:45:36:50:4d:70:16:76:f9:
         88:eb:52:84:9b:0c:1a:9c:2e:d1:ab:8c:21:a3:7e:3e:db:95:
         3f:26:5a:9e:c3:d0:6a:01:75:4a:63:3c:d2:8f:e3:b9:74:c0:
         4b:93:bf:19:16:c0:c9:08:87:33:54:3d:d6:95:0c:af:ef:79:
         75:1e:87:3d:c7:49:df:26:a5:a0:62:9f:14:8c:a6:cd:c6:2d:
         62:86:6e:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8XjxV4slj55JnpNtC+BSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ODFlZTg2OWQyZTFjMjAwZmY4YzY5N2UyZDM3ZWFhNDI5
NDBhMzYwHhcNMjUwODIzMDgwMDI4WhcNMjUwODI0MDgwMDI4WjAzMTEwLwYDVQQD
EygyZDg3OGMwZGE4Nzg1MTdjYWZhMjgwZDUyMjk3YTllYjU2MzdiNTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OQqU5+coHjsHlVvKLKKug5VU0qs
VC2xD8J8LG/mT467V04BcO0BBQkmOcsHjZZI4ktIBG2zSdjIRWOhbw5haGhkEi0M
REnqb0/XyOUamcWBXNPqSW7E01niBnVLk4vmXbAuDQ5kjBjgrGqpSKSL66B7muGL
Rg2yeCr4tTFaN8IeDT9ra7/E8BIOVztgxYk4g0Vv0mGa9f/NF08e5Fl/ZOU7DAM0
7GgBiasMxhhT2Y6tdU9du2tTaIqyS25/FpNBZBqWsv74ZweZauVdR8iMUkOYyzs0
zD156ednSQvSUWP7m83PHAgvmngz0HXcd4ppUDUuo3z9PPwDXu/qJYlvrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2HjA2oeFF8r6KA1SKXqetWN7WYMB8GA1UdIwQY
MBaAFAeB7oadLhwgD/jGl+LTfqpClAo2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjRIdWhwMHVIQ0FQLU1hWDR0Ti1xa0tVQ2pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81NjQ1ZDItNzIyNC00ZDEwLTgyYmYt
M2U3NTA1MWI4ZWFjLzEvQjRIdWhwMHVIQ0FQLU1hWDR0Ti1xa0tVQ2pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC81NjQ1ZDItNzIyNC00ZDEwLTgyYmYtM2U3NTA1MWI4ZWFj
LzEvQjRIdWhwMHVIQ0FQLU1hWDR0Ti1xa0tVQ2pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhMmmhnf
nUPtnWhzIO3+fopDgOhh32Hcctz4xVsgftch090NnQ3wWuP0S7s2oJJopvbBalNB
X/EUgZrUjpCi1s//t9begfYOdqQ5g8X+//soz90amkoE/yEghAwOOcPxL4ufT35L
hePxLirFhIf02kROeC78PRvI6c5LrvxIFHaLt5UngRxXr9SoUcHVh5F0gvqR1E7F
163y3/BDp6w6YIU1jCroWAoROQvoFUU2UE1wFnb5iOtShJsMGpwu0auMIaN+PtuV
PyZansPQagF1SmM80o/juXTAS5O/GRbAyQiHM1Q91pUMr+95dR6HPcdJ3yaloGKf
FIymzcYtYoZujQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:43:54 2025 by rpki-client