Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
File:                     HtPY4p4GO50nQKs95sciVeyNBVc.mft (raw, json)
Hash identifier:          blL2LRns37KpnW2c6QVEGwuy9L8twrteYSVL9bBCliM=
Subject key identifier:   26:A0:B2:E4:AB:69:96:4B:9B:39:BE:1C:91:98:15:72:55:56:3B:B5
Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
Certificate issuer:       /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Certificate serial:       0197B6A1CC34E92CDEC9A74164AB81EACC61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
Manifest number:          11B0
Signing time:             Sat 28 Jun 2025 13:02:26 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:26 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:26 +0000
Files and hashes:         1: 1ffKjQocjrQNsazj1CAi9JjVS5M.roa (hash: LGq8PY1XybDfBXT9FGzMq8PfJwuGWsOSqjxZ40jc9hQ=)
                          2: 2UbS1EAloXEyA0BxAmNaFARQcNQ.roa (hash: cZYI6Or2Jx26mD2t9A5DVd+NiBoz4kQO/JozvVMQ0oE=)
                          3: HtPY4p4GO50nQKs95sciVeyNBVc.crl (hash: oEmcCdcH14xAuWLmR9nXuUxDv2RLtXO4s45aMSziEjY=)
                          4: Kx_HhRKSclovibYPTKsUbvIcnP4.roa (hash: JQyTdc/rfi6m77h0pBZ1O2Zt7h/QM9DkjjB00attiWg=)
                          5: asHOk92nEQdrA8kG1RzUPuElHIs.roa (hash: Bdn7BKICOrC/wBSU74hIScdBDmMC3VmUhW1hWTywPms=)
                          6: lLJ_L0PK663lLmvADNe5r45-IEc.roa (hash: pgD1dJtWRe5QdMC1LCOfOn4pTfP1hV/KV545PRL6HI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:cc:34:e9:2c:de:c9:a7:41:64:ab:81:ea:cc:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
        Validity
            Not Before: Jun 28 13:02:26 2025 GMT
            Not After : Jun 29 13:02:26 2025 GMT
        Subject: CN=26a0b2e4ab69964b9b39be1c9198157255563bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:89:6a:1e:56:d9:fd:bb:44:34:43:60:f4:b3:
                    28:92:ba:e7:62:89:2b:53:1f:f7:a6:85:6f:95:d3:
                    f2:5d:55:c7:97:f9:0a:21:f7:f2:80:ad:35:5e:4c:
                    cb:05:f9:c4:fc:b6:14:ea:6d:eb:1d:26:2c:9a:74:
                    f2:59:10:43:cc:38:2d:e6:1c:ec:02:ae:92:5c:b8:
                    ee:0e:a1:42:7d:91:56:a3:fc:97:44:9d:d5:65:3a:
                    bd:12:15:71:a2:5c:b1:48:bf:99:c0:13:a5:75:8f:
                    8d:95:07:ae:2c:77:cb:6a:ec:81:bd:7f:e0:53:70:
                    d2:61:6a:39:c6:f4:ca:cf:37:9c:62:17:fc:54:87:
                    01:27:e0:b7:90:aa:a9:eb:d4:d7:e6:83:57:8e:0a:
                    93:46:77:f0:c8:e8:c9:60:fe:7d:61:9a:58:9a:f0:
                    76:a7:0e:96:85:28:29:b5:9f:e9:3e:bb:89:84:a6:
                    15:b3:c4:94:40:75:8f:ea:48:32:49:9d:7b:09:34:
                    97:7e:4b:47:11:cc:28:a9:aa:66:4e:b0:d7:c6:f3:
                    99:7c:92:b4:ba:fe:1f:b2:74:00:bc:44:29:39:c8:
                    aa:a8:22:28:18:9d:aa:7c:5b:a7:8c:bb:92:20:0a:
                    6c:53:9b:47:ef:9e:4b:be:ec:24:2c:9c:f6:f6:90:
                    2f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A0:B2:E4:AB:69:96:4B:9B:39:BE:1C:91:98:15:72:55:56:3B:B5
            X509v3 Authority Key Identifier:
                keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:f3:f6:f0:45:97:19:08:16:fb:13:63:24:a1:f3:2a:f4:41:
         1d:11:d9:53:f3:72:eb:c9:a2:60:15:8c:9b:83:ab:f2:04:ee:
         87:4b:df:75:cf:1d:5c:55:d0:43:1b:90:b6:3b:ff:f4:73:24:
         dd:64:90:5f:2e:e1:1d:f0:86:b2:24:03:c4:4e:39:7b:55:5b:
         78:94:06:50:fb:04:35:6f:65:01:7a:2c:19:2b:e1:b5:c8:6e:
         f1:22:bb:e1:a5:00:da:74:da:14:0b:bb:66:b2:ba:f9:89:7e:
         af:e6:19:5e:1f:02:c1:da:d0:59:8e:f6:1a:1b:46:81:2f:c4:
         07:b1:83:36:62:4d:f9:d9:4f:a1:54:36:02:32:93:3d:d6:c2:
         5b:77:b2:58:13:d8:48:a6:33:dd:fa:e2:be:40:27:06:17:91:
         83:66:8e:a7:6e:98:89:04:50:6f:28:c6:43:72:ec:18:b8:e6:
         f8:59:21:b3:05:a8:bd:9f:db:52:a1:ba:24:26:ee:35:02:e2:
         4e:e8:80:4a:09:1c:9e:de:39:c6:e8:a9:6c:21:d5:b7:c2:03:
         02:20:bb:8d:4a:ec:04:51:7b:70:d4:80:3e:a1:c7:a3:f5:d5:
         62:4f:a6:24:22:15:c4:cd:8e:83:60:d0:d6:82:27:89:56:45:
         95:f2:87:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ocw06SzeyadBZKuB6sxhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZDNkOGUyOWUwNjNiOWQyNzQwYWIzZGU2YzcyMjU1ZWM4
ZDA1NTcwHhcNMjUwNjI4MTMwMjI2WhcNMjUwNjI5MTMwMjI2WjAzMTEwLwYDVQQD
EygyNmEwYjJlNGFiNjk5NjRiOWIzOWJlMWM5MTk4MTU3MjU1NTYzYmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnolqHlbZ/btENENg9LMokrrnYokr
Ux/3poVvldPyXVXHl/kKIffygK01XkzLBfnE/LYU6m3rHSYsmnTyWRBDzDgt5hzs
Aq6SXLjuDqFCfZFWo/yXRJ3VZTq9EhVxolyxSL+ZwBOldY+NlQeuLHfLauyBvX/g
U3DSYWo5xvTKzzecYhf8VIcBJ+C3kKqp69TX5oNXjgqTRnfwyOjJYP59YZpYmvB2
pw6WhSgptZ/pPruJhKYVs8SUQHWP6kgySZ17CTSXfktHEcwoqapmTrDXxvOZfJK0
uv4fsnQAvEQpOciqqCIoGJ2qfFunjLuSIApsU5tH755LvuwkLJz29pAvLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCagsuSraZZLmzm+HJGYFXJVVju1MB8GA1UdIwQY
MBaAFB7T2OKeBjudJ0CrPebHIlXsjQVXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi80ZDljODMtZjk2MC00OGFjLWJiZjUt
OWRjYTVjYzgwZGQ5LzEvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi80ZDljODMtZjk2MC00OGFjLWJiZjUtOWRjYTVjYzgwZGQ5
LzEvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbPP28EWX
GQgW+xNjJKHzKvRBHRHZU/Ny68miYBWMm4Or8gTuh0vfdc8dXFXQQxuQtjv/9HMk
3WSQXy7hHfCGsiQDxE45e1VbeJQGUPsENW9lAXosGSvhtchu8SK74aUA2nTaFAu7
ZrK6+Yl+r+YZXh8CwdrQWY72GhtGgS/EB7GDNmJN+dlPoVQ2AjKTPdbCW3eyWBPY
SKYz3frivkAnBheRg2aOp26YiQRQbyjGQ3LsGLjm+FkhswWovZ/bUqG6JCbuNQLi
TuiASgkcnt45xuipbCHVt8IDAiC7jUrsBFF7cNSAPqHHo/XVYk+mJCIVxM2Og2DQ
1oIniVZFlfKHgw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:27 2025 by rpki-client