Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
File:                     hLuutws_HQZxY1itmi7P730hJvs.mft (raw, json)
Hash identifier:          l1vihO4eYdNkGtDX7+CH/CaDynStAcpcMH2NLJDcvtk=
Subject key identifier:   3A:26:24:CB:4A:13:7F:82:DB:B9:EE:CD:3D:89:09:FB:68:CE:49:90
Authority key identifier: 84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
Certificate issuer:       /CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Certificate serial:       0197B7B37403E201892877B86F8EBB1810A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
Manifest number:          15BB
Signing time:             Sat 28 Jun 2025 18:01:20 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:20 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:20 +0000
Files and hashes:         1: 4OM3TuNkPVdmDzic95IjszBtoQA.roa (hash: dt9wokazgTd6EaqSSQPyaNUyIvDqSau9vaZZ+2FBCWU=)
                          2: POoeZ9JcIrFPhJTeWPU8jpK_vAc.roa (hash: ToulLGENoP/7yn7Jgz/qlwSorKjiORy0BAk4ycS9VNQ=)
                          3: hLuutws_HQZxY1itmi7P730hJvs.crl (hash: yIW4f57xPOguYh+0GGurpKaB6PuPEiDCFE2gM8FQkb8=)
                          4: qeftSyRSXmAOVqQRtKtHutbh0zk.roa (hash: VtULu7reN7PL4/u/6gxMFu7joJNl642+iClkA1K3FD4=)
                          5: tISHEAHtpJDdCS4l3Yug27J3cB4.roa (hash: MfAYQ6HspqhfS9luXY6/Ub4o3vZ2098dY5v7aRHURxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:74:03:e2:01:89:28:77:b8:6f:8e:bb:18:10:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
        Validity
            Not Before: Jun 28 18:01:20 2025 GMT
            Not After : Jun 29 18:01:20 2025 GMT
        Subject: CN=3a2624cb4a137f82dbb9eecd3d8909fb68ce4990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b0:a3:1e:94:06:2e:b3:de:92:40:d4:aa:38:
                    35:b3:18:b3:0e:04:09:39:38:50:1f:f8:e1:b7:b4:
                    54:64:93:3c:52:d7:96:c8:3f:c9:18:0f:1a:3e:b7:
                    f3:6d:b6:09:ea:62:40:1e:c3:15:75:1a:f1:94:2b:
                    d3:b3:18:63:58:6e:e7:72:94:20:07:da:61:f2:c7:
                    63:78:1e:90:1b:e6:40:ac:02:41:3e:cf:5a:95:28:
                    cd:66:c0:bc:1c:9f:87:f2:20:42:f1:85:7a:ef:2d:
                    65:37:f6:45:04:c5:09:dc:95:35:fc:8f:98:a6:2d:
                    c0:74:f2:cb:ba:98:b4:e8:b5:b3:af:08:f9:d1:4c:
                    49:b2:05:b1:22:42:63:38:8f:47:eb:f0:f7:9c:e7:
                    3f:c6:1d:1d:ce:20:37:30:35:a0:65:b2:ec:b9:71:
                    08:3e:44:83:05:76:e3:79:dc:e2:c0:38:a9:4f:fc:
                    1d:76:2b:e0:c8:dd:4e:31:16:42:02:02:c9:fb:eb:
                    14:02:bf:cc:d3:0c:3f:80:c2:5e:a0:d2:0a:e8:49:
                    33:32:c0:9a:7c:7a:81:51:d9:70:ab:2a:2d:b2:4c:
                    34:20:fa:40:96:6a:e7:15:67:50:95:b8:c6:a0:bf:
                    9f:41:70:a3:e4:c8:32:15:4f:17:77:3e:8f:a9:2c:
                    2b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:26:24:CB:4A:13:7F:82:DB:B9:EE:CD:3D:89:09:FB:68:CE:49:90
            X509v3 Authority Key Identifier:
                keyid:84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:89:cf:d0:1d:c0:a8:b4:ba:c8:8b:8e:fd:d0:44:cb:37:b6:
         d9:f4:09:ab:50:e3:07:80:75:f2:4d:b6:16:ab:05:78:2b:ed:
         d5:9c:63:35:b0:05:92:fe:f9:d6:ce:fa:97:0a:8a:6e:99:9b:
         5f:e6:4c:f2:e5:a8:16:bc:f0:bb:09:64:43:8b:f4:41:0b:e8:
         8b:92:e6:51:92:b1:d9:a4:e3:2d:41:a2:d3:de:c5:94:6d:fa:
         4e:01:cd:63:ee:7d:0b:c9:ee:2d:27:5d:16:d0:94:dd:84:fb:
         8c:d2:bd:0f:7f:13:96:44:33:13:5f:67:4f:6a:3e:90:e7:12:
         df:97:a9:8f:82:13:49:4a:e7:09:98:32:5f:8d:37:05:61:60:
         67:ba:21:49:a5:8b:73:ee:1c:33:f4:a2:42:81:ac:3d:a9:78:
         67:f1:20:0f:1d:11:6d:29:3c:e1:d1:13:a8:31:52:b4:93:80:
         1f:bf:9a:e1:95:5a:a3:f0:4b:16:05:c7:0a:ea:38:3b:17:20:
         49:1e:f7:0c:79:c2:75:76:f8:04:48:c1:fd:d4:9d:d8:5b:ef:
         29:ce:c8:03:a4:ae:a5:d5:d1:d1:09:9f:e7:42:74:55:78:09:
         46:c1:b0:2d:6f:1e:47:88:8b:9c:37:d7:3e:30:52:48:e2:97:
         a9:28:47:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s3QD4gGJKHe4b467GBCiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YmJhZWI3MGIzZjFkMDY3MTYzNThhZDlhMmVjZmVmN2Qy
MTI2ZmIwHhcNMjUwNjI4MTgwMTIwWhcNMjUwNjI5MTgwMTIwWjAzMTEwLwYDVQQD
EygzYTI2MjRjYjRhMTM3ZjgyZGJiOWVlY2QzZDg5MDlmYjY4Y2U0OTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbCjHpQGLrPekkDUqjg1sxizDgQJ
OThQH/jht7RUZJM8UteWyD/JGA8aPrfzbbYJ6mJAHsMVdRrxlCvTsxhjWG7ncpQg
B9ph8sdjeB6QG+ZArAJBPs9alSjNZsC8HJ+H8iBC8YV67y1lN/ZFBMUJ3JU1/I+Y
pi3AdPLLupi06LWzrwj50UxJsgWxIkJjOI9H6/D3nOc/xh0dziA3MDWgZbLsuXEI
PkSDBXbjedziwDipT/wddivgyN1OMRZCAgLJ++sUAr/M0ww/gMJeoNIK6EkzMsCa
fHqBUdlwqyotskw0IPpAlmrnFWdQlbjGoL+fQXCj5MgyFU8Xdz6PqSwrTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDomJMtKE3+C27nuzT2JCftozkmQMB8GA1UdIwQY
MBaAFIS7rrcLPx0GcWNYrZouz+99ISb7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEx1dXR3c19IUVp4WTFpdG1pN1A3MzBoSnZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iNjdlYjctZTQ5Ni00YzMxLTlmNjct
OTc5MDJkOGE3ZmE2LzEvaEx1dXR3c19IUVp4WTFpdG1pN1A3MzBoSnZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9iNjdlYjctZTQ5Ni00YzMxLTlmNjctOTc5MDJkOGE3ZmE2
LzEvaEx1dXR3c19IUVp4WTFpdG1pN1A3MzBoSnZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArYnP0B3A
qLS6yIuO/dBEyze22fQJq1DjB4B18k22FqsFeCvt1ZxjNbAFkv751s76lwqKbpmb
X+ZM8uWoFrzwuwlkQ4v0QQvoi5LmUZKx2aTjLUGi097FlG36TgHNY+59C8nuLSdd
FtCU3YT7jNK9D38TlkQzE19nT2o+kOcS35epj4ITSUrnCZgyX403BWFgZ7ohSaWL
c+4cM/SiQoGsPal4Z/EgDx0RbSk84dETqDFStJOAH7+a4ZVao/BLFgXHCuo4Oxcg
SR73DHnCdXb4BEjB/dSd2FvvKc7IA6SupdXR0Qmf50J0VXgJRsGwLW8eR4iLnDfX
PjBSSOKXqShHaQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:26 2025 by rpki-client