Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
File:                     hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft (raw, json)
Hash identifier:          AjVuMUiyUWvBOo3rmQpaI8WP2hOiDCujitN70fCOlXE=
Subject key identifier:   72:40:46:BD:38:F0:37:16:04:A3:17:CF:47:B5:92:50:42:B2:EF:88
Authority key identifier: 85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32
Certificate issuer:       /CN=8559fea7e83e64e5d82562313c3a3f190f49f032
Certificate serial:       0198D4E032F51C457778629A4147392E9B25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
Manifest number:          112F
Signing time:             Sat 23 Aug 2025 03:01:59 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:59 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:59 +0000
Files and hashes:         1: hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl (hash: SSC72MhFT2tR84QYZQ6eAn3U9LQDsnsVreZTVEk6AQo=)
                          2: uwxSfgtDb1hs4GjNpuGb8j73UQc.roa (hash: RSHlzEu5gedHDd64WPHnVhXKRlBuPWqfK8I3+3ZiN70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:32:f5:1c:45:77:78:62:9a:41:47:39:2e:9b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8559fea7e83e64e5d82562313c3a3f190f49f032
        Validity
            Not Before: Aug 23 03:01:59 2025 GMT
            Not After : Aug 24 03:01:59 2025 GMT
        Subject: CN=724046bd38f0371604a317cf47b5925042b2ef88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4d:e3:8f:6b:f8:36:b8:12:25:6d:17:41:5e:
                    75:4f:c1:54:08:61:99:b8:ee:9b:05:d7:e0:18:96:
                    1c:b5:85:2e:59:75:61:dd:01:ed:50:fb:cf:76:a0:
                    27:49:6c:2c:b6:49:2b:25:36:fb:40:0a:af:f0:be:
                    c6:c9:3b:c9:98:9c:c5:5c:92:7a:5c:ce:20:c3:0a:
                    d7:83:69:fc:1e:35:a4:cc:3a:99:31:3e:fb:a8:e0:
                    cb:22:d7:bc:dd:45:e2:62:e8:4e:3e:04:eb:c6:83:
                    e9:22:78:86:71:31:5b:3a:ef:91:91:81:b1:cc:d5:
                    ed:12:1e:0c:fe:f0:e3:70:5a:11:be:b5:b5:0d:25:
                    c8:ca:79:6c:b8:34:51:10:0a:79:fd:94:77:bf:66:
                    c4:08:fd:82:2e:da:45:69:0c:89:64:9f:43:1e:59:
                    cb:73:dd:00:9f:10:b8:b8:7e:cb:78:53:4c:ec:87:
                    fd:9a:f5:ab:6d:d5:c3:d0:b2:66:42:99:b8:b6:58:
                    b5:42:f4:2b:85:a2:11:7e:b3:f4:9f:ca:68:ec:34:
                    c8:aa:b3:4d:d4:71:81:c8:e0:ed:2e:61:c8:8c:b9:
                    f2:73:9f:d3:83:4e:e5:e6:86:15:b6:7d:ae:92:0d:
                    44:1a:96:1b:5c:b3:72:6e:13:fe:44:68:95:1a:fa:
                    de:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:40:46:BD:38:F0:37:16:04:A3:17:CF:47:B5:92:50:42:B2:EF:88
            X509v3 Authority Key Identifier:
                keyid:85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:5f:e5:cc:6c:d8:90:d4:12:c5:16:33:eb:a3:2c:6a:12:77:
         e5:0f:cf:cf:fb:e3:bb:26:1d:3c:cf:19:be:bc:18:24:7b:cd:
         e2:3f:bc:e2:7a:4a:41:e0:dd:3f:7b:96:52:51:74:2c:7a:5f:
         68:46:cb:d7:f3:37:71:68:8d:6a:c0:f3:f0:e6:b6:10:8c:d9:
         a1:62:c0:22:ed:34:13:61:21:5a:d7:a2:d0:46:ba:21:59:e2:
         30:d7:84:86:d1:7b:be:5c:57:6d:f5:79:25:c9:0c:26:8d:8f:
         5f:e0:b1:6b:61:ca:41:b8:71:fe:02:e8:b5:52:41:02:ce:fe:
         15:24:fb:1b:a9:6f:dd:cb:78:3a:f6:7c:70:bc:7c:f9:4d:66:
         51:a8:95:5b:09:7d:58:44:dc:a2:a3:da:d1:53:ed:42:dd:95:
         80:79:b3:33:9a:57:11:80:c5:52:59:7c:75:11:27:99:33:c7:
         41:78:ad:3c:d3:60:6e:d8:83:0d:a0:76:60:3e:1d:48:ee:ae:
         be:ef:91:6c:f2:80:dd:83:3a:fe:11:46:e5:09:62:dc:3a:72:
         b4:66:17:af:88:2d:eb:ad:fb:73:d5:ff:9c:16:ac:d8:ba:e1:
         5e:df:5e:c4:f7:a3:4d:ce:d5:56:4c:9d:77:1d:e9:ab:80:51:
         f5:b6:7b:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4DL1HEV3eGKaQUc5LpslMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NTlmZWE3ZTgzZTY0ZTVkODI1NjIzMTNjM2EzZjE5MGY0
OWYwMzIwHhcNMjUwODIzMDMwMTU5WhcNMjUwODI0MDMwMTU5WjAzMTEwLwYDVQQD
Eyg3MjQwNDZiZDM4ZjAzNzE2MDRhMzE3Y2Y0N2I1OTI1MDQyYjJlZjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE3jj2v4NrgSJW0XQV51T8FUCGGZ
uO6bBdfgGJYctYUuWXVh3QHtUPvPdqAnSWwstkkrJTb7QAqv8L7GyTvJmJzFXJJ6
XM4gwwrXg2n8HjWkzDqZMT77qODLIte83UXiYuhOPgTrxoPpIniGcTFbOu+RkYGx
zNXtEh4M/vDjcFoRvrW1DSXIynlsuDRREAp5/ZR3v2bECP2CLtpFaQyJZJ9DHlnL
c90AnxC4uH7LeFNM7If9mvWrbdXD0LJmQpm4tli1QvQrhaIRfrP0n8po7DTIqrNN
1HGByODtLmHIjLnyc5/Tg07l5oYVtn2ukg1EGpYbXLNybhP+RGiVGvreTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJARr048DcWBKMXz0e1klBCsu+IMB8GA1UdIwQY
MBaAFIVZ/qfoPmTl2CViMTw6PxkPSfAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFZuLXAtZy1aT1hZSldJeFBEb19HUTlKOERJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83NmU4N2QtNzU5NS00YmExLWEyZDct
ODcwZTY0ZDQ2NGQ1LzEvaFZuLXAtZy1aT1hZSldJeFBEb19HUTlKOERJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny83NmU4N2QtNzU5NS00YmExLWEyZDctODcwZTY0ZDQ2NGQ1
LzEvaFZuLXAtZy1aT1hZSldJeFBEb19HUTlKOERJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1/lzGzY
kNQSxRYz66MsahJ35Q/Pz/vjuyYdPM8ZvrwYJHvN4j+84npKQeDdP3uWUlF0LHpf
aEbL1/M3cWiNasDz8Oa2EIzZoWLAIu00E2EhWtei0Ea6IVniMNeEhtF7vlxXbfV5
JckMJo2PX+Cxa2HKQbhx/gLotVJBAs7+FST7G6lv3ct4OvZ8cLx8+U1mUaiVWwl9
WETcoqPa0VPtQt2VgHmzM5pXEYDFUll8dREnmTPHQXitPNNgbtiDDaB2YD4dSO6u
vu+RbPKA3YM6/hFG5Qli3DpytGYXr4gt6637c9X/nBas2LrhXt9exPejTc7VVkyd
dx3pq4BR9bZ7sw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:21 2025 by rpki-client