Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
File:                     HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft (raw, json)
Hash identifier:          pK46Xqi2nSh9Zr9nwJ2nyNgaqu/t0lk19jt22jhCSdA=
Subject key identifier:   9C:BE:AB:A1:F6:34:2E:23:67:22:CA:FF:45:61:B0:E0:95:34:EF:E6
Authority key identifier: 1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE
Certificate issuer:       /CN=1d5da9109f614c7c4159b3231a3877702a6f21ce
Certificate serial:       0196BF6FA1FCB213EE465E7ECC16A8990835
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
Manifest number:          0B26
Signing time:             Sun 11 May 2025 13:01:26 +0000
Manifest this update:     Sun 11 May 2025 13:01:26 +0000
Manifest next update:     Mon 12 May 2025 13:01:26 +0000
Files and hashes:         1: HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl (hash: bCVcFzhJLMFp18qnxi2noM5ZPqb8Ah/Z2C53YXTT4wo=)
                          2: tVk3cWsdi3hZrDEonwmclNGT-5M.roa (hash: bJG7n4hjSkt99mV93dCKPOM2IO0DVMxNl1m0F3B2sm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 13:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:6f:a1:fc:b2:13:ee:46:5e:7e:cc:16:a8:99:08:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d5da9109f614c7c4159b3231a3877702a6f21ce
        Validity
            Not Before: May 11 13:01:26 2025 GMT
            Not After : May 12 13:01:26 2025 GMT
        Subject: CN=9cbeaba1f6342e236722caff4561b0e09534efe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:95:c3:a8:76:e6:07:59:09:6c:64:d1:7f:50:
                    70:a8:bb:c5:6b:f0:e2:60:6a:19:bb:4e:1a:27:cf:
                    8f:19:a0:82:ea:0b:b3:f8:48:a0:ab:3d:73:f8:0e:
                    84:1c:e6:df:06:a0:b3:31:a2:47:0a:a7:a5:d8:24:
                    c8:aa:ba:b1:93:db:2e:d7:c3:b0:74:a6:a3:62:0b:
                    e8:23:b9:de:81:84:93:b4:7e:93:4e:01:ed:81:5a:
                    a7:a6:5d:78:a1:02:18:ba:e5:40:0d:20:8b:78:dd:
                    9a:fc:fd:77:a6:f3:59:29:cd:3c:69:89:ba:cb:02:
                    4c:c9:69:94:e5:77:a2:da:f3:4d:4b:79:8c:47:cf:
                    ab:1e:fc:ec:0c:98:3c:58:a1:0c:0d:27:9c:72:4b:
                    7f:8b:fe:ec:98:82:d8:7f:ec:87:89:4c:78:09:59:
                    fe:9d:e1:c8:09:a2:0d:1c:81:af:b4:7d:a7:3f:fc:
                    f8:1b:b5:a0:f3:87:d8:17:87:a5:cb:b3:75:d2:c2:
                    00:0a:c7:c0:19:9f:f8:4f:09:c6:e1:7b:51:36:b8:
                    32:d5:84:3c:f7:da:a5:f0:88:8e:76:19:41:26:48:
                    b2:35:9c:71:38:31:9a:ea:c7:93:d6:0a:d5:bb:0c:
                    25:b3:5d:28:10:50:82:cb:75:31:94:cd:9f:bb:df:
                    40:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BE:AB:A1:F6:34:2E:23:67:22:CA:FF:45:61:B0:E0:95:34:EF:E6
            X509v3 Authority Key Identifier:
                keyid:1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:99:1c:68:d2:14:26:23:30:02:ba:0e:09:a5:14:29:0d:55:
         40:47:8c:64:bf:90:63:2a:43:9a:f3:0e:4b:dc:9e:30:23:36:
         2d:43:71:13:59:3b:16:4e:bc:d4:cd:86:76:ee:83:46:15:18:
         13:94:fd:4e:b4:1f:a8:82:07:2b:76:ac:6f:48:bd:4a:24:77:
         c7:6f:07:62:a8:03:2a:d3:4f:58:ef:75:52:81:3a:7f:22:17:
         57:e7:60:92:c0:fc:00:ff:87:19:73:07:80:ed:18:58:ee:ce:
         0d:57:0f:e8:6b:74:03:50:66:41:cc:14:fc:8d:22:ce:ab:a6:
         b9:63:5b:9a:9a:77:15:73:ff:1b:d3:ce:4f:32:e5:15:da:47:
         01:14:40:27:40:cd:d2:f0:1d:d0:a2:2a:5c:fb:a6:16:ef:61:
         5e:4b:5f:79:64:b7:34:c6:48:fa:2e:9a:88:c7:50:cd:5b:6a:
         3d:a0:e4:ec:04:18:be:4f:5d:5b:0c:03:ee:b9:bc:bf:a8:4e:
         78:b2:e5:53:be:ff:31:f2:23:f8:c6:41:2e:8a:aa:75:9a:69:
         f8:40:c3:10:94:0f:b5:36:9f:79:2f:51:2d:27:96:bf:be:68:
         62:aa:15:09:c6:f3:11:2d:5c:02:42:7c:84:01:6a:41:62:c4:
         b2:69:91:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/b6H8shPuRl5+zBaomQg1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNWRhOTEwOWY2MTRjN2M0MTU5YjMyMzFhMzg3NzcwMmE2
ZjIxY2UwHhcNMjUwNTExMTMwMTI2WhcNMjUwNTEyMTMwMTI2WjAzMTEwLwYDVQQD
Eyg5Y2JlYWJhMWY2MzQyZTIzNjcyMmNhZmY0NTYxYjBlMDk1MzRlZmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJXDqHbmB1kJbGTRf1BwqLvFa/Di
YGoZu04aJ8+PGaCC6guz+Eigqz1z+A6EHObfBqCzMaJHCqel2CTIqrqxk9su18Ow
dKajYgvoI7negYSTtH6TTgHtgVqnpl14oQIYuuVADSCLeN2a/P13pvNZKc08aYm6
ywJMyWmU5Xei2vNNS3mMR8+rHvzsDJg8WKEMDSecckt/i/7smILYf+yHiUx4CVn+
neHICaINHIGvtH2nP/z4G7Wg84fYF4ely7N10sIACsfAGZ/4TwnG4XtRNrgy1YQ8
99ql8IiOdhlBJkiyNZxxODGa6seT1grVuwwls10oEFCCy3UxlM2fu99AYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJy+q6H2NC4jZyLK/0VhsOCVNO/mMB8GA1UdIwQY
MBaAFB1dqRCfYUx8QVmzIxo4d3AqbyHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFYycEVKOWhUSHhCV2JNakdqaDNjQ3B2SWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zM2FjMGUtZTE5ZS00Yzg5LWJkZjMt
NzA2YTZmYzE2NGIxLzEvSFYycEVKOWhUSHhCV2JNakdqaDNjQ3B2SWM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8zM2FjMGUtZTE5ZS00Yzg5LWJkZjMtNzA2YTZmYzE2NGIx
LzEvSFYycEVKOWhUSHhCV2JNakdqaDNjQ3B2SWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpkcaNIU
JiMwAroOCaUUKQ1VQEeMZL+QYypDmvMOS9yeMCM2LUNxE1k7Fk681M2Gdu6DRhUY
E5T9TrQfqIIHK3asb0i9SiR3x28HYqgDKtNPWO91UoE6fyIXV+dgksD8AP+HGXMH
gO0YWO7ODVcP6Gt0A1BmQcwU/I0izqumuWNbmpp3FXP/G9POTzLlFdpHARRAJ0DN
0vAd0KIqXPumFu9hXktfeWS3NMZI+i6aiMdQzVtqPaDk7AQYvk9dWwwD7rm8v6hO
eLLlU77/MfIj+MZBLoqqdZpp+EDDEJQPtTafeS9RLSeWv75oYqoVCcbzES1cAkJ8
hAFqQWLEsmmRMA==
-----END CERTIFICATE-----
Generated at Sun May 11 20:08:42 2025 by rpki-client