Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
File:                     HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft (raw, json)
Hash identifier:          SKPvWvNuz6seY37WCpyEUNiIv7PXrXgAkX/E9f1lYlc=
Subject key identifier:   D7:B6:66:14:B3:3A:7C:D1:6E:71:3F:5B:10:31:FB:AB:DE:12:17:EB
Authority key identifier: 1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23
Certificate issuer:       /CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
Certificate serial:       0196C013B12468FDC9B5436FF7E5FCC69D93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
Manifest number:          149C
Signing time:             Sun 11 May 2025 16:00:38 +0000
Manifest this update:     Sun 11 May 2025 16:00:38 +0000
Manifest next update:     Mon 12 May 2025 16:00:38 +0000
Files and hashes:         1: HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl (hash: y7vBNAvAHlXL1bdgFQwio1wFftCHHB+CyQRltR/bvcU=)
                          2: L5mBnSY0HeEAnUmT_xC_Qui2__o.roa (hash: pEnOPp9OXxAyhAm8z7JMf69YUoQujcTxw5JmYxCTmcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:13:b1:24:68:fd:c9:b5:43:6f:f7:e5:fc:c6:9d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
        Validity
            Not Before: May 11 16:00:38 2025 GMT
            Not After : May 12 16:00:38 2025 GMT
        Subject: CN=d7b66614b33a7cd16e713f5b1031fbabde1217eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:19:7b:21:90:0a:be:03:ab:c3:31:3d:c3:93:
                    31:1a:30:99:58:f7:25:60:29:2a:36:bd:69:f1:b3:
                    37:06:17:64:ca:a8:93:bb:1f:08:d5:02:67:fb:5c:
                    03:62:52:bf:82:6a:be:a9:4f:b6:80:16:14:f3:a3:
                    02:de:18:8e:6a:c7:fe:e6:df:fc:7d:02:45:c4:13:
                    cc:e3:2b:ad:2d:0f:9c:a3:16:68:e2:09:b7:92:25:
                    d0:c5:17:9b:6e:ea:bc:0c:55:ca:ca:4c:ca:1e:d0:
                    79:91:2f:34:8a:57:48:13:b8:df:87:fb:8a:25:cd:
                    e4:d5:d5:60:26:59:d1:ca:c1:47:ea:f1:85:a2:e3:
                    a9:4f:05:e2:22:4c:f8:5a:ba:13:fe:43:34:ca:73:
                    0c:fe:b5:23:cc:51:80:45:d7:8a:96:91:11:64:17:
                    dc:1c:55:ba:21:c8:89:09:a7:85:58:95:1c:f1:8b:
                    c6:33:d2:da:fc:83:44:1e:3f:a9:13:ad:70:fd:2f:
                    93:bc:7b:13:6f:d6:65:21:7f:f0:8a:ed:07:72:c0:
                    4a:f7:f0:49:bd:3c:07:00:bb:7d:36:55:7f:46:71:
                    9d:ba:1c:41:6f:e3:be:39:ef:ab:28:57:4a:b6:80:
                    b4:01:07:eb:43:72:e1:ea:0e:a0:be:25:9c:57:02:
                    57:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B6:66:14:B3:3A:7C:D1:6E:71:3F:5B:10:31:FB:AB:DE:12:17:EB
            X509v3 Authority Key Identifier:
                keyid:1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e1:66:75:ec:33:b5:dd:90:eb:4b:53:ea:9a:6c:22:ac:1b:
         c9:a0:31:ea:c4:4a:7d:7e:3c:8a:cc:d0:6b:eb:80:b9:b0:a8:
         88:54:77:c3:32:92:4b:83:db:e0:70:91:d9:eb:db:e3:9b:86:
         64:bc:86:31:f5:8c:e2:85:53:83:ad:75:58:54:d6:61:4d:d4:
         a4:a8:9e:3b:1d:eb:da:d1:0d:65:29:72:f5:ad:16:41:35:4b:
         17:3a:a0:d7:4c:67:c9:bc:08:81:d1:1a:73:91:26:fa:31:09:
         d9:55:fd:4c:18:42:9e:45:0a:b5:c2:68:91:b2:43:50:4e:39:
         d1:7b:3e:e8:88:cb:b3:95:0a:02:18:fc:d4:8c:4f:56:d1:cd:
         04:83:50:86:1c:ce:3a:f6:0d:6d:c7:ed:26:c1:93:da:cf:45:
         8d:b2:92:e8:ff:15:6b:78:01:c9:3e:ee:f5:17:06:bc:22:a0:
         18:79:d8:16:4c:cb:28:30:5a:8f:2e:f2:76:8d:d0:9d:8d:88:
         d1:22:0f:f8:ae:33:af:63:c7:d9:cb:60:d4:06:82:a1:f8:ce:
         f4:1f:83:cd:4e:c7:69:2d:33:ae:f5:67:14:51:5f:d3:3d:7d:
         15:3f:ff:67:ee:cf:e6:83:8e:9a:bc:55:c1:7a:d6:64:76:21:
         b2:e2:65:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAE7EkaP3JtUNv9+X8xp2TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZDhiMjVjY2VhYzM4Yzk5MzcyYmY3MmIwMGM2YzhiNjQx
OGU5MjMwHhcNMjUwNTExMTYwMDM4WhcNMjUwNTEyMTYwMDM4WjAzMTEwLwYDVQQD
EyhkN2I2NjYxNGIzM2E3Y2QxNmU3MTNmNWIxMDMxZmJhYmRlMTIxN2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohl7IZAKvgOrwzE9w5MxGjCZWPcl
YCkqNr1p8bM3BhdkyqiTux8I1QJn+1wDYlK/gmq+qU+2gBYU86MC3hiOasf+5t/8
fQJFxBPM4yutLQ+coxZo4gm3kiXQxRebbuq8DFXKykzKHtB5kS80ildIE7jfh/uK
Jc3k1dVgJlnRysFH6vGFouOpTwXiIkz4WroT/kM0ynMM/rUjzFGARdeKlpERZBfc
HFW6IciJCaeFWJUc8YvGM9La/INEHj+pE61w/S+TvHsTb9ZlIX/wiu0HcsBK9/BJ
vTwHALt9NlV/RnGduhxBb+O+Oe+rKFdKtoC0AQfrQ3Lh6g6gviWcVwJXjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNe2ZhSzOnzRbnE/WxAx+6veEhfrMB8GA1UdIwQY
MBaAFBzYslzOrDjJk3K/crAMbItkGOkjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE5peVhNNnNPTW1UY3I5eXNBeHNpMlFZNlNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9iNmM3ODMtZjU1ZC00ZWFkLThjNmEt
MTk2MzNmMDhlZDZhLzEvSE5peVhNNnNPTW1UY3I5eXNBeHNpMlFZNlNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9iNmM3ODMtZjU1ZC00ZWFkLThjNmEtMTk2MzNmMDhlZDZh
LzEvSE5peVhNNnNPTW1UY3I5eXNBeHNpMlFZNlNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuFmdewz
td2Q60tT6ppsIqwbyaAx6sRKfX48iszQa+uAubCoiFR3wzKSS4Pb4HCR2evb45uG
ZLyGMfWM4oVTg611WFTWYU3UpKieOx3r2tENZSly9a0WQTVLFzqg10xnybwIgdEa
c5Em+jEJ2VX9TBhCnkUKtcJokbJDUE450Xs+6IjLs5UKAhj81IxPVtHNBINQhhzO
OvYNbcftJsGT2s9FjbKS6P8Va3gByT7u9RcGvCKgGHnYFkzLKDBajy7ydo3QnY2I
0SIP+K4zr2PH2ctg1AaCofjO9B+DzU7HaS0zrvVnFFFf0z19FT//Z+7P5oOOmrxV
wXrWZHYhsuJlpA==
-----END CERTIFICATE-----
Generated at Mon May 12 01:10:37 2025 by rpki-client