Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
File:                     HkogILgtApTpCi1rLA8o0Rc7ZGU.mft (raw, json)
Hash identifier:          /TDIs4NHHqcU+/angV/L7FlACXqtJJ/DZbHfEHrnwQM=
Subject key identifier:   C1:EA:31:C3:3A:7D:DD:37:89:C7:4E:5D:BF:57:FC:74:48:4E:E7:E9
Authority key identifier: 1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65
Certificate issuer:       /CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
Certificate serial:       0197B77C85A94813A5B486A00927BC291732
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 17:01:20 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:20 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:20 +0000
Files and hashes:         1: 7wJbNCUcwtFlKnAHPgTuv8Sn0i4.roa (hash: Yg17vxRzYWiVt6fOmSwVpKWZGt89EQyeG3U2CWqSktI=)
                          2: HkogILgtApTpCi1rLA8o0Rc7ZGU.crl (hash: BG4qvTfhk8k4570papPhoNzBhLqAG/7mlmz1CDVesVU=)
                          3: I1sRKyvYdSWFdpxY3K3hgfpLh8c.roa (hash: EW9DVDBND5j7A8L4kBfb9CEdZ+sujph27uho+pUx/m0=)
                          4: IWHxNStdjrSROqwuZe7sT7LT4Nk.roa (hash: S/bzV1Gz+VxqpXjM3Pl83zzxF5vyuBSuFK0LxiEoibw=)
                          5: yFf2Zz0VjYagA0shVIplpiusWp4.roa (hash: Sonq+rZh7+zVQsS+x3AiHiTrq12H+Dw70vUAQVtyO0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:85:a9:48:13:a5:b4:86:a0:09:27:bc:29:17:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
        Validity
            Not Before: Jun 28 17:01:20 2025 GMT
            Not After : Jun 29 17:01:20 2025 GMT
        Subject: CN=c1ea31c33a7ddd3789c74e5dbf57fc74484ee7e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9b:24:9b:3d:fa:94:1c:5b:73:bd:6a:a3:bf:
                    8b:b3:65:18:58:e0:40:c2:52:12:35:b6:fe:3c:95:
                    5b:16:ee:1c:75:64:25:de:16:7a:e7:9b:26:d0:91:
                    11:5a:d6:bf:eb:f0:3c:2a:3a:55:23:2a:79:62:a4:
                    4c:3f:dd:cb:d6:3b:15:11:f2:72:8f:75:e4:57:26:
                    6d:48:60:0e:66:7f:53:b6:de:66:45:77:35:33:64:
                    44:58:4b:74:89:33:3c:7a:39:ff:7c:39:48:3d:97:
                    d0:b8:43:c9:68:15:73:b9:cb:f5:c6:93:56:e8:08:
                    46:3a:ef:b2:67:84:a3:b6:0a:ae:47:0c:1e:a4:50:
                    48:bc:ff:10:08:0e:b6:4d:7a:9a:64:d9:e4:62:ea:
                    80:66:63:e5:73:1c:1d:0c:3e:a3:df:dd:ba:ca:08:
                    1b:fd:01:56:e0:c6:ca:fd:43:5f:46:0e:b5:1e:77:
                    c0:7b:7c:15:e8:a0:00:4f:4a:3d:ed:4c:ae:74:ed:
                    3e:66:09:06:31:5a:a8:2a:2f:2a:4e:83:49:f3:98:
                    bb:ec:b0:f7:e6:b2:e0:71:73:af:fc:48:db:f4:45:
                    1e:c9:ad:92:24:8e:e5:57:46:c2:d3:f4:7a:43:eb:
                    25:bf:40:34:49:15:80:2b:da:54:30:f1:24:2a:12:
                    63:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:EA:31:C3:3A:7D:DD:37:89:C7:4E:5D:BF:57:FC:74:48:4E:E7:E9
            X509v3 Authority Key Identifier:
                keyid:1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a6:a8:12:07:5a:d4:ae:69:9f:21:99:4a:c9:36:b5:98:99:
         d7:a3:61:74:d0:78:8d:b7:df:fc:ea:18:28:2d:cd:0c:d3:6e:
         2e:b2:5d:84:d2:bd:84:43:88:be:77:e4:ed:36:7a:96:6b:26:
         ac:2b:35:5a:bd:6f:9c:2e:76:2e:bb:ed:7b:c2:be:18:6c:15:
         f5:6c:c5:41:91:22:6c:1b:2f:c7:29:92:fd:c3:f1:81:65:b1:
         f9:8d:10:03:e5:58:fd:f9:7e:35:ce:d5:b3:13:00:a7:6f:42:
         a4:25:3b:0b:12:fe:a5:49:66:d9:a1:5c:e1:d7:88:4e:17:8f:
         99:fb:ca:1e:0b:17:e3:a7:da:51:3c:05:6b:55:dc:f2:84:90:
         db:76:e8:47:f0:1a:7c:2c:12:21:78:19:2c:3e:f9:8c:a1:10:
         7d:cb:90:8b:32:14:79:8a:9b:53:15:51:4f:21:4a:c1:4e:4b:
         20:72:8e:61:4e:a8:6f:3b:f3:4a:f4:03:7e:bb:c8:9a:a6:3c:
         53:6d:d0:38:75:60:05:d6:bf:81:d8:85:6b:be:23:17:f2:6d:
         d5:ac:31:66:6a:28:76:26:b3:e2:06:c0:95:f4:18:1d:8d:81:
         e5:11:1e:f3:24:04:72:c4:c3:5d:77:ef:a1:4f:cb:06:c4:92:
         d3:19:14:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fIWpSBOltIagCSe8KRcyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNGEyMDIwYjgyZDAyOTRlOTBhMmQ2YjJjMGYyOGQxMTcz
YjY0NjUwHhcNMjUwNjI4MTcwMTIwWhcNMjUwNjI5MTcwMTIwWjAzMTEwLwYDVQQD
EyhjMWVhMzFjMzNhN2RkZDM3ODljNzRlNWRiZjU3ZmM3NDQ4NGVlN2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5skmz36lBxbc71qo7+Ls2UYWOBA
wlISNbb+PJVbFu4cdWQl3hZ655sm0JERWta/6/A8KjpVIyp5YqRMP93L1jsVEfJy
j3XkVyZtSGAOZn9Ttt5mRXc1M2REWEt0iTM8ejn/fDlIPZfQuEPJaBVzucv1xpNW
6AhGOu+yZ4SjtgquRwwepFBIvP8QCA62TXqaZNnkYuqAZmPlcxwdDD6j3926yggb
/QFW4MbK/UNfRg61HnfAe3wV6KAAT0o97UyudO0+ZgkGMVqoKi8qToNJ85i77LD3
5rLgcXOv/Ejb9EUeya2SJI7lV0bC0/R6Q+slv0A0SRWAK9pUMPEkKhJjpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHqMcM6fd03icdOXb9X/HRITufpMB8GA1UdIwQY
MBaAFB5KICC4LQKU6QotaywPKNEXO2RlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGtvZ0lMZ3RBcFRwQ2kxckxBOG8wUmM3WkdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy80YzQ4YmItMzY2Yy00MWY1LTliMmQt
NTMwNDQwYzRmYTI5LzEvSGtvZ0lMZ3RBcFRwQ2kxckxBOG8wUmM3WkdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy80YzQ4YmItMzY2Yy00MWY1LTliMmQtNTMwNDQwYzRmYTI5
LzEvSGtvZ0lMZ3RBcFRwQ2kxckxBOG8wUmM3WkdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6aoEgda
1K5pnyGZSsk2tZiZ16NhdNB4jbff/OoYKC3NDNNuLrJdhNK9hEOIvnfk7TZ6lmsm
rCs1Wr1vnC52Lrvte8K+GGwV9WzFQZEibBsvxymS/cPxgWWx+Y0QA+VY/fl+Nc7V
sxMAp29CpCU7CxL+pUlm2aFc4deIThePmfvKHgsX46faUTwFa1Xc8oSQ23boR/Aa
fCwSIXgZLD75jKEQfcuQizIUeYqbUxVRTyFKwU5LIHKOYU6obzvzSvQDfrvImqY8
U23QOHVgBda/gdiFa74jF/Jt1awxZmoodiaz4gbAlfQYHY2B5REe8yQEcsTDXXfv
oU/LBsSS0xkUWg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:16:30 2025 by rpki-client