Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
File:                     hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft (raw, json)
Hash identifier:          8x8Txvu30HMQl7dhUYOR/42+pif9lQReEIMqa2zCFPQ=
Subject key identifier:   E6:D7:59:A1:58:81:F6:C2:23:A8:CC:A7:F8:69:90:40:60:F0:DA:63
Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
Certificate issuer:       /CN=845d042f65e1b1303a44e43e0e02748a75837b44
Certificate serial:       0197C75D0A9BB26FC99ECF491770704D14D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
Manifest number:          155B
Signing time:             Tue 01 Jul 2025 19:00:52 +0000
Manifest this update:     Tue 01 Jul 2025 19:00:52 +0000
Manifest next update:     Wed 02 Jul 2025 19:00:52 +0000
Files and hashes:         1: 9lF4Wddkx_RwPlb5HR8sz7VHAqw.roa (hash: Hn4j3J9eHkRE5z1tLuZOLQRVHX7ZllrYe5IpQOpZT5Q=)
                          2: KX-LT3dz707Vp7hkt51mW7kN47w.roa (hash: B+a9FfO6NerOzeUWDsk9OJMmWDCrppwYJ3/nJz/k+A8=)
                          3: VcGuKeLRRHKHiUo1p3J8wR7hlS4.roa (hash: +w/UxWBt5Z4UXYZ4yW2TIYsp5hWJ/kYYtNU8YXQGHVc=)
                          4: bMsxLLS-6mN3d3TVBhNMqgnz5AQ.roa (hash: FBjUOC9XwfJYZbTFVZbjXTw1auYANpnx/KFKsqWsZiU=)
                          5: hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl (hash: WagxHeRiL5WsQZcPSbaGRxQdVGz8PDTU2UNSutDyYQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c7:5d:0a:9b:b2:6f:c9:9e:cf:49:17:70:70:4d:14:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44
        Validity
            Not Before: Jul  1 19:00:52 2025 GMT
            Not After : Jul  2 19:00:52 2025 GMT
        Subject: CN=e6d759a15881f6c223a8cca7f869904060f0da63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:49:c9:c9:8a:5b:a4:8b:cf:19:0d:27:60:47:
                    e6:e5:1b:7c:9e:dc:89:75:44:ec:c0:f3:7e:cc:6e:
                    e8:88:cc:95:f8:9b:f6:36:51:d6:e3:42:05:0a:3b:
                    71:55:20:e9:3f:7b:25:9a:16:eb:21:21:af:de:b7:
                    88:58:d4:4d:8c:5f:c6:11:fd:15:d3:c4:ff:e2:34:
                    41:98:e9:fe:57:8b:b0:8e:f4:b7:ba:bc:1a:d9:58:
                    be:e4:07:b1:40:95:55:0a:bd:59:7b:0f:cf:bf:c3:
                    bc:91:b5:37:35:33:9d:ca:29:92:19:48:da:c6:7e:
                    7a:a6:8b:3c:d2:2a:fe:f9:a2:02:f7:d9:dd:0e:da:
                    b8:a2:86:1b:e3:ef:21:48:a2:77:1d:5d:3e:b2:b5:
                    6e:4c:93:df:37:b7:fc:01:7f:a9:04:17:cd:5e:ae:
                    0c:78:a3:7a:35:29:b4:5c:00:ae:64:dd:33:24:da:
                    e6:a9:b3:bd:1a:c2:cc:8a:09:b8:57:5f:44:33:3e:
                    9e:6a:ff:4f:64:0e:16:31:83:ff:98:1f:9e:91:1a:
                    63:01:8c:df:c5:39:82:32:2e:5d:99:3c:d0:b3:5f:
                    6e:d3:06:ce:59:f6:b9:e8:a8:07:ae:84:91:05:f3:
                    5e:e3:a0:a5:0f:2b:04:b8:f7:ef:44:18:fc:73:c0:
                    69:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D7:59:A1:58:81:F6:C2:23:A8:CC:A7:F8:69:90:40:60:F0:DA:63
            X509v3 Authority Key Identifier:
                keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:1e:bf:5c:ef:17:a8:d5:9a:44:41:8e:c3:48:a8:32:9d:0c:
         b6:07:00:a9:72:b7:9c:f4:d9:06:d3:9b:7a:76:d5:88:96:21:
         93:2e:9b:7f:d8:96:1b:28:8f:86:e5:b1:d9:40:d5:57:be:c6:
         64:89:8e:c6:40:3d:f8:f7:d0:be:3a:8c:89:2b:a8:c7:be:2d:
         87:c8:40:cc:5d:25:52:cd:e7:d5:0a:1c:af:51:23:b0:81:3c:
         0e:4d:51:9f:44:bd:91:ee:4f:bf:28:34:3b:36:5a:47:fe:10:
         87:24:f1:c0:e8:7a:b0:40:4b:4e:8a:87:6d:7f:cd:3d:ea:64:
         7a:7a:df:6e:fc:81:7c:e4:fc:1b:62:e2:15:0e:3b:0f:fa:aa:
         3a:37:5d:d9:a5:c2:a7:da:df:fa:d6:ea:30:08:c3:85:32:08:
         1d:d6:6c:0a:74:54:31:e9:cb:9c:f0:87:ae:94:56:38:28:d0:
         67:08:1a:2a:cc:76:90:3b:b3:c1:f5:85:8a:f9:7d:55:e5:d5:
         2c:25:ac:82:03:56:3b:b3:9d:19:10:96:89:6d:03:ef:2b:28:
         86:e7:0a:e5:fa:27:f4:55:9a:ad:3e:2c:2f:be:38:bc:96:ad:
         a7:77:d7:1c:44:e6:2a:23:a9:ec:85:8b:02:67:26:4a:78:94:
         db:2e:ec:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfHXQqbsm/Jns9JF3BwTRTTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NWQwNDJmNjVlMWIxMzAzYTQ0ZTQzZTBlMDI3NDhhNzU4
MzdiNDQwHhcNMjUwNzAxMTkwMDUyWhcNMjUwNzAyMTkwMDUyWjAzMTEwLwYDVQQD
EyhlNmQ3NTlhMTU4ODFmNmMyMjNhOGNjYTdmODY5OTA0MDYwZjBkYTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUnJyYpbpIvPGQ0nYEfm5Rt8ntyJ
dUTswPN+zG7oiMyV+Jv2NlHW40IFCjtxVSDpP3slmhbrISGv3reIWNRNjF/GEf0V
08T/4jRBmOn+V4uwjvS3urwa2Vi+5AexQJVVCr1Zew/Pv8O8kbU3NTOdyimSGUja
xn56pos80ir++aIC99ndDtq4ooYb4+8hSKJ3HV0+srVuTJPfN7f8AX+pBBfNXq4M
eKN6NSm0XACuZN0zJNrmqbO9GsLMigm4V19EMz6eav9PZA4WMYP/mB+ekRpjAYzf
xTmCMi5dmTzQs19u0wbOWfa56KgHroSRBfNe46ClDysEuPfvRBj8c8Bp8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObXWaFYgfbCI6jMp/hpkEBg8NpjMB8GA1UdIwQY
MBaAFIRdBC9l4bEwOkTkPg4CdIp1g3tEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEYwRUwyWGhzVEE2Uk9RLURnSjBpbldEZTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85NmRiY2QtNmEzOS00YzIwLTkxMjgt
ZDhjMzUxZDkzZWM2LzEvaEYwRUwyWGhzVEE2Uk9RLURnSjBpbldEZTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS85NmRiY2QtNmEzOS00YzIwLTkxMjgtZDhjMzUxZDkzZWM2
LzEvaEYwRUwyWGhzVEE2Uk9RLURnSjBpbldEZTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhR6/XO8X
qNWaREGOw0ioMp0MtgcAqXK3nPTZBtObenbViJYhky6bf9iWGyiPhuWx2UDVV77G
ZImOxkA9+PfQvjqMiSuox74th8hAzF0lUs3n1Qocr1EjsIE8Dk1Rn0S9ke5Pvyg0
OzZaR/4QhyTxwOh6sEBLToqHbX/NPepkenrfbvyBfOT8G2LiFQ47D/qqOjdd2aXC
p9rf+tbqMAjDhTIIHdZsCnRUMenLnPCHrpRWOCjQZwgaKsx2kDuzwfWFivl9VeXV
LCWsggNWO7OdGRCWiW0D7ysohucK5fon9FWarT4sL744vJatp3fXHETmKiOp7IWL
AmcmSniU2y7sUQ==
-----END CERTIFICATE-----
Generated at Wed Jul 2 05:03:10 2025 by rpki-client