Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
File:                     H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft (raw, json)
Hash identifier:          yiChBbo6oKTuZCFJoRmRr2rPzvtJNoXUAEzvmKZEB1U=
Subject key identifier:   D0:9A:3D:C0:34:16:83:44:5D:07:AF:A3:B0:17:E5:BB:06:9D:2D:53
Authority key identifier: 1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
Certificate issuer:       /CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Certificate serial:       0197B8FD239738D885DDC86DC91964BB0F3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
Manifest number:          0630
Signing time:             Sun 29 Jun 2025 00:01:26 +0000
Manifest this update:     Sun 29 Jun 2025 00:01:26 +0000
Manifest next update:     Mon 30 Jun 2025 00:01:26 +0000
Files and hashes:         1: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl (hash: cWtuKbx0nph1ekVOHTkUKZLuvgNcIym/JnMy2UEz2jM=)
                          2: stpDfm6iNdDYaLxAEW54ErOGA3g.roa (hash: 0TvfMldTzQqqOzNlOoBnIsJUFfnXCRYAaac2mQAq9jQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:fd:23:97:38:d8:85:dd:c8:6d:c9:19:64:bb:0f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
        Validity
            Not Before: Jun 29 00:01:26 2025 GMT
            Not After : Jun 30 00:01:26 2025 GMT
        Subject: CN=d09a3dc0341683445d07afa3b017e5bb069d2d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f0:22:40:df:7d:5d:05:c8:8f:eb:8f:b4:2f:
                    08:5d:22:79:7a:7b:5f:72:80:e4:ab:60:09:06:81:
                    b0:47:f5:e4:7b:be:d4:82:72:56:ae:d2:50:70:10:
                    7e:48:2d:7b:4b:b4:89:21:3d:ab:3e:5f:24:40:8e:
                    a7:e6:8e:b7:c3:24:ab:bc:2c:78:de:7f:16:ed:95:
                    0b:42:b4:d6:9e:6e:d0:2b:63:f0:c7:c1:d2:29:dd:
                    a9:a4:3b:7a:19:c0:45:f4:52:b1:9f:23:1d:6d:eb:
                    91:d9:72:b3:59:51:ce:e6:94:6a:12:20:66:8a:a7:
                    9a:f7:ff:48:00:3e:d5:4d:46:b6:13:2b:4a:ee:b8:
                    61:f3:1e:7d:b5:5a:20:aa:dc:ee:6f:44:33:75:e8:
                    d3:3b:7e:5d:69:8b:fe:c5:59:0d:e6:e4:87:4b:db:
                    61:ff:d5:91:5d:e1:9e:7f:5d:e7:66:0c:ed:37:ad:
                    41:a4:ac:5b:53:a1:11:c8:c5:c7:3f:99:3e:e3:84:
                    ec:8d:07:46:54:1b:c5:c3:99:40:fb:8e:d4:46:a2:
                    ea:1d:aa:38:ce:91:ec:8b:4f:48:2e:18:55:bb:75:
                    c8:8d:7d:30:94:bb:d3:bd:fe:51:07:e1:9c:68:8d:
                    91:66:5e:71:59:4e:21:fc:9a:f6:af:2c:9a:36:78:
                    b6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9A:3D:C0:34:16:83:44:5D:07:AF:A3:B0:17:E5:BB:06:9D:2D:53
            X509v3 Authority Key Identifier:
                keyid:1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:0b:8e:38:d9:10:70:b0:14:f0:07:52:63:96:01:dd:41:49:
         8d:49:83:3a:c9:f7:dc:18:93:7f:91:a5:a5:2b:fa:8a:92:1d:
         1e:a0:57:e0:79:00:1b:8a:7d:2c:bc:36:0d:a4:69:b3:73:63:
         c8:d8:6d:4b:3d:5b:2f:d0:be:8c:95:82:34:59:cb:60:1f:8b:
         27:ec:73:eb:03:e3:db:06:44:f2:72:17:3e:83:54:4c:e1:22:
         df:1e:43:31:4f:36:3b:8b:1d:00:d0:ac:9f:61:16:1e:a2:36:
         f7:8c:f4:40:4d:7c:e6:d7:28:b5:bc:e3:e9:2d:3c:5f:3c:06:
         a1:3a:f9:25:5a:23:89:b6:ca:0e:f5:e1:ba:cd:80:39:fd:94:
         e8:34:56:8b:a5:00:42:85:f3:f4:cb:b0:01:b4:37:fc:6b:25:
         68:6c:6a:27:00:31:41:f0:be:3b:e0:8c:26:1d:81:01:42:bc:
         c4:a2:a5:7e:db:dd:7a:2d:62:f8:2e:b0:f8:4f:a5:8f:a6:85:
         68:3f:ac:cb:6c:ff:a1:75:56:f5:00:4e:14:85:95:41:55:07:
         20:6d:50:09:c2:e6:cf:89:04:e3:9a:8c:84:c4:f6:f7:92:dc:
         42:ea:53:da:29:97:18:11:7e:88:e9:89:1f:5d:59:47:1e:8a:
         c0:03:97:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4/SOXONiF3chtyRlkuw87MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZWRjNGMxOWUwMzNhMTY3ZTRhZjc5NWQ1NGUzNGI3MWVh
MDkzYzYwHhcNMjUwNjI5MDAwMTI2WhcNMjUwNjMwMDAwMTI2WjAzMTEwLwYDVQQD
EyhkMDlhM2RjMDM0MTY4MzQ0NWQwN2FmYTNiMDE3ZTViYjA2OWQyZDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPAiQN99XQXIj+uPtC8IXSJ5entf
coDkq2AJBoGwR/Xke77UgnJWrtJQcBB+SC17S7SJIT2rPl8kQI6n5o63wySrvCx4
3n8W7ZULQrTWnm7QK2Pwx8HSKd2ppDt6GcBF9FKxnyMdbeuR2XKzWVHO5pRqEiBm
iqea9/9IAD7VTUa2EytK7rhh8x59tVogqtzub0QzdejTO35daYv+xVkN5uSHS9th
/9WRXeGef13nZgztN61BpKxbU6ERyMXHP5k+44TsjQdGVBvFw5lA+47URqLqHao4
zpHsi09ILhhVu3XIjX0wlLvTvf5RB+GcaI2RZl5xWU4h/Jr2ryyaNni26QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCaPcA0FoNEXQevo7AX5bsGnS1TMB8GA1UdIwQY
MBaAFB/txMGeAzoWfkr3ldVONLceoJPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSC0zRXdaNERPaFotU3ZlVjFVNDB0eDZnazhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kZjkxYzMtZDViOC00YTU4LWFlOWUt
MmY4NzliNTc1NGUxLzEvSC0zRXdaNERPaFotU3ZlVjFVNDB0eDZnazhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kZjkxYzMtZDViOC00YTU4LWFlOWUtMmY4NzliNTc1NGUx
LzEvSC0zRXdaNERPaFotU3ZlVjFVNDB0eDZnazhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAwuOONkQ
cLAU8AdSY5YB3UFJjUmDOsn33BiTf5GlpSv6ipIdHqBX4HkAG4p9LLw2DaRps3Nj
yNhtSz1bL9C+jJWCNFnLYB+LJ+xz6wPj2wZE8nIXPoNUTOEi3x5DMU82O4sdANCs
n2EWHqI294z0QE185tcotbzj6S08XzwGoTr5JVojibbKDvXhus2AOf2U6DRWi6UA
QoXz9MuwAbQ3/GslaGxqJwAxQfC+O+CMJh2BAUK8xKKlftvdei1i+C6w+E+lj6aF
aD+sy2z/oXVW9QBOFIWVQVUHIG1QCcLmz4kE45qMhMT295LcQupT2imXGBF+iOmJ
H11ZRx6KwAOXVg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:01:16 2025 by rpki-client