Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
File:                     HdovfibLfXpWrGQF6QxqYakq0tE.mft (raw, json)
Hash identifier:          9bV2UeNzuaa+B5kEwYIGUptGEhDA8akI0pLp6VZpBeQ=
Subject key identifier:   91:61:FC:58:54:03:63:3D:1E:B6:8A:2C:8B:0E:99:5A:96:61:1D:74
Authority key identifier: 1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1
Certificate issuer:       /CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1
Certificate serial:       0198D4E0B53A5EB4A5D302A8096D15B1EBF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
Manifest number:          15FF
Signing time:             Sat 23 Aug 2025 03:02:32 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:32 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:32 +0000
Files and hashes:         1: HdovfibLfXpWrGQF6QxqYakq0tE.crl (hash: 7VZk6yIPU4QChWT9U7lhYpAfX6TfP+9W55ALp7mS2l4=)
                          2: QxYftvw4ScrdmE6izSAuqNiVV-s.roa (hash: Ug7LB4EKJVBqtTxRK9aYbiXduDif7sf/a25gAftWyKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:b5:3a:5e:b4:a5:d3:02:a8:09:6d:15:b1:eb:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1
        Validity
            Not Before: Aug 23 03:02:32 2025 GMT
            Not After : Aug 24 03:02:32 2025 GMT
        Subject: CN=9161fc585403633d1eb68a2c8b0e995a96611d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:82:c9:b1:18:8e:e4:63:10:bd:44:e7:d1:7f:
                    bb:22:4f:b7:f7:7d:2d:b6:cc:4b:ac:06:d6:a2:e5:
                    35:a8:e1:48:7b:47:67:d4:85:05:c1:0d:45:44:e8:
                    22:59:d4:10:45:41:a1:53:b6:ca:12:68:32:9e:aa:
                    4e:3c:29:15:9f:ab:10:86:c7:1f:c6:61:a8:e0:1b:
                    e3:ad:d6:2e:62:76:08:84:34:4f:a6:26:9e:34:97:
                    a5:7c:ab:35:7a:84:1b:e3:56:28:9a:90:4e:b6:c4:
                    96:91:fd:8c:c7:d3:9e:6d:8f:45:f0:8a:3d:a1:34:
                    d5:a0:a4:47:11:9f:b2:49:86:5f:b1:54:57:d3:99:
                    d6:53:d6:50:0c:cb:0a:a2:cb:8c:4f:cc:69:89:34:
                    07:2a:98:7a:cf:1c:e2:88:87:3d:67:cb:33:97:05:
                    24:7a:17:35:5f:23:62:81:ec:17:55:ed:72:09:92:
                    b1:0c:ac:ee:14:ce:25:07:39:f5:b2:3a:f4:91:90:
                    34:f0:eb:63:f6:c0:24:62:47:92:2b:3f:9a:ad:ed:
                    c1:c1:38:40:27:a7:db:cc:0a:b4:ab:c9:58:c9:5f:
                    ce:36:ee:db:57:8d:20:36:f3:ef:ae:c5:05:cf:65:
                    65:fa:49:34:71:eb:71:6d:96:d7:c3:fb:66:d4:0d:
                    c1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:61:FC:58:54:03:63:3D:1E:B6:8A:2C:8B:0E:99:5A:96:61:1D:74
            X509v3 Authority Key Identifier:
                keyid:1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:12:4a:73:a5:5f:f6:04:54:ae:a1:cf:f6:56:8b:2b:18:15:
         fb:bd:f2:f1:47:3a:72:a0:34:47:d5:66:ea:b4:9b:30:53:1b:
         cf:4a:00:fb:33:d2:3b:9e:ee:e4:73:66:1e:f5:54:a6:94:ee:
         c7:50:87:94:05:26:7f:a2:ec:99:94:d4:2f:8d:53:23:07:21:
         ab:ee:19:b6:81:7c:ca:70:df:1e:62:24:c3:9f:0c:15:51:c0:
         44:fd:63:02:0b:a5:e4:2e:8a:b8:a1:1d:11:7c:0e:a8:03:db:
         7d:ef:f7:de:d9:4e:f2:ba:80:a7:9a:92:68:0f:09:93:95:bf:
         af:08:92:b5:44:b8:28:16:d6:0d:10:69:8e:3d:1d:f8:90:7d:
         61:1b:29:98:d5:f9:f2:b2:02:ea:96:0f:35:2e:40:9b:1f:d4:
         4b:61:e4:6d:79:32:59:17:db:c2:0f:da:0e:10:d7:2a:b4:28:
         ed:35:04:3e:6a:7e:2b:c7:3e:ca:ce:4a:17:f8:d5:3f:19:e8:
         57:07:a2:dc:44:5b:55:ad:23:95:7c:fa:4f:ec:db:bd:7a:b9:
         d0:86:fa:b4:c9:3b:8f:72:18:a9:52:37:dc:e4:4c:16:b4:e2:
         c5:8c:02:38:77:02:d1:39:df:b7:64:63:ef:ee:7c:7f:81:8a:
         3a:fe:e6:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4LU6XrSl0wKoCW0VsevwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZGEyZjdlMjZjYjdkN2E1NmFjNjQwNWU5MGM2YTYxYTky
YWQyZDEwHhcNMjUwODIzMDMwMjMyWhcNMjUwODI0MDMwMjMyWjAzMTEwLwYDVQQD
Eyg5MTYxZmM1ODU0MDM2MzNkMWViNjhhMmM4YjBlOTk1YTk2NjExZDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4LJsRiO5GMQvUTn0X+7Ik+3930t
tsxLrAbWouU1qOFIe0dn1IUFwQ1FROgiWdQQRUGhU7bKEmgynqpOPCkVn6sQhscf
xmGo4BvjrdYuYnYIhDRPpiaeNJelfKs1eoQb41YompBOtsSWkf2Mx9OebY9F8Io9
oTTVoKRHEZ+ySYZfsVRX05nWU9ZQDMsKosuMT8xpiTQHKph6zxziiIc9Z8szlwUk
ehc1XyNigewXVe1yCZKxDKzuFM4lBzn1sjr0kZA08Otj9sAkYkeSKz+are3BwThA
J6fbzAq0q8lYyV/ONu7bV40gNvPvrsUFz2Vl+kk0cetxbZbXw/tm1A3BBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFh/FhUA2M9HraKLIsOmVqWYR10MB8GA1UdIwQY
MBaAFB3aL34my316VqxkBekMamGpKtLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGRvdmZpYkxmWHBXckdRRjZReHFZYWtxMHRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yOGIxNWYtZTdlOC00ZGE0LWJmYzct
NzQ4MGI1YTBkOTczLzEvSGRvdmZpYkxmWHBXckdRRjZReHFZYWtxMHRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8yOGIxNWYtZTdlOC00ZGE0LWJmYzctNzQ4MGI1YTBkOTcz
LzEvSGRvdmZpYkxmWHBXckdRRjZReHFZYWtxMHRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAthJKc6Vf
9gRUrqHP9laLKxgV+73y8Uc6cqA0R9Vm6rSbMFMbz0oA+zPSO57u5HNmHvVUppTu
x1CHlAUmf6LsmZTUL41TIwchq+4ZtoF8ynDfHmIkw58MFVHARP1jAgul5C6KuKEd
EXwOqAPbfe/33tlO8rqAp5qSaA8Jk5W/rwiStUS4KBbWDRBpjj0d+JB9YRspmNX5
8rIC6pYPNS5Amx/US2HkbXkyWRfbwg/aDhDXKrQo7TUEPmp+K8c+ys5KF/jVPxno
Vwei3ERbVa0jlXz6T+zbvXq50Ib6tMk7j3IYqVI33ORMFrTixYwCOHcC0Tnft2Rj
7+58f4GKOv7m7g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:40 2025 by rpki-client