Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
File:                     MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft (raw, json)
Hash identifier:          BfEg+l8G1GeZkjNd/Faeo2DePo500LIsXi6zIDjyAwo=
Subject key identifier:   87:33:5E:DE:B5:F7:48:EC:13:BA:76:F7:95:20:9F:E3:3E:CA:08:EC
Authority key identifier: 32:91:C7:FD:57:12:F9:0E:D5:D1:31:D3:AB:18:CB:AD:7D:D7:AE:5E
Certificate issuer:       /CN=3291c7fd5712f90ed5d131d3ab18cbad7dd7ae5e
Certificate serial:       0196AFFB6B6784E371B993EAD1F0A5421B06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
Manifest number:          11D5
Signing time:             Thu 08 May 2025 13:00:11 +0000
Manifest this update:     Thu 08 May 2025 13:00:11 +0000
Manifest next update:     Fri 09 May 2025 13:00:11 +0000
Files and hashes:         1: MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl (hash: LI+XhkhF+YyB4DDaXpkJu/9aF/PWs027dRWeEWwApkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:af:fb:6b:67:84:e3:71:b9:93:ea:d1:f0:a5:42:1b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3291c7fd5712f90ed5d131d3ab18cbad7dd7ae5e
        Validity
            Not Before: May  8 13:00:11 2025 GMT
            Not After : May  9 13:00:11 2025 GMT
        Subject: CN=87335edeb5f748ec13ba76f795209fe33eca08ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:26:b6:80:80:7c:47:63:76:7c:9d:f8:ba:0f:
                    ab:dd:f4:01:fb:d7:de:ae:05:2a:1f:a9:c4:a2:05:
                    dd:09:ff:88:56:eb:8a:c5:bc:ed:40:1c:ba:2f:c6:
                    3b:f7:c0:9e:91:30:f5:ca:2a:95:96:ec:c8:87:da:
                    b6:a7:33:5a:c7:a0:8d:3e:ff:70:14:c0:38:72:f9:
                    8f:2c:c9:73:f2:b6:32:4c:01:9c:4f:d1:09:56:31:
                    ce:13:49:73:bb:a3:fe:18:31:f5:06:0c:61:88:ca:
                    8a:0e:5f:3a:c0:3d:e4:6d:25:e7:75:89:61:ab:a9:
                    3c:dc:6b:7b:04:27:fa:29:6f:3b:31:e6:84:a8:c7:
                    f9:11:13:1e:6c:d8:54:c5:2f:ee:78:aa:7d:c1:38:
                    f9:fc:f9:98:18:3a:bb:b2:95:38:31:dd:7e:9e:47:
                    92:73:7e:80:dc:8a:90:1d:3e:68:29:b2:ea:c0:e4:
                    48:1e:d7:a5:94:b7:3b:03:8f:27:90:4c:c8:1d:9b:
                    ba:41:57:40:89:d9:57:4f:9d:10:41:7e:df:a6:5b:
                    bd:4b:dc:a4:58:09:1b:00:dd:31:ec:f2:23:b0:8b:
                    82:7f:e4:7b:a6:93:ba:dc:99:3a:81:d8:90:c1:a7:
                    ef:e4:9d:d3:09:79:59:53:37:26:3e:f6:97:b6:60:
                    10:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:33:5E:DE:B5:F7:48:EC:13:BA:76:F7:95:20:9F:E3:3E:CA:08:EC
            X509v3 Authority Key Identifier:
                keyid:32:91:C7:FD:57:12:F9:0E:D5:D1:31:D3:AB:18:CB:AD:7D:D7:AE:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:f6:29:49:01:74:36:fc:eb:c0:9a:13:7a:78:dc:09:a8:13:
         b3:bf:4b:ff:a3:45:0e:eb:d2:b3:c3:ab:61:9d:16:e1:a8:43:
         e9:5b:ad:21:7b:e3:97:1d:00:46:79:2e:6d:e3:64:08:07:e5:
         77:16:ca:9c:f5:ce:7a:bc:91:bd:64:ae:bd:f7:6f:58:df:cf:
         cb:a2:ab:0f:0a:dc:ce:1b:8b:bf:66:ef:32:65:af:fc:44:35:
         4d:2d:87:b5:53:48:ca:cc:78:86:8e:cb:bb:a1:ec:9a:25:d0:
         0b:2b:a2:51:4a:5e:f2:92:fd:f7:81:90:fe:8e:f4:67:fe:9d:
         a7:f8:57:13:46:1a:b0:51:72:9e:53:78:58:8f:43:26:e8:c1:
         02:26:05:da:c3:be:b1:58:02:64:43:e8:c0:87:ea:d3:4c:a8:
         e3:ae:7f:ca:0b:5a:37:d6:7b:b2:c7:e8:a9:e0:aa:c1:04:1f:
         34:99:d9:0d:95:ae:55:5e:c8:67:e4:3c:89:d8:38:3f:1c:ad:
         23:8b:b3:d0:27:2b:e0:dc:f8:f8:44:2d:cb:81:69:30:29:76:
         4e:84:f2:69:96:aa:1a:40:ba:6d:b7:9a:c8:15:bf:56:25:b7:
         22:2d:9a:13:66:66:53:a8:c9:48:20:00:d6:6c:51:95:a1:22:
         d6:6b:87:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZav+2tnhONxuZPq0fClQhsGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyOTFjN2ZkNTcxMmY5MGVkNWQxMzFkM2FiMThjYmFkN2Rk
N2FlNWUwHhcNMjUwNTA4MTMwMDExWhcNMjUwNTA5MTMwMDExWjAzMTEwLwYDVQQD
Eyg4NzMzNWVkZWI1Zjc0OGVjMTNiYTc2Zjc5NTIwOWZlMzNlY2EwOGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoia2gIB8R2N2fJ34ug+r3fQB+9fe
rgUqH6nEogXdCf+IVuuKxbztQBy6L8Y798CekTD1yiqVluzIh9q2pzNax6CNPv9w
FMA4cvmPLMlz8rYyTAGcT9EJVjHOE0lzu6P+GDH1BgxhiMqKDl86wD3kbSXndYlh
q6k83Gt7BCf6KW87MeaEqMf5ERMebNhUxS/ueKp9wTj5/PmYGDq7spU4Md1+nkeS
c36A3IqQHT5oKbLqwORIHtellLc7A48nkEzIHZu6QVdAidlXT50QQX7fplu9S9yk
WAkbAN0x7PIjsIuCf+R7ppO63Jk6gdiQwafv5J3TCXlZUzcmPvaXtmAQdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIczXt6190jsE7p295Ugn+M+ygjsMB8GA1UdIwQY
MBaAFDKRx/1XEvkO1dEx06sYy619165eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXBISF9WY1MtUTdWMFRIVHF4akxyWDNYcmw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iMTE3ZGQtODYzMi00NWE0LWIwZmQt
ODZmYTJkZGQzM2QxLzEvTXBISF9WY1MtUTdWMFRIVHF4akxyWDNYcmw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9iMTE3ZGQtODYzMi00NWE0LWIwZmQtODZmYTJkZGQzM2Qx
LzEvTXBISF9WY1MtUTdWMFRIVHF4akxyWDNYcmw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvYpSQF0
NvzrwJoTenjcCagTs79L/6NFDuvSs8OrYZ0W4ahD6VutIXvjlx0ARnkubeNkCAfl
dxbKnPXOeryRvWSuvfdvWN/Py6KrDwrczhuLv2bvMmWv/EQ1TS2HtVNIysx4ho7L
u6HsmiXQCyuiUUpe8pL994GQ/o70Z/6dp/hXE0YasFFynlN4WI9DJujBAiYF2sO+
sVgCZEPowIfq00yo465/ygtaN9Z7ssfoqeCqwQQfNJnZDZWuVV7IZ+Q8idg4Pxyt
I4uz0Ccr4Nz4+EQty4FpMCl2ToTyaZaqGkC6bbeayBW/ViW3Ii2aE2ZmU6jJSCAA
1mxRlaEi1muH+Q==
-----END CERTIFICATE-----
Generated at Thu May 8 17:22:31 2025 by rpki-client