Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
File:                     H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft (raw, json)
Hash identifier:          f7Pegsuto/Y4elFF/vtdFrgyNQUUXrjw32sYH3SrREs=
Subject key identifier:   F9:38:11:71:DE:89:8A:AC:D1:52:6A:E0:24:05:36:D4:4E:98:72:64
Authority key identifier: 1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
Certificate issuer:       /CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
Certificate serial:       0198D4E087A0A89293F0468E549B0682EF58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
Manifest number:          0C3A
Signing time:             Sat 23 Aug 2025 03:02:21 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:21 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:21 +0000
Files and hashes:         1: H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl (hash: e7an+Gf/dGPupq6M7IHRwy8ykOi9koQ7AXrG5CjvigA=)
                          2: mxOxKrBmnmPClr9Kc96iEdW6XUE.roa (hash: UbZRUNNa6gB9j1h+WjL/FTz+dVPKNCXmn8kcP5ajisc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:87:a0:a8:92:93:f0:46:8e:54:9b:06:82:ef:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
        Validity
            Not Before: Aug 23 03:02:21 2025 GMT
            Not After : Aug 24 03:02:21 2025 GMT
        Subject: CN=f9381171de898aacd1526ae0240536d44e987264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:25:98:9c:c0:c8:b9:e5:c4:a6:73:a9:ac:e4:
                    2e:39:2a:39:14:7b:05:02:c8:ec:46:a5:e9:a3:88:
                    d7:e9:1a:95:88:7a:dd:1a:79:ca:0d:76:11:a8:65:
                    72:29:d1:90:e6:3b:b5:f0:bd:31:e2:ee:f7:4e:ac:
                    a5:e7:43:8a:49:60:71:ab:f1:d3:4a:9f:74:26:85:
                    b3:e5:c9:18:90:0e:77:78:d7:1b:ec:d2:45:a5:2d:
                    a3:55:8b:b5:53:ab:7a:ed:ba:0a:74:49:66:76:07:
                    ff:25:14:af:ea:f4:bc:d4:0a:f8:47:ac:64:6d:87:
                    6e:21:81:8f:62:40:aa:da:48:83:e0:ef:6a:ef:df:
                    84:f9:69:cc:c4:5d:bb:d4:e0:53:d5:f0:3b:43:cd:
                    6a:85:cc:11:80:bc:e4:30:c5:e0:0f:af:ab:74:1d:
                    bc:80:86:e0:43:06:40:74:84:1d:9a:2c:88:cb:af:
                    2e:99:3c:87:ce:1b:cc:b9:ad:75:42:ec:98:09:84:
                    66:0f:a6:e9:8d:a9:4c:ec:d0:dd:64:f8:c3:10:7b:
                    e3:36:15:e0:c2:72:98:f6:ea:38:f9:d1:83:d9:e9:
                    68:e7:81:cd:22:80:a1:e5:87:ee:d6:93:9d:84:02:
                    a2:b2:fd:c0:bc:a0:45:94:30:bb:37:8d:72:a4:11:
                    52:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:38:11:71:DE:89:8A:AC:D1:52:6A:E0:24:05:36:D4:4E:98:72:64
            X509v3 Authority Key Identifier:
                keyid:1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:16:7f:2d:c4:12:7f:ae:a0:f3:71:eb:11:a3:c0:72:23:46:
         64:52:3e:23:21:7b:db:c2:04:d0:a9:c4:b9:ca:48:46:c7:b8:
         81:10:f8:63:e6:79:9e:33:eb:ee:d9:cf:2a:4b:aa:5e:5f:78:
         fc:61:8a:b6:57:9b:2d:3a:6f:69:76:51:5f:30:0c:7c:56:e5:
         4e:e0:42:af:d3:e5:de:4a:25:73:7b:df:db:d8:f9:6c:62:d2:
         c1:a5:7c:f8:2e:e6:a8:d3:b3:12:6b:2a:a8:cb:df:ee:73:0f:
         57:f2:9f:6d:f2:57:da:1b:f1:3e:85:07:c9:9a:b1:04:a0:98:
         01:b3:47:e4:e9:e9:17:cf:f7:71:01:46:af:39:af:b5:b7:92:
         0c:6d:2b:fd:f5:97:44:3b:2c:1d:1a:21:27:d8:35:f5:cf:37:
         fe:9e:28:ab:03:cb:72:4c:77:af:4f:5f:b5:70:98:8f:ed:79:
         38:43:bf:b8:6d:8e:7c:d5:57:b2:ed:90:19:82:e6:fd:0a:96:
         63:6b:3e:20:65:cb:47:00:f4:22:59:0e:4c:25:48:af:41:14:
         9e:31:13:83:a1:d0:ab:9f:fb:0e:37:dd:15:d5:0a:e4:2f:7c:
         d0:1d:11:2a:92:8a:ae:8c:d7:f9:6b:da:bd:e6:cf:7f:d8:4b:
         8d:21:a6:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4IegqJKT8EaOVJsGgu9YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOWUyNWY0YTg4YjhiYjQzYzU0ZDU4ZjZiNGU3NTA4OWY5
MDZmZDIwHhcNMjUwODIzMDMwMjIxWhcNMjUwODI0MDMwMjIxWjAzMTEwLwYDVQQD
EyhmOTM4MTE3MWRlODk4YWFjZDE1MjZhZTAyNDA1MzZkNDRlOTg3MjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yWYnMDIueXEpnOprOQuOSo5FHsF
AsjsRqXpo4jX6RqViHrdGnnKDXYRqGVyKdGQ5ju18L0x4u73Tqyl50OKSWBxq/HT
Sp90JoWz5ckYkA53eNcb7NJFpS2jVYu1U6t67boKdElmdgf/JRSv6vS81Ar4R6xk
bYduIYGPYkCq2kiD4O9q79+E+WnMxF271OBT1fA7Q81qhcwRgLzkMMXgD6+rdB28
gIbgQwZAdIQdmiyIy68umTyHzhvMua11QuyYCYRmD6bpjalM7NDdZPjDEHvjNhXg
wnKY9uo4+dGD2elo54HNIoCh5Yfu1pOdhAKisv3AvKBFlDC7N41ypBFS1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPk4EXHeiYqs0VJq4CQFNtROmHJkMB8GA1UdIwQY
MBaAFB+eJfSoi4u0PFTVj2tOdQifkG/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDU0bDlLaUxpN1E4Vk5XUGEwNTFDSi1RYjlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi81YjVmMjAtNmVmNi00NGI5LWE2OTEt
ZTU1NGEzNWU5ZTc3LzEvSDU0bDlLaUxpN1E4Vk5XUGEwNTFDSi1RYjlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi81YjVmMjAtNmVmNi00NGI5LWE2OTEtZTU1NGEzNWU5ZTc3
LzEvSDU0bDlLaUxpN1E4Vk5XUGEwNTFDSi1RYjlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRZ/LcQS
f66g83HrEaPAciNGZFI+IyF728IE0KnEucpIRse4gRD4Y+Z5njPr7tnPKkuqXl94
/GGKtlebLTpvaXZRXzAMfFblTuBCr9Pl3kolc3vf29j5bGLSwaV8+C7mqNOzEmsq
qMvf7nMPV/KfbfJX2hvxPoUHyZqxBKCYAbNH5OnpF8/3cQFGrzmvtbeSDG0r/fWX
RDssHRohJ9g19c83/p4oqwPLckx3r09ftXCYj+15OEO/uG2OfNVXsu2QGYLm/QqW
Y2s+IGXLRwD0IlkOTCVIr0EUnjETg6HQq5/7DjfdFdUK5C980B0RKpKKrozX+Wva
vebPf9hLjSGmlg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:55 2025 by rpki-client