Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
File:                     HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft (raw, json)
Hash identifier:          w/VendQ6CdjRi9hH/4ofBxjfmfs1a9ndHhub1bqnm20=
Subject key identifier:   61:B9:9D:79:A3:C3:56:88:D9:2B:B5:49:D8:A0:31:14:4F:DB:9D:68
Authority key identifier: 1C:20:53:AA:D6:DC:5D:61:15:7E:67:3F:D1:A7:8E:EA:65:69:E5:39
Certificate issuer:       /CN=1c2053aad6dc5d61157e673fd1a78eea6569e539
Certificate serial:       0196895CFA93C9187B6E6577940B89D8F1B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
Manifest number:          0850
Signing time:             Thu 01 May 2025 01:01:34 +0000
Manifest this update:     Thu 01 May 2025 01:01:34 +0000
Manifest next update:     Fri 02 May 2025 01:01:34 +0000
Files and hashes:         1: HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl (hash: U171VOOscRCPuTURnm6mFv5eGRlqh5s+bM7Bf9l1WAE=)
                          2: f0JNWqb0_sxkiR-fghzvzpbVYUw.roa (hash: RhuCzYejuWMbfNGSM6on7Cw2OZveLgiaD9vSRL8ll5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 01:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:89:5c:fa:93:c9:18:7b:6e:65:77:94:0b:89:d8:f1:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c2053aad6dc5d61157e673fd1a78eea6569e539
        Validity
            Not Before: May  1 01:01:34 2025 GMT
            Not After : May  2 01:01:34 2025 GMT
        Subject: CN=61b99d79a3c35688d92bb549d8a031144fdb9d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:45:85:9c:11:c4:09:e9:7f:e5:36:3d:83:74:
                    cf:ab:a6:10:c6:58:38:3c:0a:8c:6b:44:f7:31:67:
                    1f:9e:a4:e5:22:de:b4:10:f7:ec:60:7b:c3:2a:af:
                    81:58:7d:67:d0:17:42:31:90:c7:fa:2a:46:f7:4c:
                    e7:8a:a6:5b:14:85:b4:f9:cd:74:80:b9:df:e2:d1:
                    c7:83:77:84:94:3d:fd:26:ce:8c:6b:0c:66:ff:76:
                    f6:fb:a2:ff:93:72:f5:05:30:dc:7e:14:94:77:ed:
                    6e:31:1e:4d:10:e8:63:94:94:7f:d3:ed:15:25:a7:
                    95:f4:5e:60:53:6e:64:58:fc:5c:64:00:37:e2:5b:
                    8e:c7:cb:98:41:66:9f:c3:b8:b2:24:4b:fd:e7:86:
                    a6:a5:7c:44:74:7e:a8:bc:63:a2:bd:6f:e3:25:e1:
                    7d:6b:ff:c6:d4:83:cb:b7:0f:dd:d5:7f:80:41:6e:
                    cd:31:2c:c5:e7:cf:e8:e5:c3:e1:61:0c:d6:16:25:
                    ce:fb:13:fc:e1:3b:74:51:ff:c2:94:f6:25:b9:ac:
                    2a:fd:88:05:c7:dc:2c:75:69:07:d7:39:55:bb:9f:
                    a4:5f:34:e6:a9:de:6a:5e:4d:16:e1:f0:31:7e:ec:
                    d0:65:16:7e:01:98:c6:99:57:f6:45:50:7b:5e:78:
                    bc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B9:9D:79:A3:C3:56:88:D9:2B:B5:49:D8:A0:31:14:4F:DB:9D:68
            X509v3 Authority Key Identifier:
                keyid:1C:20:53:AA:D6:DC:5D:61:15:7E:67:3F:D1:A7:8E:EA:65:69:E5:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:45:73:07:30:7a:4d:6a:08:da:1b:6e:9b:2f:dd:0f:8a:f9:
         29:34:98:44:d6:87:fc:e8:fb:3f:65:9a:cf:d2:1e:d0:6c:2e:
         85:cc:ea:e0:b6:bf:1b:50:b6:a8:70:46:8c:5a:41:5e:3b:4e:
         9d:e3:7f:c2:70:aa:33:8c:27:a8:9b:66:a6:2b:eb:ff:24:eb:
         93:59:bc:86:04:e4:7b:65:95:de:18:ee:74:31:5e:3c:c3:64:
         cc:58:4a:0b:03:78:0d:c7:2a:63:14:a6:88:36:44:75:ae:9b:
         8f:52:74:18:74:4e:12:96:cb:26:7f:8a:b2:f1:64:fc:96:aa:
         08:12:6d:58:e4:ca:ce:e1:19:67:c5:70:0f:66:d0:1b:72:48:
         ae:1b:f8:bf:22:af:4f:79:96:8c:70:47:d9:d8:f8:1e:f1:07:
         0c:5a:91:1a:c7:08:52:7e:71:b7:1f:b5:aa:2e:08:96:71:26:
         1f:b1:b7:67:73:c4:85:22:47:ef:f2:5e:9a:d7:84:3e:1c:be:
         ab:dd:60:f6:22:ea:16:2f:c7:76:33:92:7b:38:18:b8:44:61:
         f8:c8:f2:fd:8d:d8:5b:e4:59:0d:1b:9c:ab:11:35:96:a5:de:
         c8:66:37:c3:e1:61:60:70:6e:99:97:c0:6c:52:bb:f9:8b:88:
         b4:4c:50:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaJXPqTyRh7bmV3lAuJ2PGzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMjA1M2FhZDZkYzVkNjExNTdlNjczZmQxYTc4ZWVhNjU2
OWU1MzkwHhcNMjUwNTAxMDEwMTM0WhcNMjUwNTAyMDEwMTM0WjAzMTEwLwYDVQQD
Eyg2MWI5OWQ3OWEzYzM1Njg4ZDkyYmI1NDlkOGEwMzExNDRmZGI5ZDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEWFnBHECel/5TY9g3TPq6YQxlg4
PAqMa0T3MWcfnqTlIt60EPfsYHvDKq+BWH1n0BdCMZDH+ipG90zniqZbFIW0+c10
gLnf4tHHg3eElD39Js6Mawxm/3b2+6L/k3L1BTDcfhSUd+1uMR5NEOhjlJR/0+0V
JaeV9F5gU25kWPxcZAA34luOx8uYQWafw7iyJEv954ampXxEdH6ovGOivW/jJeF9
a//G1IPLtw/d1X+AQW7NMSzF58/o5cPhYQzWFiXO+xP84Tt0Uf/ClPYluawq/YgF
x9wsdWkH1zlVu5+kXzTmqd5qXk0W4fAxfuzQZRZ+AZjGmVf2RVB7Xni8gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGG5nXmjw1aI2Su1SdigMRRP251oMB8GA1UdIwQY
MBaAFBwgU6rW3F1hFX5nP9GnjuplaeU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENCVHF0YmNYV0VWZm1jXzBhZU82bVZwNVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hY2E1ZjctNzJmZi00ODIzLWJjNWQt
ZDZiOTlkZjM5ZmQ4LzEvSENCVHF0YmNYV0VWZm1jXzBhZU82bVZwNVRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9hY2E1ZjctNzJmZi00ODIzLWJjNWQtZDZiOTlkZjM5ZmQ4
LzEvSENCVHF0YmNYV0VWZm1jXzBhZU82bVZwNVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkVzBzB6
TWoI2htumy/dD4r5KTSYRNaH/Oj7P2Waz9Ie0Gwuhczq4La/G1C2qHBGjFpBXjtO
neN/wnCqM4wnqJtmpivr/yTrk1m8hgTke2WV3hjudDFePMNkzFhKCwN4DccqYxSm
iDZEda6bj1J0GHROEpbLJn+KsvFk/JaqCBJtWOTKzuEZZ8VwD2bQG3JIrhv4vyKv
T3mWjHBH2dj4HvEHDFqRGscIUn5xtx+1qi4IlnEmH7G3Z3PEhSJH7/JemteEPhy+
q91g9iLqFi/HdjOSezgYuERh+Mjy/Y3YW+RZDRucqxE1lqXeyGY3w+FhYHBumZfA
bFK7+YuItExQ8A==
-----END CERTIFICATE-----
Generated at Thu May 1 11:01:28 2025 by rpki-client