Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
File:                     hZtbaj2CvQDtMcbOs66nrVke5Tc.mft (raw, json)
Hash identifier:          gp/Sqiyc1aHgm88oq+8t38y4/Rf0bSnrUcSkkadgoHk=
Subject key identifier:   7A:D6:D9:58:A7:E9:84:BD:2C:DE:D9:AC:F1:CE:DA:05:3D:C8:EF:1A
Authority key identifier: 85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
Certificate issuer:       /CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Certificate serial:       0197718896A123E3ACB24E90B911D797AD50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
Manifest number:          063A
Signing time:             Sun 15 Jun 2025 03:01:06 +0000
Manifest this update:     Sun 15 Jun 2025 03:01:06 +0000
Manifest next update:     Mon 16 Jun 2025 03:01:06 +0000
Files and hashes:         1: hZtbaj2CvQDtMcbOs66nrVke5Tc.crl (hash: UvaknmMXymMKOKmNmWdh/Z3C9U5Xqr5xouBkBHiICFQ=)
                          2: iDoekYbnPiOIxLiqr48QVJjIZ7I.roa (hash: BFGeDsq9cIJPFhHXYs9ml2z2YYV20g/bd7ZbGgfmSrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 03:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:88:96:a1:23:e3:ac:b2:4e:90:b9:11:d7:97:ad:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
        Validity
            Not Before: Jun 15 03:01:06 2025 GMT
            Not After : Jun 16 03:01:06 2025 GMT
        Subject: CN=7ad6d958a7e984bd2cded9acf1ceda053dc8ef1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:79:14:72:35:8f:ea:b8:a6:48:c4:ff:a3:f5:
                    34:2d:bc:12:86:9b:1d:ba:ad:93:c3:7a:1b:63:77:
                    63:03:4f:24:23:cc:f9:f4:0a:b9:89:e2:45:dc:3d:
                    c0:61:0d:ee:ef:e6:4e:c1:ff:8a:9d:43:f9:6f:bd:
                    b6:ab:9e:c1:d4:19:14:88:05:59:fd:e7:c4:a9:c6:
                    04:56:ad:15:89:e1:ab:9d:59:33:8d:3d:fc:2f:86:
                    d6:bd:04:04:20:cd:6c:ae:fa:06:ef:78:eb:d5:c6:
                    e7:de:87:d7:39:6c:b1:5b:1a:9e:0a:31:a4:1f:13:
                    18:8f:0e:e7:4c:44:37:ba:61:87:fb:00:37:ec:69:
                    a7:17:6d:3b:58:8d:ed:f2:dc:fe:ed:f3:9e:7e:e2:
                    4b:83:1e:16:5a:6d:d2:d7:2a:a9:75:b1:b4:55:6f:
                    db:b2:48:d5:16:98:3b:7f:4a:08:ce:35:fa:a2:39:
                    c2:2e:92:89:2a:de:b8:88:7d:47:25:d7:4e:17:b2:
                    d6:ac:12:d7:c2:0c:cc:5c:10:05:fd:ef:44:8b:d2:
                    c2:39:8c:72:39:e9:c6:25:f2:07:65:c3:0b:49:2d:
                    c3:2b:dc:43:2a:dd:e4:42:78:95:40:28:78:3b:0e:
                    9a:4d:bc:26:88:c2:81:64:a4:aa:b8:4a:c5:6d:fe:
                    f1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D6:D9:58:A7:E9:84:BD:2C:DE:D9:AC:F1:CE:DA:05:3D:C8:EF:1A
            X509v3 Authority Key Identifier:
                keyid:85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:62:46:49:b8:77:2e:fc:25:a6:f4:d4:58:8a:c4:0f:ce:62:
         7f:56:ce:00:f6:11:6c:4d:ce:56:94:4c:3c:35:3d:e2:9c:e8:
         27:47:a1:40:f8:94:d6:10:59:b0:eb:25:27:d9:f0:66:86:ac:
         c3:13:0b:1f:e5:58:0c:48:d9:aa:cb:32:c8:11:a9:3a:56:b2:
         58:cb:79:5b:4d:9e:87:fc:ee:d8:8c:51:e5:5f:f9:d4:06:ae:
         f8:ad:73:65:fa:9d:04:f9:ba:27:89:e3:c9:19:61:d4:22:40:
         c8:cd:30:70:c1:f6:b2:76:93:ea:ef:90:88:b2:16:03:1b:74:
         02:8b:78:86:24:75:87:68:d4:09:3d:cf:5e:d8:b0:2f:99:8a:
         eb:04:ca:8c:cd:14:57:77:8d:1d:84:95:1a:96:f3:ba:64:b2:
         7f:83:42:ba:b4:26:fe:6d:74:5c:d9:79:bc:cb:0b:d8:ce:f8:
         a5:b2:90:2c:ff:05:d0:08:85:92:d5:e4:7f:b4:fb:e5:6e:82:
         c7:2c:7b:bc:c2:ca:ea:c9:7a:29:53:c0:39:66:fb:f6:a6:5b:
         7f:2e:26:0b:0c:d0:88:fa:5e:ff:5f:c9:c4:0b:46:64:ad:2c:
         c6:26:b3:3b:9f:ee:45:6c:0b:54:67:89:0b:4c:99:51:3f:26:
         b7:f8:81:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxiJahI+Ossk6QuRHXl61QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1OWI1YjZhM2Q4MmJkMDBlZDMxYzZjZWIzYWVhN2FkNTkx
ZWU1MzcwHhcNMjUwNjE1MDMwMTA2WhcNMjUwNjE2MDMwMTA2WjAzMTEwLwYDVQQD
Eyg3YWQ2ZDk1OGE3ZTk4NGJkMmNkZWQ5YWNmMWNlZGEwNTNkYzhlZjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnkUcjWP6rimSMT/o/U0LbwShpsd
uq2Tw3obY3djA08kI8z59Aq5ieJF3D3AYQ3u7+ZOwf+KnUP5b722q57B1BkUiAVZ
/efEqcYEVq0VieGrnVkzjT38L4bWvQQEIM1srvoG73jr1cbn3ofXOWyxWxqeCjGk
HxMYjw7nTEQ3umGH+wA37GmnF207WI3t8tz+7fOefuJLgx4WWm3S1yqpdbG0VW/b
skjVFpg7f0oIzjX6ojnCLpKJKt64iH1HJddOF7LWrBLXwgzMXBAF/e9Ei9LCOYxy
OenGJfIHZcMLSS3DK9xDKt3kQniVQCh4Ow6aTbwmiMKBZKSquErFbf7xkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrW2Vin6YS9LN7ZrPHO2gU9yO8aMB8GA1UdIwQY
MBaAFIWbW2o9gr0A7THGzrOup61ZHuU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFp0YmFqMkN2UUR0TWNiT3M2Nm5yVmtlNVRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84ZWRiODItY2UyYi00NGUxLTkyY2Qt
MmZjOWU2YjZmYzk2LzEvaFp0YmFqMkN2UUR0TWNiT3M2Nm5yVmtlNVRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84ZWRiODItY2UyYi00NGUxLTkyY2QtMmZjOWU2YjZmYzk2
LzEvaFp0YmFqMkN2UUR0TWNiT3M2Nm5yVmtlNVRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsWJGSbh3
LvwlpvTUWIrED85if1bOAPYRbE3OVpRMPDU94pzoJ0ehQPiU1hBZsOslJ9nwZoas
wxMLH+VYDEjZqssyyBGpOlayWMt5W02eh/zu2IxR5V/51Aau+K1zZfqdBPm6J4nj
yRlh1CJAyM0wcMH2snaT6u+QiLIWAxt0Aot4hiR1h2jUCT3PXtiwL5mK6wTKjM0U
V3eNHYSVGpbzumSyf4NCurQm/m10XNl5vMsL2M74pbKQLP8F0AiFktXkf7T75W6C
xyx7vMLK6sl6KVPAOWb79qZbfy4mCwzQiPpe/1/JxAtGZK0sxiazO5/uRWwLVGeJ
C0yZUT8mt/iBBg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 11:48:44 2025 by rpki-client