Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
File:                     HWhumKzyo3vyrsaYB-aWQGCXnLg.mft (raw, json)
Hash identifier:          LJS6f+fg9GbE24pewH576yFd7nFqVR4aID6MpZTcIFs=
Subject key identifier:   4A:86:56:E6:22:4D:26:74:30:7B:78:27:B2:D6:8E:BA:7A:1B:EB:88
Authority key identifier: 1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
Certificate issuer:       /CN=1d686e98acf2a37bf2aec69807e6964060979cb8
Certificate serial:       01976F9A44B147C3173991EF15D7E93F1DAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 18:01:10 +0000
Manifest this update:     Sat 14 Jun 2025 18:01:10 +0000
Manifest next update:     Sun 15 Jun 2025 18:01:10 +0000
Files and hashes:         1: HWhumKzyo3vyrsaYB-aWQGCXnLg.crl (hash: 3vbbUGrVbs0tiakC17DFV5PIpaQqItVyyXEwzrfXta4=)
                          2: OxE4-aNNSEdqL0e1drWJ-u6-FW8.roa (hash: 61L/5UKRIctS8qkUbe6UFwwrHK0nH/grmD/batM7eQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:9a:44:b1:47:c3:17:39:91:ef:15:d7:e9:3f:1d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d686e98acf2a37bf2aec69807e6964060979cb8
        Validity
            Not Before: Jun 14 18:01:10 2025 GMT
            Not After : Jun 15 18:01:10 2025 GMT
        Subject: CN=4a8656e6224d2674307b7827b2d68eba7a1beb88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:28:5f:7a:49:f9:cc:43:f1:1a:6d:54:9a:45:
                    e7:5d:97:3d:bd:6f:87:74:44:82:d4:cb:b9:ba:39:
                    6c:cd:a3:01:aa:e4:f4:6f:10:6a:ae:07:49:29:05:
                    11:18:2a:49:13:22:22:a8:0f:bb:e6:24:c0:5b:7e:
                    11:d4:85:62:be:49:29:ee:f7:06:ca:aa:a6:c3:e3:
                    07:88:19:13:2b:d6:20:e1:70:e9:c2:83:f2:13:40:
                    fb:4c:8e:ca:01:6d:cf:f5:4c:06:a4:d0:e9:04:c4:
                    fa:ec:bd:37:95:24:7d:37:d0:0d:8b:e1:4f:17:97:
                    e4:df:17:3f:b4:6c:1c:32:bb:9a:80:7b:7b:07:61:
                    4e:b7:e0:03:2f:b1:2a:26:d0:76:9f:cd:d9:6a:04:
                    c8:5f:cf:05:99:a2:12:b3:7e:16:33:76:38:80:6e:
                    db:62:63:e6:f3:f1:b7:72:2a:2f:53:ca:a2:42:1b:
                    85:00:8d:44:d7:68:9f:3d:53:ed:f1:7f:56:06:96:
                    e9:4f:ba:c4:93:23:60:5e:bb:01:98:27:24:c0:48:
                    d0:84:ae:1e:30:d3:ef:3a:2d:d7:34:d2:dc:5b:05:
                    0c:03:10:e5:84:6b:b1:bb:1e:41:c8:f3:3e:cc:fc:
                    02:3c:c9:69:9b:4f:87:af:c8:a9:f3:9a:b1:a4:0c:
                    da:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:86:56:E6:22:4D:26:74:30:7B:78:27:B2:D6:8E:BA:7A:1B:EB:88
            X509v3 Authority Key Identifier:
                keyid:1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:39:e1:32:f2:4e:e4:1e:31:10:97:96:3b:07:44:60:a0:df:
         bb:61:ac:c4:23:87:8e:46:98:d9:c5:b4:ef:49:01:33:27:b5:
         fb:e8:67:1b:06:f5:b7:03:30:4f:98:8f:15:cd:1b:c2:a7:a7:
         9b:bf:b3:bf:9f:b0:8d:78:c7:1b:df:58:f7:bf:18:53:51:5a:
         7a:31:f9:24:c6:3a:c5:a4:57:0d:f2:1d:7a:e7:d0:1f:1d:90:
         99:63:91:d8:4f:9b:a0:9e:9c:7b:51:86:8f:3f:0f:dc:8c:47:
         4c:77:4b:b5:6e:52:ec:d8:d6:c1:7d:27:b2:83:21:64:93:19:
         61:53:a7:88:b1:d6:66:d4:c3:46:32:39:5a:f6:65:95:64:59:
         09:a0:33:11:f1:70:8d:f9:d3:98:83:f0:87:e5:e0:6e:74:5a:
         f6:4f:dc:1b:c9:46:68:11:29:d8:7d:d6:71:20:55:e7:d1:72:
         d6:f3:52:e1:1c:25:40:6e:c4:dc:c0:0b:98:b7:9f:2b:12:d1:
         e0:e6:f6:37:f6:18:e5:7c:9a:0e:f1:e8:46:27:de:81:d2:83:
         f6:c8:2c:d9:33:2f:1a:ed:49:13:69:ac:7c:5f:04:0c:fd:9e:
         c0:c7:59:ee:69:ba:c2:6a:cf:67:eb:af:55:e7:a5:c1:dc:b1:
         d6:a0:4c:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmkSxR8MXOZHvFdfpPx2tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNjg2ZTk4YWNmMmEzN2JmMmFlYzY5ODA3ZTY5NjQwNjA5
NzljYjgwHhcNMjUwNjE0MTgwMTEwWhcNMjUwNjE1MTgwMTEwWjAzMTEwLwYDVQQD
Eyg0YTg2NTZlNjIyNGQyNjc0MzA3Yjc4MjdiMmQ2OGViYTdhMWJlYjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmShfekn5zEPxGm1UmkXnXZc9vW+H
dESC1Mu5ujlszaMBquT0bxBqrgdJKQURGCpJEyIiqA+75iTAW34R1IVivkkp7vcG
yqqmw+MHiBkTK9Yg4XDpwoPyE0D7TI7KAW3P9UwGpNDpBMT67L03lSR9N9ANi+FP
F5fk3xc/tGwcMruagHt7B2FOt+ADL7EqJtB2n83ZagTIX88FmaISs34WM3Y4gG7b
YmPm8/G3ciovU8qiQhuFAI1E12ifPVPt8X9WBpbpT7rEkyNgXrsBmCckwEjQhK4e
MNPvOi3XNNLcWwUMAxDlhGuxux5ByPM+zPwCPMlpm0+Hr8ip85qxpAzaaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqGVuYiTSZ0MHt4J7LWjrp6G+uIMB8GA1UdIwQY
MBaAFB1obpis8qN78q7GmAfmlkBgl5y4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFdodW1LenlvM3Z5cnNhWUItYVdRR0NYbkxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hODc3YzgtZTdjYi00NTQwLWJkNDMt
NWFjZGJmNDc0NTQ4LzEvSFdodW1LenlvM3Z5cnNhWUItYVdRR0NYbkxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9hODc3YzgtZTdjYi00NTQwLWJkNDMtNWFjZGJmNDc0NTQ4
LzEvSFdodW1LenlvM3Z5cnNhWUItYVdRR0NYbkxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTnhMvJO
5B4xEJeWOwdEYKDfu2GsxCOHjkaY2cW070kBMye1++hnGwb1twMwT5iPFc0bwqen
m7+zv5+wjXjHG99Y978YU1FaejH5JMY6xaRXDfIdeufQHx2QmWOR2E+boJ6ce1GG
jz8P3IxHTHdLtW5S7NjWwX0nsoMhZJMZYVOniLHWZtTDRjI5WvZllWRZCaAzEfFw
jfnTmIPwh+XgbnRa9k/cG8lGaBEp2H3WcSBV59Fy1vNS4RwlQG7E3MALmLefKxLR
4Ob2N/YY5XyaDvHoRifegdKD9sgs2TMvGu1JE2msfF8EDP2ewMdZ7mm6wmrPZ+uv
Veelwdyx1qBMVQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:46:02 2025 by rpki-client