Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
File:                     HU6VkgCuqPuSkVi3PowOaaiNxek.mft (raw, json)
Hash identifier:          W+LJLpM4tGNt6FTYMDDoRoi7oTxHvpagttcy7OMwVwY=
Subject key identifier:   68:BD:CA:5E:94:4E:11:42:67:06:6C:EC:DE:58:FA:EE:B4:4E:E4:AC
Authority key identifier: 1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
Certificate issuer:       /CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Certificate serial:       01988242F54F12ABFD715A3F2AAE3638EFA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
Manifest number:          15CE
Signing time:             Thu 07 Aug 2025 02:01:22 +0000
Manifest this update:     Thu 07 Aug 2025 02:01:22 +0000
Manifest next update:     Fri 08 Aug 2025 02:01:22 +0000
Files and hashes:         1: HU6VkgCuqPuSkVi3PowOaaiNxek.crl (hash: akYdUc7FOyh6duz831dnnFpC8yZRGb/QjcgeBJ6Ac00=)
                          2: PqAYbce5ZFtorWDJm1IoXprDpjE.roa (hash: tbDVPuUEiQGmvMdLsr4Uj3a9EoVRDD7cfOnaPg9V/Lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:42:f5:4f:12:ab:fd:71:5a:3f:2a:ae:36:38:ef:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
        Validity
            Not Before: Aug  7 02:01:22 2025 GMT
            Not After : Aug  8 02:01:22 2025 GMT
        Subject: CN=68bdca5e944e114267066cecde58faeeb44ee4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f2:ab:1c:e1:b9:2f:6d:52:db:59:b9:e1:8c:
                    b9:48:9f:d9:03:87:4f:0a:95:05:a4:45:ec:49:64:
                    f0:73:43:2d:46:b2:81:2b:45:23:b2:a2:ae:d8:6f:
                    a6:2c:89:b7:ce:aa:fa:12:42:7e:d6:2a:b6:3a:58:
                    1b:1d:af:27:71:fc:aa:ae:0b:9d:8a:7a:0d:fe:d0:
                    79:9f:bc:fc:fa:91:fc:a7:da:3c:f5:8d:fc:0c:7f:
                    7d:a3:90:e8:ad:9c:a1:a0:9a:2b:ac:3f:22:d1:7c:
                    9d:b9:d7:9c:8b:53:f1:40:da:5c:86:44:df:05:bd:
                    0a:a0:a0:b4:b8:23:68:5f:13:ae:48:fb:32:e2:40:
                    cf:ea:38:ab:9d:3d:32:50:6d:93:a1:af:51:75:d3:
                    2e:27:0b:f1:97:d3:a4:88:5a:e6:9c:16:dd:bc:1f:
                    94:aa:e7:f9:23:6b:90:39:91:c0:83:b4:35:0d:1b:
                    1c:ff:71:81:89:ee:89:d5:f0:1b:3b:f0:c7:2e:87:
                    dd:a6:a5:10:2c:ff:46:88:05:6e:05:50:a4:6b:c6:
                    f7:61:51:de:88:af:ad:84:32:44:bf:c4:fd:6b:58:
                    04:e8:d8:08:9d:25:f6:68:41:27:9f:57:9d:a2:ff:
                    19:9e:9a:79:ca:4c:9d:a8:b3:d4:ae:af:3d:f1:46:
                    09:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BD:CA:5E:94:4E:11:42:67:06:6C:EC:DE:58:FA:EE:B4:4E:E4:AC
            X509v3 Authority Key Identifier:
                keyid:1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:33:34:83:8b:23:83:0c:72:e5:05:4c:0e:0d:29:19:21:7e:
         f6:b3:67:50:b1:81:ba:9d:01:fb:ac:04:9b:28:21:df:70:9a:
         5a:36:45:25:41:a4:36:35:5d:9f:f3:ab:91:b1:55:03:3c:68:
         9d:60:4e:62:de:d8:ef:b8:4d:b8:12:42:ae:01:1f:e3:96:2a:
         7c:18:9b:a7:df:80:f5:97:08:53:98:84:5d:89:5a:84:50:dd:
         63:38:cc:b5:0d:e1:89:4f:e1:4f:5a:cb:bf:2c:84:e0:3a:40:
         4f:2a:4d:af:3f:94:f6:89:de:ac:56:26:3a:83:10:bf:d5:58:
         51:6c:dd:f9:10:fe:c9:c8:12:78:08:cb:66:4c:27:25:71:89:
         9c:d8:46:c5:ee:b9:15:b4:98:5f:8d:d8:87:fc:c9:eb:14:41:
         91:a6:3e:6a:92:26:c0:91:83:44:66:63:7c:eb:f0:02:b1:9a:
         46:a5:06:31:db:23:48:ef:34:84:39:a9:02:7c:e3:c3:cf:1c:
         ff:b0:cc:c9:1d:c1:c5:6b:72:a2:0e:05:ad:a4:8c:99:c6:5e:
         e2:ce:4f:6a:7c:e8:16:f6:3f:4e:e6:95:64:6a:1d:89:38:78:
         5b:11:2c:9a:6e:3e:87:b6:2b:29:49:65:a8:48:51:55:75:8e:
         0b:52:9d:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCQvVPEqv9cVo/Kq42OO+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNGU5NTkyMDBhZWE4ZmI5MjkxNThiNzNlOGMwZTY5YTg4
ZGM1ZTkwHhcNMjUwODA3MDIwMTIyWhcNMjUwODA4MDIwMTIyWjAzMTEwLwYDVQQD
Eyg2OGJkY2E1ZTk0NGUxMTQyNjcwNjZjZWNkZTU4ZmFlZWI0NGVlNGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfKrHOG5L21S21m54Yy5SJ/ZA4dP
CpUFpEXsSWTwc0MtRrKBK0UjsqKu2G+mLIm3zqr6EkJ+1iq2OlgbHa8ncfyqrgud
inoN/tB5n7z8+pH8p9o89Y38DH99o5DorZyhoJorrD8i0Xydudeci1PxQNpchkTf
Bb0KoKC0uCNoXxOuSPsy4kDP6jirnT0yUG2Toa9RddMuJwvxl9OkiFrmnBbdvB+U
quf5I2uQOZHAg7Q1DRsc/3GBie6J1fAbO/DHLofdpqUQLP9GiAVuBVCka8b3YVHe
iK+thDJEv8T9a1gE6NgInSX2aEEnn1edov8Znpp5ykydqLPUrq898UYJiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGi9yl6UThFCZwZs7N5Y+u60TuSsMB8GA1UdIwQY
MBaAFB1OlZIArqj7kpFYtz6MDmmojcXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFU2VmtnQ3VxUHVTa1ZpM1Bvd09hYWlOeGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wNGQzNjQtNTYwZi00YjM2LThmMmEt
MmI1MzZjZjdiODI1LzEvSFU2VmtnQ3VxUHVTa1ZpM1Bvd09hYWlOeGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wNGQzNjQtNTYwZi00YjM2LThmMmEtMmI1MzZjZjdiODI1
LzEvSFU2VmtnQ3VxUHVTa1ZpM1Bvd09hYWlOeGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArzM0g4sj
gwxy5QVMDg0pGSF+9rNnULGBup0B+6wEmygh33CaWjZFJUGkNjVdn/OrkbFVAzxo
nWBOYt7Y77hNuBJCrgEf45YqfBibp9+A9ZcIU5iEXYlahFDdYzjMtQ3hiU/hT1rL
vyyE4DpATypNrz+U9onerFYmOoMQv9VYUWzd+RD+ycgSeAjLZkwnJXGJnNhGxe65
FbSYX43Yh/zJ6xRBkaY+apImwJGDRGZjfOvwArGaRqUGMdsjSO80hDmpAnzjw88c
/7DMyR3BxWtyog4FraSMmcZe4s5PanzoFvY/TuaVZGodiTh4WxEsmm4+h7YrKUll
qEhRVXWOC1KdPQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:55:46 2025 by rpki-client