Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
File:                     RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft (raw, json)
Hash identifier:          8vQ7frrcIBRG0Ow3C1Ta9ku2Kdrq4YNYPAY6dnLRsR0=
Subject key identifier:   26:1D:39:C7:E9:03:80:26:32:9C:D5:0E:5B:32:F5:FA:F2:7E:B2:E7
Authority key identifier: 44:7F:91:43:EA:55:35:8F:BD:62:FA:56:44:54:74:60:17:2E:1A:FD
Certificate issuer:       /CN=447f9143ea55358fbd62fa5644547460172e1afd
Certificate serial:       01987A89643D43B084A655AC1DA73EF99F00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
Manifest number:          03F0
Signing time:             Tue 05 Aug 2025 14:01:21 +0000
Manifest this update:     Tue 05 Aug 2025 14:01:21 +0000
Manifest next update:     Wed 06 Aug 2025 14:01:21 +0000
Files and hashes:         1: RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl (hash: vz8sje1FJnmcjzrvfBnV7ZjxmbJngYwwjhyVcHZSNKs=)
                          2: XJeFszxemC7e9u-8mZLkEs6aHFs.roa (hash: OiP4xwhS3dePGm/ma2M64C+nfCdXfnndrH2qcjsO/X0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:89:64:3d:43:b0:84:a6:55:ac:1d:a7:3e:f9:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=447f9143ea55358fbd62fa5644547460172e1afd
        Validity
            Not Before: Aug  5 14:01:21 2025 GMT
            Not After : Aug  6 14:01:21 2025 GMT
        Subject: CN=261d39c7e9038026329cd50e5b32f5faf27eb2e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ce:93:cd:61:76:7e:00:f9:af:32:85:04:3a:
                    6d:0f:14:d6:5c:51:67:29:b5:63:a0:6d:9f:58:b8:
                    b4:a0:65:d4:3e:32:e0:3b:ee:4d:9a:5f:76:5b:31:
                    c9:4d:af:7a:71:4d:ad:c3:1a:86:03:71:9f:cc:d0:
                    90:a8:48:80:4b:38:00:e4:6f:f4:e4:d2:7d:10:46:
                    95:4c:40:e2:f0:b3:00:b0:be:fb:85:fe:ec:4f:6f:
                    cc:d5:6f:ce:75:71:c6:20:76:70:79:14:fb:ce:54:
                    e9:69:fc:a1:d7:b7:46:63:ee:a3:7f:3c:43:fb:97:
                    8e:7a:00:56:b8:9e:6b:5b:5a:14:25:5e:8e:ae:98:
                    b3:16:1e:42:e1:f6:6d:33:f1:1e:bb:67:fa:10:ae:
                    9a:c3:87:35:ec:73:1d:ca:e4:8e:db:90:71:0a:c2:
                    d9:45:b2:64:3a:6b:8a:a7:83:a8:57:4b:f4:63:31:
                    49:d9:17:f0:34:be:53:33:6c:8b:fd:7b:ab:fe:fd:
                    5a:1a:43:8b:84:9d:7c:1a:eb:94:9c:f6:08:f0:58:
                    5a:8f:be:a7:18:87:5e:65:c1:64:2d:c8:c5:ca:49:
                    66:67:76:e9:53:f9:56:df:7a:65:0e:79:0f:da:9a:
                    4a:20:3d:75:ce:57:41:33:62:28:38:3d:0d:6f:18:
                    11:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1D:39:C7:E9:03:80:26:32:9C:D5:0E:5B:32:F5:FA:F2:7E:B2:E7
            X509v3 Authority Key Identifier:
                keyid:44:7F:91:43:EA:55:35:8F:BD:62:FA:56:44:54:74:60:17:2E:1A:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:82:7e:33:d5:a8:a8:7e:db:a5:3e:e0:bc:ed:1f:3c:cf:1e:
         89:8c:08:fe:ef:ec:e6:0a:d7:46:21:aa:23:9f:b0:cb:ef:da:
         3d:5e:87:26:1f:07:6e:28:0d:33:90:77:63:c8:a4:46:c3:b2:
         a7:11:9c:9b:6a:c9:d9:04:9b:10:0e:f5:ed:5a:46:2b:42:c4:
         ad:73:79:4d:34:cc:b9:1b:3f:50:cf:4a:9f:96:e0:12:48:71:
         d2:b4:57:16:37:10:cb:28:12:88:15:7c:3d:76:71:22:11:77:
         55:f4:3d:8b:62:1e:26:ac:73:8c:d9:5f:31:3e:69:ac:e2:99:
         8c:f6:27:10:ba:60:51:03:0d:40:cc:7f:86:9e:d9:3d:2c:19:
         41:d9:77:bd:5e:a7:f3:28:f9:f2:9e:72:eb:3f:93:00:60:db:
         ee:77:73:a5:03:b3:9f:6b:45:51:ba:b7:cd:a4:38:aa:63:9d:
         b2:88:84:02:24:bf:c8:93:56:c8:48:e8:af:a0:90:37:c2:1d:
         2d:9d:ab:80:e5:3e:16:e7:d0:9a:ff:f9:bf:a6:ce:86:88:dd:
         73:d9:8e:4b:35:c3:72:a1:01:2a:78:ea:9d:63:7f:b2:6e:de:
         93:73:2e:a6:86:ab:3b:9b:db:a8:51:3f:58:4b:ae:28:15:e9:
         c9:35:35:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6iWQ9Q7CEplWsHac++Z8AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0N2Y5MTQzZWE1NTM1OGZiZDYyZmE1NjQ0NTQ3NDYwMTcy
ZTFhZmQwHhcNMjUwODA1MTQwMTIxWhcNMjUwODA2MTQwMTIxWjAzMTEwLwYDVQQD
EygyNjFkMzljN2U5MDM4MDI2MzI5Y2Q1MGU1YjMyZjVmYWYyN2ViMmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc6TzWF2fgD5rzKFBDptDxTWXFFn
KbVjoG2fWLi0oGXUPjLgO+5Nml92WzHJTa96cU2twxqGA3GfzNCQqEiASzgA5G/0
5NJ9EEaVTEDi8LMAsL77hf7sT2/M1W/OdXHGIHZweRT7zlTpafyh17dGY+6jfzxD
+5eOegBWuJ5rW1oUJV6OrpizFh5C4fZtM/Eeu2f6EK6aw4c17HMdyuSO25BxCsLZ
RbJkOmuKp4OoV0v0YzFJ2RfwNL5TM2yL/Xur/v1aGkOLhJ18GuuUnPYI8Fhaj76n
GIdeZcFkLcjFyklmZ3bpU/lW33plDnkP2ppKID11zldBM2IoOD0NbxgRIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYdOcfpA4AmMpzVDlsy9fryfrLnMB8GA1UdIwQY
MBaAFER/kUPqVTWPvWL6VkRUdGAXLhr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkgtUlEtcFZOWS05WXZwV1JGUjBZQmN1R3YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS85ZWEzNjktYTI4Yy00YzdlLTlhMTUt
YzQyOTJmYWM5YmU4LzEvUkgtUlEtcFZOWS05WXZwV1JGUjBZQmN1R3YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS85ZWEzNjktYTI4Yy00YzdlLTlhMTUtYzQyOTJmYWM5YmU4
LzEvUkgtUlEtcFZOWS05WXZwV1JGUjBZQmN1R3YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQoJ+M9Wo
qH7bpT7gvO0fPM8eiYwI/u/s5grXRiGqI5+wy+/aPV6HJh8HbigNM5B3Y8ikRsOy
pxGcm2rJ2QSbEA717VpGK0LErXN5TTTMuRs/UM9Kn5bgEkhx0rRXFjcQyygSiBV8
PXZxIhF3VfQ9i2IeJqxzjNlfMT5prOKZjPYnELpgUQMNQMx/hp7ZPSwZQdl3vV6n
8yj58p5y6z+TAGDb7ndzpQOzn2tFUbq3zaQ4qmOdsoiEAiS/yJNWyEjor6CQN8Id
LZ2rgOU+FufQmv/5v6bOhojdc9mOSzXDcqEBKnjqnWN/sm7ek3MupoarO5vbqFE/
WEuuKBXpyTU1CQ==
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:01:02 2025 by rpki-client