Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
File:                     hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft (raw, json)
Hash identifier:          GRNwAUmKGUmZt1ZswiyB3Em+XdLPnWXZb2kVtvH6lzc=
Subject key identifier:   CD:10:8D:35:E5:11:F7:19:7E:58:27:F9:B9:2F:9A:15:26:50:4D:1C
Authority key identifier: 86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68
Certificate issuer:       /CN=864f301e590b83eaa38fc121b6609ff6fe52b868
Certificate serial:       01987A89A4AE58C6578314F3D680748B860C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
Manifest number:          11FD
Signing time:             Tue 05 Aug 2025 14:01:37 +0000
Manifest this update:     Tue 05 Aug 2025 14:01:37 +0000
Manifest next update:     Wed 06 Aug 2025 14:01:37 +0000
Files and hashes:         1: F1oKspcJIA5CxkgGbXIBC4yC3wU.roa (hash: AKm+230ZJqvJyVXgtMkmTb/sN72RWRXH+8ONP+ImAwA=)
                          2: hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl (hash: l27M/dDnv4s/igblfutvGiXkYsZsBj+h5mFCph83uSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:89:a4:ae:58:c6:57:83:14:f3:d6:80:74:8b:86:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=864f301e590b83eaa38fc121b6609ff6fe52b868
        Validity
            Not Before: Aug  5 14:01:37 2025 GMT
            Not After : Aug  6 14:01:37 2025 GMT
        Subject: CN=cd108d35e511f7197e5827f9b92f9a1526504d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bb:d6:0e:1e:c3:56:8e:b9:58:f9:fd:18:01:
                    c9:f0:41:5a:4a:c4:61:4c:24:f1:3f:39:d6:c0:82:
                    78:28:5d:96:11:17:7a:08:f4:69:3e:04:e1:c2:e2:
                    1a:65:22:56:10:05:89:79:1b:ef:24:a2:e4:d5:3b:
                    76:b4:a9:b9:de:22:54:17:59:c5:89:43:3a:9f:fa:
                    6a:9c:69:09:8a:c5:fa:4d:67:05:14:ad:f1:43:7b:
                    29:8e:7b:ae:d0:4b:e6:39:dd:92:a9:20:47:13:be:
                    7d:75:8f:4c:4f:8c:d9:97:64:28:78:34:90:b2:19:
                    84:91:cc:70:47:44:15:ae:f8:2f:09:8e:70:2f:4f:
                    e4:aa:fe:33:6c:5b:c8:9e:b1:bf:f3:28:5b:89:ac:
                    52:ca:f9:a0:f2:e0:ac:83:43:c6:65:58:8a:8d:e5:
                    8f:4c:32:29:bc:5d:b9:22:c2:e3:b7:32:f3:5a:2c:
                    f3:08:88:73:86:e0:f2:fa:15:fb:e5:9d:0d:22:56:
                    0c:98:f4:91:70:cb:10:25:78:38:22:c7:b0:c9:6c:
                    1f:3e:15:92:43:d0:90:cd:f8:0a:79:90:ad:b2:2e:
                    a5:5f:24:b1:a4:83:1a:0c:d3:73:78:4c:20:e9:7c:
                    0a:5b:dd:4e:78:51:25:66:bf:2c:db:e0:c3:08:be:
                    65:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:10:8D:35:E5:11:F7:19:7E:58:27:F9:B9:2F:9A:15:26:50:4D:1C
            X509v3 Authority Key Identifier:
                keyid:86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c0:39:d6:57:8d:17:1d:31:ce:d8:6d:d3:ad:80:f8:ca:3d:
         8e:3d:e7:7c:05:70:54:50:80:85:dc:4e:c3:d8:b2:a3:bb:09:
         dd:48:06:d8:9d:59:c8:e5:4c:45:b5:f0:ab:0b:8f:87:c3:0b:
         af:05:1a:38:46:80:df:ad:e0:f3:9e:09:43:22:1d:00:7e:39:
         fc:6a:6b:df:0f:81:da:d4:78:07:c0:f1:99:e2:2c:ff:45:a7:
         e5:fc:4c:70:f1:55:66:1a:51:0c:64:d4:ec:ca:d6:59:27:85:
         95:2c:30:5d:55:38:a1:9c:8e:76:f0:1b:17:d4:56:d1:2f:ba:
         5d:61:18:42:8f:11:23:a3:36:91:6a:2a:fd:e2:e0:d3:c2:46:
         cc:ac:95:56:9c:be:01:8e:d5:ff:e0:02:69:9b:3f:5e:1d:68:
         80:8a:ef:67:b7:5e:9e:42:0d:89:9f:f8:2a:be:4c:5d:59:fa:
         72:14:2c:09:b7:e9:4c:90:c8:8a:ca:02:4d:5c:8f:e4:d8:ca:
         29:2e:72:28:f2:a0:ab:b5:94:52:03:1b:22:50:bf:b1:a9:06:
         04:c0:5f:5a:18:01:82:98:3d:a6:47:ba:30:a1:11:b4:72:77:
         59:cd:6c:27:e4:4f:b5:70:96:ec:89:f2:26:1e:33:de:f0:54:
         10:b4:f4:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6iaSuWMZXgxTz1oB0i4YMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NGYzMDFlNTkwYjgzZWFhMzhmYzEyMWI2NjA5ZmY2ZmU1
MmI4NjgwHhcNMjUwODA1MTQwMTM3WhcNMjUwODA2MTQwMTM3WjAzMTEwLwYDVQQD
EyhjZDEwOGQzNWU1MTFmNzE5N2U1ODI3ZjliOTJmOWExNTI2NTA0ZDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLvWDh7DVo65WPn9GAHJ8EFaSsRh
TCTxPznWwIJ4KF2WERd6CPRpPgThwuIaZSJWEAWJeRvvJKLk1Tt2tKm53iJUF1nF
iUM6n/pqnGkJisX6TWcFFK3xQ3spjnuu0EvmOd2SqSBHE759dY9MT4zZl2QoeDSQ
shmEkcxwR0QVrvgvCY5wL0/kqv4zbFvInrG/8yhbiaxSyvmg8uCsg0PGZViKjeWP
TDIpvF25IsLjtzLzWizzCIhzhuDy+hX75Z0NIlYMmPSRcMsQJXg4IsewyWwfPhWS
Q9CQzfgKeZCtsi6lXySxpIMaDNNzeEwg6XwKW91OeFElZr8s2+DDCL5ldwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0QjTXlEfcZflgn+bkvmhUmUE0cMB8GA1UdIwQY
MBaAFIZPMB5ZC4Pqo4/BIbZgn/b+UrhoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGs4d0hsa0xnLXFqajhFaHRtQ2Y5djVTdUdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi82MjRmNjQtMGE0YS00ZDI1LWFmY2Ut
MGYzOWM0YjM0MzFkLzEvaGs4d0hsa0xnLXFqajhFaHRtQ2Y5djVTdUdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi82MjRmNjQtMGE0YS00ZDI1LWFmY2UtMGYzOWM0YjM0MzFk
LzEvaGs4d0hsa0xnLXFqajhFaHRtQ2Y5djVTdUdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMA51leN
Fx0xztht062A+Mo9jj3nfAVwVFCAhdxOw9iyo7sJ3UgG2J1ZyOVMRbXwqwuPh8ML
rwUaOEaA363g854JQyIdAH45/Gpr3w+B2tR4B8DxmeIs/0Wn5fxMcPFVZhpRDGTU
7MrWWSeFlSwwXVU4oZyOdvAbF9RW0S+6XWEYQo8RI6M2kWoq/eLg08JGzKyVVpy+
AY7V/+ACaZs/Xh1ogIrvZ7denkINiZ/4Kr5MXVn6chQsCbfpTJDIisoCTVyP5NjK
KS5yKPKgq7WUUgMbIlC/sakGBMBfWhgBgpg9pke6MKERtHJ3Wc1sJ+RPtXCW7Iny
Jh4z3vBUELT0/Q==
-----END CERTIFICATE-----
Generated at Tue Aug 5 19:59:42 2025 by rpki-client