Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
File:                     hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft (raw, json)
Hash identifier:          Vji9SgpbVQPT2BxvcWbry2FHko8QwYYG+03d8Q69MxI=
Subject key identifier:   0C:B8:6D:E9:A0:55:53:28:4B:F0:5B:E7:DF:F2:AE:CE:F1:19:67:92
Authority key identifier: 84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC
Certificate issuer:       /CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
Certificate serial:       0198730673444C5CB07A90C19109D56E2978
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
Manifest number:          1619
Signing time:             Mon 04 Aug 2025 03:00:59 +0000
Manifest this update:     Mon 04 Aug 2025 03:00:59 +0000
Manifest next update:     Tue 05 Aug 2025 03:00:59 +0000
Files and hashes:         1: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl (hash: LqMvkLnbj+nOQRXmpxdOkbVp2XA/j8I2Uv5VWD9eTJ0=)
                          2: iEKvPS8SPLhC7hkJanIn7-E66Ko.roa (hash: uTaTvTMzaWdAm9ayVhgfeDfN1emMfvXMmA8i6uXhGqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:73:44:4c:5c:b0:7a:90:c1:91:09:d5:6e:29:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
        Validity
            Not Before: Aug  4 03:00:59 2025 GMT
            Not After : Aug  5 03:00:59 2025 GMT
        Subject: CN=0cb86de9a05553284bf05be7dff2aecef1196792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1c:1b:72:eb:b9:5a:fa:8e:3b:ae:d8:00:e8:
                    df:cc:27:89:6e:93:af:36:bb:8e:cd:40:40:cf:d0:
                    09:d1:49:13:dd:fb:e9:a9:ab:f8:ef:a9:55:be:b4:
                    fc:e6:2c:72:03:3a:6e:c6:ba:e5:c8:56:99:ae:df:
                    01:26:c3:e9:b5:ee:5b:60:9e:c7:4e:de:33:68:4b:
                    ab:eb:64:8c:13:e3:45:11:68:ed:33:b1:93:01:77:
                    ac:70:48:34:e3:b1:73:88:21:ab:a7:94:34:38:c4:
                    69:f5:19:5a:1c:cb:24:f1:7c:ac:8e:c5:1d:04:06:
                    66:9e:99:ea:d7:28:a2:f4:aa:7d:f7:12:7b:0a:12:
                    fc:fe:09:80:b4:33:79:2c:86:5f:e0:de:45:a4:5f:
                    f6:19:4b:c1:7c:b2:cb:69:85:07:94:ab:06:a7:a9:
                    21:81:7b:68:c9:b7:cb:93:65:cf:28:d5:f8:f4:08:
                    d8:10:05:44:e1:03:4a:d3:5c:56:a0:19:db:a5:9a:
                    15:71:22:9c:fc:13:79:39:f7:36:e5:39:b1:3d:4d:
                    f7:44:2f:21:93:e9:7a:44:78:27:72:e5:c6:f4:19:
                    48:7c:42:cf:c2:8f:70:b4:32:8f:40:a5:1c:d3:e5:
                    77:68:f9:8d:8d:36:a6:7e:99:38:e8:43:e3:28:c7:
                    f5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B8:6D:E9:A0:55:53:28:4B:F0:5B:E7:DF:F2:AE:CE:F1:19:67:92
            X509v3 Authority Key Identifier:
                keyid:84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:72:93:34:6f:b0:2a:31:e9:aa:25:6c:b8:dd:c2:11:dc:c7:
         85:76:dc:56:fe:16:76:84:1c:d7:1a:4e:a3:c5:bf:dd:1b:b4:
         27:0f:59:ce:ad:9c:2a:57:33:95:75:98:f3:5f:1a:13:5d:20:
         91:df:5d:f9:e9:0f:5b:35:35:18:f6:6b:8a:62:6b:40:51:a1:
         e5:9c:9c:e9:b4:32:98:78:bd:f2:38:fb:93:de:5e:63:f5:80:
         af:6a:6b:ae:c5:5c:de:95:a7:43:3c:ce:cc:36:df:6b:6c:b5:
         6e:16:61:9d:8a:68:9f:67:75:cc:4f:28:23:bc:9c:98:be:dc:
         b6:0b:77:9c:88:39:f1:ee:85:23:94:e2:3e:6f:3d:09:5e:4f:
         0c:22:41:a8:52:11:41:5c:13:1f:25:23:c3:4e:69:54:58:33:
         94:ac:ee:99:aa:49:4f:2e:31:a7:e8:2c:85:45:ea:3a:3c:74:
         12:64:35:02:97:7b:8b:03:d5:37:a7:bb:16:ce:0e:fa:b7:c6:
         bd:43:06:dc:28:bc:a6:49:48:24:7a:14:6a:6e:4c:dd:79:c8:
         17:93:8a:53:e9:49:97:0a:24:18:ba:dd:a5:60:1f:75:f8:e1:
         61:45:fe:f6:97:9a:92:a1:f2:a4:29:a2:95:08:8a:6a:42:5c:
         bf:ef:ae:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBnNETFywepDBkQnVbil4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0Yjg3YWY1MzM0YzVjNDUxNDFiNjY3NWE5ZWQ0NmU1N2I3
OTc2YWMwHhcNMjUwODA0MDMwMDU5WhcNMjUwODA1MDMwMDU5WjAzMTEwLwYDVQQD
EygwY2I4NmRlOWEwNTU1MzI4NGJmMDViZTdkZmYyYWVjZWYxMTk2NzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBwbcuu5WvqOO67YAOjfzCeJbpOv
NruOzUBAz9AJ0UkT3fvpqav476lVvrT85ixyAzpuxrrlyFaZrt8BJsPpte5bYJ7H
Tt4zaEur62SME+NFEWjtM7GTAXescEg047FziCGrp5Q0OMRp9RlaHMsk8XysjsUd
BAZmnpnq1yii9Kp99xJ7ChL8/gmAtDN5LIZf4N5FpF/2GUvBfLLLaYUHlKsGp6kh
gXtoybfLk2XPKNX49AjYEAVE4QNK01xWoBnbpZoVcSKc/BN5Ofc25TmxPU33RC8h
k+l6RHgncuXG9BlIfELPwo9wtDKPQKUc0+V3aPmNjTamfpk46EPjKMf1PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAy4bemgVVMoS/Bb59/yrs7xGWeSMB8GA1UdIwQY
MBaAFIS4evUzTFxFFBtmdantRuV7eXasMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExoNjlUTk1YRVVVRzJaMXFlMUc1WHQ1ZHF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iN2JhYzMtZjYyZC00MTQyLWFmM2Mt
MmU5ODRmYmZmOGIxLzEvaExoNjlUTk1YRVVVRzJaMXFlMUc1WHQ1ZHF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iN2JhYzMtZjYyZC00MTQyLWFmM2MtMmU5ODRmYmZmOGIx
LzEvaExoNjlUTk1YRVVVRzJaMXFlMUc1WHQ1ZHF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnKTNG+w
KjHpqiVsuN3CEdzHhXbcVv4WdoQc1xpOo8W/3Ru0Jw9Zzq2cKlczlXWY818aE10g
kd9d+ekPWzU1GPZrimJrQFGh5Zyc6bQymHi98jj7k95eY/WAr2prrsVc3pWnQzzO
zDbfa2y1bhZhnYpon2d1zE8oI7ycmL7ctgt3nIg58e6FI5TiPm89CV5PDCJBqFIR
QVwTHyUjw05pVFgzlKzumapJTy4xp+gshUXqOjx0EmQ1Apd7iwPVN6e7Fs4O+rfG
vUMG3Ci8pklIJHoUam5M3XnIF5OKU+lJlwokGLrdpWAfdfjhYUX+9peakqHypCmi
lQiKakJcv++uzQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:26 2025 by rpki-client