Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
File:                     Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft (raw, json)
Hash identifier:          o5IraySOpxKBvFxKA8vdm7vmltHgJsywA42pwx5Q2/k=
Subject key identifier:   B1:6E:F5:5E:5A:A2:8B:08:E4:EF:84:F5:CA:02:DE:C3:B8:B1:74:46
Authority key identifier: 1E:98:BB:48:B5:93:06:A7:30:C9:B9:BD:8D:77:34:67:CF:1C:54:E0
Certificate issuer:       /CN=1e98bb48b59306a730c9b9bd8d773467cf1c54e0
Certificate serial:       019774F74C2120D6B3F610982D8DD235C2B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
Manifest number:          0B98
Signing time:             Sun 15 Jun 2025 19:00:53 +0000
Manifest this update:     Sun 15 Jun 2025 19:00:53 +0000
Manifest next update:     Mon 16 Jun 2025 19:00:53 +0000
Files and hashes:         1: Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl (hash: ZMjiCPpPoW5nM7QznGyCpgflDMP3Riefp43flK7wHos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:f7:4c:21:20:d6:b3:f6:10:98:2d:8d:d2:35:c2:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e98bb48b59306a730c9b9bd8d773467cf1c54e0
        Validity
            Not Before: Jun 15 19:00:53 2025 GMT
            Not After : Jun 16 19:00:53 2025 GMT
        Subject: CN=b16ef55e5aa28b08e4ef84f5ca02dec3b8b17446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5c:44:bd:cc:50:6f:91:cd:80:5c:e5:f9:0c:
                    e5:e1:ed:de:16:37:f7:ca:61:e2:2a:1b:5f:7b:ce:
                    47:8d:ca:92:2b:86:02:b2:b9:b0:a9:a5:61:92:2d:
                    b6:b7:94:3b:7d:c6:8d:4c:09:3e:65:23:b2:aa:2c:
                    d4:52:a6:4c:78:ef:06:a8:5e:22:2f:40:98:55:3c:
                    f6:b7:7e:74:da:cb:6d:76:a6:94:85:8f:8f:9c:9a:
                    70:cc:0f:8a:fd:63:5a:ba:d5:bd:18:6e:3a:7f:74:
                    fe:bf:61:48:bc:e0:09:fd:82:9b:0b:2c:ed:64:a3:
                    6e:4f:cc:e2:ac:ea:21:1b:f8:28:ce:48:94:a7:08:
                    91:15:f3:19:a0:27:d0:80:7d:6c:59:6e:fd:84:7a:
                    e6:c9:e1:c9:0b:24:81:b7:ef:18:72:13:04:4c:48:
                    18:0d:e0:92:af:8d:e4:ae:c5:34:42:5e:32:78:5e:
                    8f:e1:39:c7:fb:68:2a:dc:82:7f:a6:38:22:01:61:
                    3f:e3:ee:4d:2d:9c:bb:2e:40:c3:73:1f:bc:8b:3c:
                    87:0f:08:8f:1c:2c:80:df:99:88:3d:65:71:9e:8b:
                    37:ff:de:3e:99:32:8b:03:fb:b8:c4:4f:9c:10:33:
                    cc:c4:16:74:a0:5c:7e:fd:bb:35:db:0b:b6:00:e8:
                    e8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6E:F5:5E:5A:A2:8B:08:E4:EF:84:F5:CA:02:DE:C3:B8:B1:74:46
            X509v3 Authority Key Identifier:
                keyid:1E:98:BB:48:B5:93:06:A7:30:C9:B9:BD:8D:77:34:67:CF:1C:54:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:12:5c:39:55:da:a7:71:74:1f:13:77:61:5c:17:3a:ca:80:
         c0:53:0f:92:4e:f9:0a:9e:59:f8:7a:5c:80:c9:0f:e8:60:c9:
         38:ab:06:a2:f2:ae:40:6c:80:dc:9e:a9:6b:dd:72:27:f6:48:
         48:40:24:9d:79:fd:4b:ee:ea:00:51:39:3c:db:e2:9f:1a:52:
         2d:e7:f1:d0:f3:b0:05:e9:f7:38:37:84:51:c2:c8:8b:75:c1:
         f3:65:15:3d:a9:28:e1:27:19:ca:f2:4e:83:ef:40:cd:29:7c:
         a5:9a:54:09:14:5f:b9:6d:20:5e:f8:6a:4b:1c:e8:95:e4:6e:
         04:ad:b0:7f:a6:e9:c5:96:36:e7:cf:9f:2a:ab:90:45:df:61:
         cd:13:e8:b7:65:d2:b8:45:87:7d:a7:f4:f0:eb:3f:6c:7c:07:
         e7:c7:03:a9:27:57:a8:5f:05:74:6c:d2:25:a8:c3:0e:dc:df:
         7d:03:6a:60:e7:5d:20:0f:1b:45:4a:0a:29:7d:12:02:24:b8:
         c7:09:23:cf:6d:68:48:ec:f9:3f:0c:ec:43:67:74:aa:a7:68:
         14:27:3a:71:0b:ad:d3:69:10:e3:a1:91:e8:d5:cd:65:8b:2b:
         75:f0:6e:ed:23:50:74:7f:0c:a1:75:9b:e6:3f:fc:78:33:22:
         db:1c:cf:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd090whINaz9hCYLY3SNcK2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOThiYjQ4YjU5MzA2YTczMGM5YjliZDhkNzczNDY3Y2Yx
YzU0ZTAwHhcNMjUwNjE1MTkwMDUzWhcNMjUwNjE2MTkwMDUzWjAzMTEwLwYDVQQD
EyhiMTZlZjU1ZTVhYTI4YjA4ZTRlZjg0ZjVjYTAyZGVjM2I4YjE3NDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklxEvcxQb5HNgFzl+Qzl4e3eFjf3
ymHiKhtfe85HjcqSK4YCsrmwqaVhki22t5Q7fcaNTAk+ZSOyqizUUqZMeO8GqF4i
L0CYVTz2t3502sttdqaUhY+PnJpwzA+K/WNautW9GG46f3T+v2FIvOAJ/YKbCyzt
ZKNuT8zirOohG/gozkiUpwiRFfMZoCfQgH1sWW79hHrmyeHJCySBt+8YchMETEgY
DeCSr43krsU0Ql4yeF6P4TnH+2gq3IJ/pjgiAWE/4+5NLZy7LkDDcx+8izyHDwiP
HCyA35mIPWVxnos3/94+mTKLA/u4xE+cEDPMxBZ0oFx+/bs12wu2AOjomQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFu9V5aoosI5O+E9coC3sO4sXRGMB8GA1UdIwQY
MBaAFB6Yu0i1kwanMMm5vY13NGfPHFTgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBpN1NMV1RCcWN3eWJtOWpYYzBaODhjVk9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81MTYxY2ItYmNkZC00MDk2LTg4Zjct
NWFlZDhkNmEzM2I3LzEvSHBpN1NMV1RCcWN3eWJtOWpYYzBaODhjVk9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC81MTYxY2ItYmNkZC00MDk2LTg4ZjctNWFlZDhkNmEzM2I3
LzEvSHBpN1NMV1RCcWN3eWJtOWpYYzBaODhjVk9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxJcOVXa
p3F0HxN3YVwXOsqAwFMPkk75Cp5Z+HpcgMkP6GDJOKsGovKuQGyA3J6pa91yJ/ZI
SEAknXn9S+7qAFE5PNvinxpSLefx0POwBen3ODeEUcLIi3XB82UVPako4ScZyvJO
g+9AzSl8pZpUCRRfuW0gXvhqSxzoleRuBK2wf6bpxZY258+fKquQRd9hzRPot2XS
uEWHfaf08Os/bHwH58cDqSdXqF8FdGzSJajDDtzffQNqYOddIA8bRUoKKX0SAiS4
xwkjz21oSOz5PwzsQ2d0qqdoFCc6cQut02kQ46GR6NXNZYsrdfBu7SNQdH8MoXWb
5j/8eDMi2xzPjw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:41:51 2025 by rpki-client