Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
File:                     HpqS2vCMILRpG5Jc8DLlSR_grMA.mft (raw, json)
Hash identifier:          taSqa9kKQYpSGDSAPxUbDFFAFfXv8ptjeIa9vQOpLMs=
Subject key identifier:   9B:43:4D:AE:35:CF:B7:DE:00:59:FB:98:20:DA:46:D8:D9:0E:70:52
Authority key identifier: 1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0
Certificate issuer:       /CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
Certificate serial:       01987E2F2222B1AFBFD853D80AE318CD8277
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
Manifest number:          11EA
Signing time:             Wed 06 Aug 2025 07:01:14 +0000
Manifest this update:     Wed 06 Aug 2025 07:01:14 +0000
Manifest next update:     Thu 07 Aug 2025 07:01:14 +0000
Files and hashes:         1: ACKW9RfobgNxFmGLo0q9xAh_d6k.roa (hash: sd4MSbt7R4RMvGdT2hp/M6b7EN9LmdrjGUMed4jtMaw=)
                          2: HpqS2vCMILRpG5Jc8DLlSR_grMA.crl (hash: x0XVYiKl5D8ieqsGR2KkIfJsS5LZqc3XugGG7FW4mOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 07:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:2f:22:22:b1:af:bf:d8:53:d8:0a:e3:18:cd:82:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
        Validity
            Not Before: Aug  6 07:01:14 2025 GMT
            Not After : Aug  7 07:01:14 2025 GMT
        Subject: CN=9b434dae35cfb7de0059fb9820da46d8d90e7052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e5:8a:0c:be:db:b9:cb:1a:37:a5:84:de:bc:
                    46:aa:25:77:9c:4e:97:b8:e7:44:af:d8:1d:b3:ae:
                    59:a6:7d:ff:a0:7f:fc:3f:0b:fd:84:6a:35:57:be:
                    d8:0e:2e:17:4c:23:0c:60:6c:72:23:17:fc:f4:69:
                    f0:56:dd:a7:e4:d0:1e:ac:60:c7:52:eb:0c:12:63:
                    53:e2:f8:18:6e:0e:f0:aa:eb:be:48:5f:07:09:40:
                    68:da:48:eb:2c:75:12:55:cd:b2:d8:23:00:a2:51:
                    15:eb:10:db:de:28:af:bf:0e:14:d1:bf:7f:df:71:
                    41:08:cd:54:bc:c2:0e:a8:96:8c:72:5d:ac:e9:9d:
                    f2:4b:04:b9:8e:bf:63:77:4b:86:d5:3c:19:a2:12:
                    c8:48:42:32:00:ee:f4:4b:2c:53:5b:b4:87:ab:49:
                    37:6b:f7:fd:da:9a:0a:21:75:45:43:91:3c:64:b9:
                    e3:b5:fd:28:d4:8e:39:01:25:e5:ac:8e:8d:80:1b:
                    90:f3:0d:c4:d5:7d:82:d2:a7:cf:ce:fa:ef:06:28:
                    68:88:05:32:ec:f6:47:4b:a1:52:43:39:e8:a5:21:
                    c0:ec:e7:3a:8f:e6:38:19:b4:46:94:98:89:5b:62:
                    38:e8:df:22:d7:0c:b0:c2:49:4f:4d:48:32:e5:7a:
                    96:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:43:4D:AE:35:CF:B7:DE:00:59:FB:98:20:DA:46:D8:D9:0E:70:52
            X509v3 Authority Key Identifier:
                keyid:1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:39:ac:1d:e7:24:ec:52:4b:90:b8:5c:72:54:03:4f:fd:98:
         d8:c6:5d:82:33:54:b1:78:36:7f:bd:b9:00:a3:ee:ba:0c:43:
         6a:7e:c7:d2:e1:dd:cf:9d:5f:ad:35:1d:e2:b1:7a:32:03:58:
         64:72:1c:ee:58:4d:5a:c2:92:32:da:5b:ee:22:68:9b:b3:03:
         0f:de:c4:39:9f:b7:60:63:01:27:7a:11:c4:6c:49:ca:d6:63:
         75:ab:52:4e:d8:c8:9b:bc:f7:57:d1:a1:ce:96:6b:e2:b7:6c:
         70:aa:02:d8:dc:92:31:5f:06:30:9a:00:07:a2:ca:01:8c:4a:
         0c:3d:38:a8:5a:24:5c:1d:f4:31:ef:b6:70:e8:b3:19:7c:f2:
         cb:6f:ab:9f:44:59:94:6c:a2:54:c8:a7:0e:a5:8f:de:a6:1e:
         66:15:47:a1:be:ff:dc:d3:d7:19:d4:6b:ab:18:ad:c1:09:75:
         e4:1f:1b:d7:f7:10:e7:df:24:af:89:97:e6:af:ad:c2:bd:59:
         9b:43:78:d3:7a:ce:bd:ad:08:39:49:f6:98:02:6c:68:0e:e6:
         72:1c:e6:a3:0a:4a:50:38:62:cd:3e:d9:89:7f:07:c6:63:6c:
         6b:41:3c:a1:f0:80:c3:95:49:84:df:d5:91:4f:a4:81:c3:11:
         df:90:7e:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+LyIisa+/2FPYCuMYzYJ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOWE5MmRhZjA4YzIwYjQ2OTFiOTI1Y2YwMzJlNTQ5MWZl
MGFjYzAwHhcNMjUwODA2MDcwMTE0WhcNMjUwODA3MDcwMTE0WjAzMTEwLwYDVQQD
Eyg5YjQzNGRhZTM1Y2ZiN2RlMDA1OWZiOTgyMGRhNDZkOGQ5MGU3MDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOWKDL7bucsaN6WE3rxGqiV3nE6X
uOdEr9gds65Zpn3/oH/8Pwv9hGo1V77YDi4XTCMMYGxyIxf89GnwVt2n5NAerGDH
UusMEmNT4vgYbg7wquu+SF8HCUBo2kjrLHUSVc2y2CMAolEV6xDb3iivvw4U0b9/
33FBCM1UvMIOqJaMcl2s6Z3ySwS5jr9jd0uG1TwZohLISEIyAO70SyxTW7SHq0k3
a/f92poKIXVFQ5E8ZLnjtf0o1I45ASXlrI6NgBuQ8w3E1X2C0qfPzvrvBihoiAUy
7PZHS6FSQznopSHA7Oc6j+Y4GbRGlJiJW2I46N8i1wywwklPTUgy5XqWMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtDTa41z7feAFn7mCDaRtjZDnBSMB8GA1UdIwQY
MBaAFB6aktrwjCC0aRuSXPAy5Ukf4KzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBxUzJ2Q01JTFJwRzVKYzhETGxTUl9nck1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jMTQxMTUtOGNmOC00MGM4LTg3Yzgt
Y2U4MmViZTExYWM4LzEvSHBxUzJ2Q01JTFJwRzVKYzhETGxTUl9nck1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9jMTQxMTUtOGNmOC00MGM4LTg3YzgtY2U4MmViZTExYWM4
LzEvSHBxUzJ2Q01JTFJwRzVKYzhETGxTUl9nck1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzmsHeck
7FJLkLhcclQDT/2Y2MZdgjNUsXg2f725AKPuugxDan7H0uHdz51frTUd4rF6MgNY
ZHIc7lhNWsKSMtpb7iJom7MDD97EOZ+3YGMBJ3oRxGxJytZjdatSTtjIm7z3V9Gh
zpZr4rdscKoC2NySMV8GMJoAB6LKAYxKDD04qFokXB30Me+2cOizGXzyy2+rn0RZ
lGyiVMinDqWP3qYeZhVHob7/3NPXGdRrqxitwQl15B8b1/cQ598kr4mX5q+twr1Z
m0N403rOva0IOUn2mAJsaA7mchzmowpKUDhizT7ZiX8HxmNsa0E8ofCAw5VJhN/V
kU+kgcMR35B+Iw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:08:20 2025 by rpki-client