Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
File:                     HybOksLNg7Xsz0lzPzp753rdSaA.mft (raw, json)
Hash identifier:          lr+wYpnup8l/PcEZV+7eps4YswpXWtTBBeAb+ZnHaOs=
Subject key identifier:   5E:B7:FB:F9:F8:ED:25:1A:44:26:D5:EB:11:98:71:D7:7F:20:6E:80
Authority key identifier: 1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
Certificate issuer:       /CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Certificate serial:       01976BBCC9F29D07E94348AEBEF89B63C346
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
Manifest number:          03ED
Signing time:             Sat 14 Jun 2025 00:00:23 +0000
Manifest this update:     Sat 14 Jun 2025 00:00:23 +0000
Manifest next update:     Sun 15 Jun 2025 00:00:23 +0000
Files and hashes:         1: HybOksLNg7Xsz0lzPzp753rdSaA.crl (hash: s4QKvGVAxMDAR5Qtg+qydK7Em8qcRjXvpOwXNCublvA=)
                          2: s0bJG6Qp94T0ozPjLlAbRCJfTFs.roa (hash: qwFiBqb0rHrSmTwD9b+7ecXoNWtZfg8qRArEug26wV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bc:c9:f2:9d:07:e9:43:48:ae:be:f8:9b:63:c3:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
        Validity
            Not Before: Jun 14 00:00:23 2025 GMT
            Not After : Jun 15 00:00:23 2025 GMT
        Subject: CN=5eb7fbf9f8ed251a4426d5eb119871d77f206e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d5:18:0c:57:31:35:57:d4:eb:d4:b4:65:fb:
                    c0:03:b0:f7:4e:98:36:71:5e:72:af:6b:3c:c8:ce:
                    e0:19:0b:66:10:63:57:f1:82:11:42:e8:65:9c:56:
                    e0:ba:04:be:cc:7b:05:96:27:12:87:9c:b6:d4:ba:
                    3f:17:96:47:ec:ac:38:83:80:eb:a4:d3:68:ca:f4:
                    f5:f0:e3:7e:43:17:ec:5b:0c:c3:ba:01:a6:2a:70:
                    ae:03:68:ee:72:a4:7f:6d:4a:ce:7a:3e:5b:10:6d:
                    1a:79:55:7a:25:6c:dc:19:03:11:7e:00:39:6f:24:
                    06:fb:02:be:b8:9e:1a:ce:46:c9:46:a2:aa:c5:d3:
                    ca:5d:99:e0:8c:a1:5c:ff:15:fc:cd:01:09:c4:0d:
                    3d:da:3a:1e:32:cb:3c:08:fa:a7:05:56:04:7f:c1:
                    1c:83:e4:48:df:1f:f4:4d:dc:d5:47:2d:51:39:cb:
                    7f:db:fd:95:1f:f7:0a:2a:9c:2a:96:88:6e:12:1c:
                    80:2f:22:9a:07:d6:46:23:24:fa:5b:ed:a3:2e:3c:
                    93:70:9d:12:89:01:bf:87:d3:b7:60:0a:53:c5:b0:
                    aa:4d:fd:b4:ad:c8:bf:76:d9:d3:26:89:d4:e0:13:
                    91:6b:22:3a:b5:ba:e9:f3:c9:b9:8d:e6:73:6e:93:
                    da:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B7:FB:F9:F8:ED:25:1A:44:26:D5:EB:11:98:71:D7:7F:20:6E:80
            X509v3 Authority Key Identifier:
                keyid:1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:79:58:ef:c7:f5:a7:ac:91:95:04:dc:03:aa:7c:8e:d1:94:
         02:fb:13:87:f0:c4:9b:40:f0:71:0d:6a:91:2a:13:b9:cc:fe:
         0c:06:ab:9b:57:d9:68:3a:d9:7f:7b:20:e4:a3:06:5f:81:1b:
         c2:f0:6e:40:fd:e1:7b:ed:7b:33:07:95:c9:5d:01:89:82:91:
         73:68:50:02:39:b6:39:6b:bf:ef:a0:a8:d8:13:d5:7c:4c:e1:
         9c:54:68:e0:0c:85:e8:d9:b4:60:7e:97:0c:37:25:73:27:95:
         34:80:cc:15:93:2b:f3:24:e7:7d:d0:10:31:0c:8c:a1:d2:d5:
         b0:79:3f:de:23:ee:19:aa:4d:76:d9:5f:1e:a6:99:da:0c:99:
         39:10:00:84:81:ff:a3:a4:5b:1e:c3:6c:dd:a5:18:e6:9c:75:
         69:b3:a3:85:8b:ab:7a:c1:00:20:8b:ca:7a:f6:3e:66:fe:92:
         ef:f0:c3:33:05:8e:e0:cd:ff:08:2d:40:65:7e:6e:f3:00:7e:
         f4:26:e7:32:b9:fa:9f:22:9a:de:2f:b1:81:3a:b3:d0:fd:d5:
         44:7d:69:2f:ae:a0:0e:2e:04:f4:4f:68:a0:e1:76:8c:91:4f:
         bd:44:e5:90:76:31:a8:6f:fc:86:1f:39:a1:ca:58:af:9d:00:
         09:c8:d0:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvMnynQfpQ0iuvvibY8NGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMjZjZTkyYzJjZDgzYjVlY2NmNDk3MzNmM2E3YmU3N2Fk
ZDQ5YTAwHhcNMjUwNjE0MDAwMDIzWhcNMjUwNjE1MDAwMDIzWjAzMTEwLwYDVQQD
Eyg1ZWI3ZmJmOWY4ZWQyNTFhNDQyNmQ1ZWIxMTk4NzFkNzdmMjA2ZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09UYDFcxNVfU69S0ZfvAA7D3Tpg2
cV5yr2s8yM7gGQtmEGNX8YIRQuhlnFbgugS+zHsFlicSh5y21Lo/F5ZH7Kw4g4Dr
pNNoyvT18ON+QxfsWwzDugGmKnCuA2jucqR/bUrOej5bEG0aeVV6JWzcGQMRfgA5
byQG+wK+uJ4azkbJRqKqxdPKXZngjKFc/xX8zQEJxA092joeMss8CPqnBVYEf8Ec
g+RI3x/0TdzVRy1ROct/2/2VH/cKKpwqlohuEhyALyKaB9ZGIyT6W+2jLjyTcJ0S
iQG/h9O3YApTxbCqTf20rci/dtnTJonU4BORayI6tbrp88m5jeZzbpPabQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF63+/n47SUaRCbV6xGYcdd/IG6AMB8GA1UdIwQY
MBaAFB8mzpLCzYO17M9Jcz86e+d63UmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHliT2tzTE5nN1hzejBselB6cDc1M3JkU2FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8xZDBmNDEtNTE5YS00YzQyLWFhNmYt
YzcxZDJiOTJjMzk3LzEvSHliT2tzTE5nN1hzejBselB6cDc1M3JkU2FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8xZDBmNDEtNTE5YS00YzQyLWFhNmYtYzcxZDJiOTJjMzk3
LzEvSHliT2tzTE5nN1hzejBselB6cDc1M3JkU2FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO3lY78f1
p6yRlQTcA6p8jtGUAvsTh/DEm0DwcQ1qkSoTucz+DAarm1fZaDrZf3sg5KMGX4Eb
wvBuQP3he+17MweVyV0BiYKRc2hQAjm2OWu/76Co2BPVfEzhnFRo4AyF6Nm0YH6X
DDclcyeVNIDMFZMr8yTnfdAQMQyModLVsHk/3iPuGapNdtlfHqaZ2gyZORAAhIH/
o6RbHsNs3aUY5px1abOjhYuresEAIIvKevY+Zv6S7/DDMwWO4M3/CC1AZX5u8wB+
9CbnMrn6nyKa3i+xgTqz0P3VRH1pL66gDi4E9E9ooOF2jJFPvUTlkHYxqG/8hh85
ocpYr50ACcjQIA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:16:43 2025 by rpki-client