Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
File:                     hUavGPcHiqwAwvzSymf5MoAhfhU.mft (raw, json)
Hash identifier:          egwV+8pu7PDpwkS3uTbjtzuTC9oESV44X3qhsMdefoc=
Subject key identifier:   FC:54:EE:33:C7:B7:C5:21:F9:53:1A:2F:D8:60:33:2E:2B:13:4F:17
Authority key identifier: 85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
Certificate issuer:       /CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Certificate serial:       01977A54A0EC091C3C0FF5FF10C9E4B51E2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
Manifest number:          1527
Signing time:             Mon 16 Jun 2025 20:00:55 +0000
Manifest this update:     Mon 16 Jun 2025 20:00:55 +0000
Manifest next update:     Tue 17 Jun 2025 20:00:55 +0000
Files and hashes:         1: hUavGPcHiqwAwvzSymf5MoAhfhU.crl (hash: bRacxgeozy+87PSCFOZ55NTK+cRFxfCS9i2f1fH7Fro=)
                          2: jg1_qGOypFs-Omg84eci-XkXn6M.roa (hash: Hutcm4lZFs78dltAQDGy1uUI7H+2kpc6tWhDJ8JMDfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 20:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:54:a0:ec:09:1c:3c:0f:f5:ff:10:c9:e4:b5:1e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8546af18f7078aac00c2fcd2ca67f93280217e15
        Validity
            Not Before: Jun 16 20:00:55 2025 GMT
            Not After : Jun 17 20:00:55 2025 GMT
        Subject: CN=fc54ee33c7b7c521f9531a2fd860332e2b134f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3c:44:1c:9c:ee:a1:5b:cb:50:64:a9:ac:07:
                    f0:25:62:fc:49:96:b5:00:12:b1:cd:11:2d:76:6e:
                    36:5d:ba:e5:21:63:91:65:71:41:5e:9a:eb:34:d1:
                    7f:4a:b4:dc:41:a5:95:b9:23:cf:e5:c3:a6:a4:b9:
                    4d:01:e3:04:aa:02:5b:e5:62:6c:c6:5a:fc:43:7a:
                    b3:ef:86:4c:ad:1e:42:10:a2:0d:1e:3b:7d:a7:0f:
                    d2:6e:89:cc:eb:c8:ab:ea:8d:85:9e:f7:8d:79:9e:
                    fc:d7:93:97:4e:b5:27:dc:be:b3:96:b4:24:53:68:
                    7c:23:c0:d4:59:c8:39:b6:7f:b7:65:3b:95:81:91:
                    74:90:ce:f5:99:c5:17:eb:fc:bc:13:ba:ce:1b:ab:
                    c6:9e:b6:54:0e:6c:22:51:37:a0:3b:32:76:60:47:
                    fb:7f:06:b9:74:ec:c0:ae:3a:fb:37:f6:76:92:57:
                    cb:fb:56:c5:4d:7d:0a:66:48:cf:e2:21:a1:c9:9a:
                    83:75:d3:6a:51:6c:6d:19:d7:49:65:95:ed:19:f9:
                    76:2d:36:75:b8:3a:df:25:cb:eb:74:33:a1:65:1e:
                    96:a4:3d:9f:a6:a1:f8:4f:56:da:08:bd:c6:d6:23:
                    73:a2:e1:b3:0b:c3:19:d8:fa:37:65:c3:b0:08:dd:
                    b9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:54:EE:33:C7:B7:C5:21:F9:53:1A:2F:D8:60:33:2E:2B:13:4F:17
            X509v3 Authority Key Identifier:
                keyid:85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:00:c3:e4:51:85:6b:fa:bd:12:a9:db:eb:70:c7:c7:e6:e1:
         dc:81:1d:16:34:75:26:b7:b1:4f:e3:33:49:05:6c:e7:20:fa:
         12:69:91:93:26:0f:d1:bf:f3:ea:6c:65:5d:60:85:a1:7f:0b:
         ff:a2:32:19:98:d9:38:3a:9e:69:cf:d0:d9:ec:7c:1f:2c:f3:
         9b:3a:5f:dd:30:8e:87:9d:dc:ef:21:12:3a:0f:f9:6d:0f:8f:
         34:04:c5:ee:d4:cc:fb:b8:6a:0b:4a:bf:81:5c:13:19:85:a9:
         33:ce:e5:0c:df:fc:0c:d6:2b:b1:3a:17:b0:25:16:fb:1d:b8:
         aa:92:f6:ae:e8:18:cc:12:07:c4:76:8f:91:82:5d:b0:be:b2:
         4c:e4:c4:9e:31:1f:6c:7e:30:ba:2d:06:f5:8a:88:54:50:c8:
         7e:c2:ba:2e:cb:00:b1:3e:9e:68:45:11:f6:6d:8d:c0:5d:96:
         32:f4:b8:32:0d:40:97:85:f2:c5:47:cb:a3:69:11:2d:97:2e:
         b8:00:43:45:7d:f5:7a:66:c3:75:33:1a:47:52:6a:fc:4e:a4:
         fe:1c:90:44:57:c7:63:fa:b6:03:fe:42:fe:65:22:8b:fd:4d:
         83:46:4c:a1:48:56:f2:94:65:05:3e:87:07:af:13:ef:4f:e2:
         4f:24:3a:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd6VKDsCRw8D/X/EMnktR4qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NDZhZjE4ZjcwNzhhYWMwMGMyZmNkMmNhNjdmOTMyODAy
MTdlMTUwHhcNMjUwNjE2MjAwMDU1WhcNMjUwNjE3MjAwMDU1WjAzMTEwLwYDVQQD
EyhmYzU0ZWUzM2M3YjdjNTIxZjk1MzFhMmZkODYwMzMyZTJiMTM0ZjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTxEHJzuoVvLUGSprAfwJWL8SZa1
ABKxzREtdm42XbrlIWORZXFBXprrNNF/SrTcQaWVuSPP5cOmpLlNAeMEqgJb5WJs
xlr8Q3qz74ZMrR5CEKINHjt9pw/SbonM68ir6o2FnveNeZ7815OXTrUn3L6zlrQk
U2h8I8DUWcg5tn+3ZTuVgZF0kM71mcUX6/y8E7rOG6vGnrZUDmwiUTegOzJ2YEf7
fwa5dOzArjr7N/Z2klfL+1bFTX0KZkjP4iGhyZqDddNqUWxtGddJZZXtGfl2LTZ1
uDrfJcvrdDOhZR6WpD2fpqH4T1baCL3G1iNzouGzC8MZ2Po3ZcOwCN25qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxU7jPHt8Uh+VMaL9hgMy4rE08XMB8GA1UdIwQY
MBaAFIVGrxj3B4qsAML80spn+TKAIX4VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFVhdkdQY0hpcXdBd3Z6U3ltZjVNb0FoZmhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYTY4ODgtYjlhZC00YjgxLWI5MzUt
NmJlYWVlNWI1OGEzLzEvaFVhdkdQY0hpcXdBd3Z6U3ltZjVNb0FoZmhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xYTY4ODgtYjlhZC00YjgxLWI5MzUtNmJlYWVlNWI1OGEz
LzEvaFVhdkdQY0hpcXdBd3Z6U3ltZjVNb0FoZmhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbADD5FGF
a/q9Eqnb63DHx+bh3IEdFjR1JrexT+MzSQVs5yD6EmmRkyYP0b/z6mxlXWCFoX8L
/6IyGZjZODqeac/Q2ex8Hyzzmzpf3TCOh53c7yESOg/5bQ+PNATF7tTM+7hqC0q/
gVwTGYWpM87lDN/8DNYrsToXsCUW+x24qpL2rugYzBIHxHaPkYJdsL6yTOTEnjEf
bH4wui0G9YqIVFDIfsK6LssAsT6eaEUR9m2NwF2WMvS4Mg1Al4XyxUfLo2kRLZcu
uABDRX31embDdTMaR1Jq/E6k/hyQRFfHY/q2A/5C/mUii/1Ng0ZMoUhW8pRlBT6H
B68T70/iTyQ69Q==
-----END CERTIFICATE-----
Generated at Tue Jun 17 01:38:59 2025 by rpki-client