Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
File:                     2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft (raw, json)
Hash identifier:          2mZoGMpEi6jRGj7+1Q9jRZ68B/ePePiJRBg/4D6Ju3A=
Subject key identifier:   C6:36:EC:D4:B6:FD:48:95:0C:90:F1:29:28:80:34:97:4E:CF:AF:56
Authority key identifier: D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6
Certificate issuer:       /CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
Certificate serial:       019857217A7EC77AC9B2BF47D5D3BB5823C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
Manifest number:          14F4
Signing time:             Tue 29 Jul 2025 17:01:08 +0000
Manifest this update:     Tue 29 Jul 2025 17:01:08 +0000
Manifest next update:     Wed 30 Jul 2025 17:01:08 +0000
Files and hashes:         1: 2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl (hash: 6cZyDh8dC7NTJVkOLxHdenMXakzYTbKDpbHOLT7JNPY=)
                          2: B5m6j_K3O894W_R_t6V6YidAg_M.roa (hash: bXrv4zwrH5nVqybqsixx97jvkGY3LFCIFwVY3pH6Bk8=)
                          3: gpM2Niv38-bAPpYWDWu_AiD_7fU.roa (hash: U97/Bujuoe+UqbMI2I87geGUh9XKKMGTDgPKSh0HsUc=)
                          4: iWkENaumrn_VqAXGYeFWSy8pOdc.roa (hash: BifAs92ML2XP6L2w5bLWRZw5RDndqu7o+E6QeoQC5zA=)
                          5: v_tCnLJbfmXfnX8r8TkiKrJdo6U.roa (hash: 2qeSRWLeCZqoEkwlBGulwS0BehW+dyHuoHpo1B95cR8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 14:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:57:21:7a:7e:c7:7a:c9:b2:bf:47:d5:d3:bb:58:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
        Validity
            Not Before: Jul 29 17:01:08 2025 GMT
            Not After : Jul 30 17:01:08 2025 GMT
        Subject: CN=c636ecd4b6fd48950c90f129288034974ecfaf56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:39:a6:2c:62:94:2f:6a:9f:dc:7e:ae:9e:fe:
                    b3:2c:ba:a3:da:84:6c:03:03:3a:47:dd:45:43:6a:
                    90:1f:31:32:b6:9b:f0:cd:25:65:31:2a:72:89:09:
                    c1:8a:ab:b9:d6:d6:69:bf:7a:9b:90:06:72:fd:d5:
                    7f:41:bf:21:92:ea:5e:d5:10:ba:16:cc:dd:11:32:
                    b2:39:25:be:8e:5e:bb:50:6b:ed:be:28:cc:b5:4d:
                    c8:d1:72:b5:29:14:58:58:9f:f7:5d:23:72:e7:9c:
                    fd:b1:42:5d:68:8c:89:04:76:c7:2c:13:d7:38:c1:
                    92:34:68:fa:ff:21:da:ed:47:9f:8c:03:58:e7:43:
                    fc:75:82:29:f4:43:51:68:e8:9f:92:7c:5d:d1:48:
                    ff:a4:ff:bc:2f:11:01:b2:ac:bb:64:9a:27:71:31:
                    03:54:76:b5:cd:22:12:07:49:b8:bf:ef:e1:53:ed:
                    8b:db:23:38:64:3c:d4:ed:d7:a1:6c:a4:76:96:59:
                    88:45:60:d8:b8:c8:14:fc:22:b9:f6:c8:a7:2b:44:
                    d6:5b:56:e8:81:9b:07:c6:c8:57:b0:af:3e:0b:33:
                    d0:d4:09:6c:e5:3b:cf:6b:75:40:e7:c9:b0:d2:85:
                    7a:71:1a:a5:95:33:ce:33:b1:05:b2:57:7f:2d:41:
                    bd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:36:EC:D4:B6:FD:48:95:0C:90:F1:29:28:80:34:97:4E:CF:AF:56
            X509v3 Authority Key Identifier:
                keyid:D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:1f:18:b8:d2:14:b6:56:a3:03:09:0e:5b:af:21:61:1c:53:
         b0:cd:d2:e4:8b:f6:00:91:5b:9d:67:e8:c0:2b:68:4b:ee:1b:
         31:f2:52:2c:28:24:87:72:71:f1:d2:46:bd:f3:65:d2:89:63:
         91:10:61:56:17:3e:a8:a3:14:27:16:a0:4d:c7:e7:78:f5:3d:
         9c:9d:75:d2:6e:bd:f5:18:f3:a0:32:a4:c5:7d:bb:61:83:ff:
         dd:81:9e:a5:ec:a0:24:66:60:e5:48:f8:3a:ee:59:0e:b5:88:
         d9:89:b3:6d:c6:26:68:0d:33:23:ad:51:82:a7:d4:f2:e2:31:
         f2:8f:60:35:fb:5d:31:0c:2f:5b:08:38:71:21:b8:4e:6f:e2:
         e9:d1:37:04:f8:fd:f7:41:71:d9:f1:ef:78:da:a6:f3:d9:f2:
         e2:8f:c9:d7:f1:8b:7e:de:2b:c7:e9:5c:a4:c5:51:8c:fe:0b:
         fc:0e:0f:91:88:0c:fc:7e:5d:64:d6:f1:a6:87:f7:d8:c4:e5:
         d0:92:de:92:77:73:42:fd:12:c8:77:0e:39:7f:99:95:b6:5c:
         ba:cf:b5:b3:ce:b8:e2:17:93:f4:fb:17:d4:94:29:09:68:10:
         31:96:33:39:b6:fa:ac:f7:f8:30:b7:61:e6:65:32:ad:2a:3c:
         6f:4d:59:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhXIXp+x3rJsr9H1dO7WCPAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NzcyYWFjMWI2MmI4N2Q2YjAxZDU3YTFhMDBhNmE3MmI4
YTdkYTYwHhcNMjUwNzI5MTcwMTA4WhcNMjUwNzMwMTcwMTA4WjAzMTEwLwYDVQQD
EyhjNjM2ZWNkNGI2ZmQ0ODk1MGM5MGYxMjkyODgwMzQ5NzRlY2ZhZjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDmmLGKUL2qf3H6unv6zLLqj2oRs
AwM6R91FQ2qQHzEytpvwzSVlMSpyiQnBiqu51tZpv3qbkAZy/dV/Qb8hkupe1RC6
FszdETKyOSW+jl67UGvtvijMtU3I0XK1KRRYWJ/3XSNy55z9sUJdaIyJBHbHLBPX
OMGSNGj6/yHa7UefjANY50P8dYIp9ENRaOifknxd0Uj/pP+8LxEBsqy7ZJoncTED
VHa1zSISB0m4v+/hU+2L2yM4ZDzU7dehbKR2llmIRWDYuMgU/CK59sinK0TWW1bo
gZsHxshXsK8+CzPQ1Als5TvPa3VA58mw0oV6cRqllTPOM7EFsld/LUG91QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMY27NS2/UiVDJDxKSiANJdOz69WMB8GA1UdIwQY
MBaAFNh3KqwbYrh9awHVehoApqcrin2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkhjcXJCdGl1SDFyQWRWNkdnQ21weXVLZmFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82MTZhNTgtNTM0Mi00MzJjLWE5YzUt
MzMzYmVlY2ZmNmY0LzEvMkhjcXJCdGl1SDFyQWRWNkdnQ21weXVLZmFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My82MTZhNTgtNTM0Mi00MzJjLWE5YzUtMzMzYmVlY2ZmNmY0
LzEvMkhjcXJCdGl1SDFyQWRWNkdnQ21weXVLZmFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKh8YuNIU
tlajAwkOW68hYRxTsM3S5Iv2AJFbnWfowCtoS+4bMfJSLCgkh3Jx8dJGvfNl0olj
kRBhVhc+qKMUJxagTcfnePU9nJ110m699RjzoDKkxX27YYP/3YGepeygJGZg5Uj4
Ou5ZDrWI2YmzbcYmaA0zI61RgqfU8uIx8o9gNftdMQwvWwg4cSG4Tm/i6dE3BPj9
90Fx2fHveNqm89ny4o/J1/GLft4rx+lcpMVRjP4L/A4PkYgM/H5dZNbxpof32MTl
0JLekndzQv0SyHcOOX+ZlbZcus+1s8644heT9PsX1JQpCWgQMZYzObb6rPf4MLdh
5mUyrSo8b01Zjg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 19:03:26 2025 by rpki-client