Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
File:                     Ho9qRt33-Tyik16-YYJGrm3TGw0.mft (raw, json)
Hash identifier:          jIidnt7jMnwhQJlfN9mIy43w7AlBPQKs6icN5LRtVA4=
Subject key identifier:   EF:FB:D4:A8:A8:0E:81:07:55:B2:20:62:5D:C1:24:D0:26:96:1C:7F
Authority key identifier: 1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
Certificate issuer:       /CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Certificate serial:       019849D38E77F5A951C86F5E6447E64A2D60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
Manifest number:          0B46
Signing time:             Sun 27 Jul 2025 03:00:57 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:57 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:57 +0000
Files and hashes:         1: Ho9qRt33-Tyik16-YYJGrm3TGw0.crl (hash: HNDHlusFf1pqwHu0apsOkmU+bOSo2fZr+z4rc2jORVY=)
                          2: dDZBFwtap4thW-74sW-jVlXGuR4.roa (hash: FLfuvFWVGolNmszXbBbS9jb1QikiZPyQXAU3cIWAlJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 03:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:8e:77:f5:a9:51:c8:6f:5e:64:47:e6:4a:2d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
        Validity
            Not Before: Jul 27 03:00:57 2025 GMT
            Not After : Jul 28 03:00:57 2025 GMT
        Subject: CN=effbd4a8a80e810755b220625dc124d026961c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:38:bd:f4:4a:91:88:79:e0:3d:32:11:8a:71:
                    2e:c8:61:58:24:a6:79:81:20:54:b5:82:d3:e4:51:
                    93:12:2a:69:ca:98:09:c8:66:80:b6:3e:d1:94:6d:
                    07:79:de:d5:a0:48:bd:95:e2:28:f4:cc:6d:c6:81:
                    d3:05:a6:f1:1b:d3:0c:73:51:d0:f9:9b:7c:99:36:
                    3a:ab:5e:9a:69:4a:ff:1f:5f:d7:81:08:eb:46:64:
                    6b:df:70:d2:01:d6:bd:e7:06:77:6e:81:9f:28:ed:
                    23:49:7e:26:60:91:35:4c:d3:c2:a7:e0:4a:2b:e5:
                    a4:92:d7:7f:4c:1b:68:07:33:74:4f:cc:f6:1b:0e:
                    04:df:e3:c3:98:03:a2:a6:78:0c:3f:d5:76:3e:61:
                    e7:67:7b:97:25:d9:a6:4c:c0:22:4c:62:7e:15:19:
                    73:b3:e3:af:03:3e:6e:2f:c6:60:8c:44:57:b6:c7:
                    b7:a7:24:86:9b:78:49:6c:fc:d5:ad:6d:a1:82:68:
                    ce:57:d5:c0:80:68:e9:32:9c:aa:ae:18:eb:0c:87:
                    32:0b:8a:32:41:a3:29:7c:cb:70:8a:ef:4d:30:eb:
                    85:5c:58:ae:0d:00:39:c9:3c:2f:0f:8a:1f:45:e5:
                    f1:6e:8b:2b:b1:92:93:83:e8:8e:cb:0a:24:c3:bc:
                    1b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FB:D4:A8:A8:0E:81:07:55:B2:20:62:5D:C1:24:D0:26:96:1C:7F
            X509v3 Authority Key Identifier:
                keyid:1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:aa:89:bb:2c:46:7b:4f:27:c4:f8:af:1d:17:33:6a:8f:68:
         23:9b:b0:6d:11:65:6a:cd:42:35:ce:28:a5:f8:58:ef:0b:93:
         01:80:58:2c:03:af:33:18:b9:5f:ec:b6:d5:cb:f1:15:58:f0:
         dc:7a:84:78:5a:f8:da:17:63:a4:4a:04:29:f6:1f:6b:da:d9:
         2d:3f:f3:93:f1:a7:bd:ff:94:ea:66:77:26:38:df:18:e0:ff:
         67:87:72:36:3c:ed:3f:b6:4c:25:03:8c:10:7b:2b:7e:30:6c:
         86:55:36:ba:34:1d:f8:be:78:6b:20:14:62:56:23:37:25:f4:
         3a:90:08:86:f5:65:73:db:ee:8b:af:1c:02:f9:2c:66:17:fd:
         2f:f2:b9:23:9d:b3:ae:8b:81:21:28:58:c6:e5:98:fa:04:cc:
         bc:16:e5:f0:77:fe:2d:52:7b:fe:2b:27:84:d2:0b:53:4b:41:
         37:20:a0:98:0c:c7:c1:c9:2b:75:5f:b5:d7:9f:44:84:db:63:
         4d:3e:1e:e8:3b:3a:31:51:46:52:3a:93:9f:a1:4e:36:e2:79:
         84:6b:fc:1a:15:be:f9:a7:bd:cf:be:d4:76:8e:45:56:05:d0:
         e5:08:86:0f:8c:e9:b1:5d:2b:2c:b5:de:8c:5a:7f:58:13:21:
         05:f8:f1:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ04539alRyG9eZEfmSi1gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOGY2YTQ2ZGRmN2Y5M2NhMjkzNWViZTYxODI0NmFlNmRk
MzFiMGQwHhcNMjUwNzI3MDMwMDU3WhcNMjUwNzI4MDMwMDU3WjAzMTEwLwYDVQQD
EyhlZmZiZDRhOGE4MGU4MTA3NTViMjIwNjI1ZGMxMjRkMDI2OTYxYzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Di99EqRiHngPTIRinEuyGFYJKZ5
gSBUtYLT5FGTEippypgJyGaAtj7RlG0Hed7VoEi9leIo9MxtxoHTBabxG9MMc1HQ
+Zt8mTY6q16aaUr/H1/XgQjrRmRr33DSAda95wZ3boGfKO0jSX4mYJE1TNPCp+BK
K+Wkktd/TBtoBzN0T8z2Gw4E3+PDmAOipngMP9V2PmHnZ3uXJdmmTMAiTGJ+FRlz
s+OvAz5uL8ZgjERXtse3pySGm3hJbPzVrW2hgmjOV9XAgGjpMpyqrhjrDIcyC4oy
QaMpfMtwiu9NMOuFXFiuDQA5yTwvD4ofReXxbosrsZKTg+iOywokw7wb2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/71KioDoEHVbIgYl3BJNAmlhx/MB8GA1UdIwQY
MBaAFB6Pakbd9/k8opNevmGCRq5t0xsNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG85cVJ0MzMtVHlpazE2LVlZSkdybTNUR3cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC84YTkzYjYtMmU3ZS00ODdjLWIwZjMt
MjhkMTVlYjczNDFkLzEvSG85cVJ0MzMtVHlpazE2LVlZSkdybTNUR3cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC84YTkzYjYtMmU3ZS00ODdjLWIwZjMtMjhkMTVlYjczNDFk
LzEvSG85cVJ0MzMtVHlpazE2LVlZSkdybTNUR3cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6qJuyxG
e08nxPivHRczao9oI5uwbRFlas1CNc4opfhY7wuTAYBYLAOvMxi5X+y21cvxFVjw
3HqEeFr42hdjpEoEKfYfa9rZLT/zk/Gnvf+U6mZ3JjjfGOD/Z4dyNjztP7ZMJQOM
EHsrfjBshlU2ujQd+L54ayAUYlYjNyX0OpAIhvVlc9vui68cAvksZhf9L/K5I52z
rouBIShYxuWY+gTMvBbl8Hf+LVJ7/isnhNILU0tBNyCgmAzHwckrdV+1159EhNtj
TT4e6Ds6MVFGUjqTn6FONuJ5hGv8GhW++ae9z77Udo5FVgXQ5QiGD4zpsV0rLLXe
jFp/WBMhBfjx3A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:33:24 2025 by rpki-client