Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
File:                     H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft (raw, json)
Hash identifier:          cEVGSHqDzNy7GfRl8ZF655soYGNafugEV0JtHgR8Gr0=
Subject key identifier:   0B:59:46:19:FE:92:C3:A4:9E:46:ED:8C:40:61:04:EB:E0:0C:EC:59
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Certificate issuer:       /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial:       0199277BFE42965DEA47298B7B930932788E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
Manifest number:          1684
Signing time:             Mon 08 Sep 2025 04:01:01 +0000
Manifest this update:     Mon 08 Sep 2025 04:01:01 +0000
Manifest next update:     Tue 09 Sep 2025 04:01:01 +0000
Files and hashes:         1: 7aUz8499DPhigJrtymvFDvH_yp8.roa (hash: XTyGxDVpkkql4iOBZC2KvGPinizfN4vZAGbc34EqO8o=)
                          2: H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl (hash: vqu7pN85Q7jerYFbzwOz7A6G+tbzxP0HYDKpFteZId4=)
                          3: HIUAWfHmht9E5OhkIRuHF-jHSN4.roa (hash: um5P+h/tFEtZcatPNxAi+7KQz6kwUH5WTqtCRyY4b+w=)
                          4: eYwcDrbCOrfqP-rYaXCht21Elhk.roa (hash: WzOCjqAS7iS6+2PXJkstuDJeHt/haFGrL007cy+fVt4=)
                          5: i3i8lSutN5bZ9tuFtM92GryC3Tg.roa (hash: 5ISoDWe4dlL7knoj3DcxHOeML9tN8TdDsmOzNTKQVvE=)
                          6: jz7r0U5OaA8Q59L6HsVMDy2LM6I.roa (hash: /rl8PmJ+zraPwkfaCv5VsqQ2CSC3ynTwyG8Gqt6YLTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 01:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:27:7b:fe:42:96:5d:ea:47:29:8b:7b:93:09:32:78:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
        Validity
            Not Before: Sep  8 04:01:01 2025 GMT
            Not After : Sep  9 04:01:01 2025 GMT
        Subject: CN=0b594619fe92c3a49e46ed8c406104ebe00cec59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:49:34:d1:40:2d:23:37:89:4d:dd:fd:68:e2:
                    15:d6:9d:36:c2:94:ed:7d:59:70:a1:e3:73:15:23:
                    b6:d5:60:a4:ce:70:4e:41:ba:4a:84:ef:f7:6b:07:
                    da:4d:5a:64:69:a0:b5:5c:61:7c:68:d8:82:25:0b:
                    79:5b:19:f8:62:24:9e:e9:ae:6b:5a:43:be:db:92:
                    71:92:84:6d:8d:2b:55:75:60:5f:c9:bb:55:18:2d:
                    ab:64:aa:9b:d6:80:66:e4:2d:e8:4a:fd:d7:ce:81:
                    f2:fb:8c:13:22:f3:c1:68:0f:3f:0b:45:f2:59:12:
                    d4:79:40:45:67:13:da:4a:39:ee:cb:7d:47:86:50:
                    7e:02:68:cc:0a:c7:bf:8a:6b:ee:7c:cc:69:b6:de:
                    10:40:80:30:5c:84:0c:a6:07:7e:bd:49:a0:87:87:
                    41:20:54:54:88:ef:34:2e:a6:70:e6:52:06:de:0e:
                    7a:5f:77:5e:8e:07:ec:bb:0f:0e:32:2c:99:bc:f1:
                    a1:17:43:05:4c:0e:48:99:0c:ac:03:b0:97:f0:a0:
                    15:03:36:5c:6a:92:c7:81:f6:29:a7:b3:de:26:b1:
                    a0:b6:71:9d:1f:36:b7:4f:80:30:da:f1:1c:9a:b8:
                    17:5a:85:3c:3c:6e:38:14:5e:68:7c:b8:59:c0:a9:
                    17:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:59:46:19:FE:92:C3:A4:9E:46:ED:8C:40:61:04:EB:E0:0C:EC:59
            X509v3 Authority Key Identifier:
                keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f0:dd:7d:b9:c5:62:a1:8c:cf:bb:44:9e:7b:2e:bd:a6:d4:
         92:2a:09:c6:49:99:cf:88:6c:d8:87:b9:17:c4:9a:0e:71:2f:
         74:b9:ca:56:37:55:1b:ae:30:c0:bb:73:00:06:e2:ff:3d:2f:
         b2:31:30:a7:2c:1f:6c:23:d9:00:7f:5d:cc:cc:4e:a2:ce:61:
         07:5d:ad:87:4c:3a:24:84:d5:db:45:28:bf:7c:e2:3a:95:ac:
         38:a3:d5:f3:5d:ef:50:d7:36:4d:16:6e:28:0c:43:ed:b9:87:
         58:93:7a:95:20:60:a9:2d:42:95:c8:e5:a5:88:ea:ef:20:a5:
         3c:0f:28:b5:47:30:32:e0:4d:61:d4:ec:19:df:ab:42:31:cd:
         b3:1a:4f:9b:a7:04:e4:bf:00:de:9c:95:2c:db:63:22:a0:d9:
         66:95:62:1b:ed:16:75:86:cf:4d:c3:20:c9:06:de:61:59:4e:
         49:cb:61:94:53:f2:77:20:7b:22:d4:1e:cd:d4:6e:18:f4:f4:
         e1:e2:0d:8b:11:3d:64:29:e8:a2:cf:86:a9:eb:f8:9f:38:5e:
         ba:61:f6:6b:6e:87:87:15:22:5f:f0:7f:cc:06:60:fc:95:e3:
         ad:71:f9:95:db:11:b8:5b:ae:b6:3d:bf:4b:ed:55:fd:6d:ce:
         ea:4c:8e:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkne/5Cll3qRymLe5MJMniOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDZmNTc3MzVhNGU2M2RiZWY4NDhlZTBkOWQxOTllMjE1
ZjgzMDQwHhcNMjUwOTA4MDQwMTAxWhcNMjUwOTA5MDQwMTAxWjAzMTEwLwYDVQQD
EygwYjU5NDYxOWZlOTJjM2E0OWU0NmVkOGM0MDYxMDRlYmUwMGNlYzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkk00UAtIzeJTd39aOIV1p02wpTt
fVlwoeNzFSO21WCkznBOQbpKhO/3awfaTVpkaaC1XGF8aNiCJQt5Wxn4YiSe6a5r
WkO+25JxkoRtjStVdWBfybtVGC2rZKqb1oBm5C3oSv3XzoHy+4wTIvPBaA8/C0Xy
WRLUeUBFZxPaSjnuy31HhlB+AmjMCse/imvufMxptt4QQIAwXIQMpgd+vUmgh4dB
IFRUiO80LqZw5lIG3g56X3dejgfsuw8OMiyZvPGhF0MFTA5ImQysA7CX8KAVAzZc
apLHgfYpp7PeJrGgtnGdHza3T4Aw2vEcmrgXWoU8PG44FF5ofLhZwKkXlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtZRhn+ksOknkbtjEBhBOvgDOxZMB8GA1UdIwQY
MBaAFB9G9Xc1pOY9vvhI7g2dGZ4hX4MEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBiMWR6V2s1ajItLUVqdURaMFpuaUZmZ3dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8xMDcyNjYtYWI1MS00NjJiLTlmYzIt
YTdjOTg5OGVlY2JjLzEvSDBiMWR6V2s1ajItLUVqdURaMFpuaUZmZ3dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8xMDcyNjYtYWI1MS00NjJiLTlmYzItYTdjOTg5OGVlY2Jj
LzEvSDBiMWR6V2s1ajItLUVqdURaMFpuaUZmZ3dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPDdfbnF
YqGMz7tEnnsuvabUkioJxkmZz4hs2Ie5F8SaDnEvdLnKVjdVG64wwLtzAAbi/z0v
sjEwpywfbCPZAH9dzMxOos5hB12th0w6JITV20Uov3ziOpWsOKPV813vUNc2TRZu
KAxD7bmHWJN6lSBgqS1ClcjlpYjq7yClPA8otUcwMuBNYdTsGd+rQjHNsxpPm6cE
5L8A3pyVLNtjIqDZZpViG+0WdYbPTcMgyQbeYVlOScthlFPydyB7ItQezdRuGPT0
4eINixE9ZCnoos+Gqev4nzheumH2a26HhxUiX/B/zAZg/JXjrXH5ldsRuFuutj2/
S+1V/W3O6kyOHg==
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:07:06 2025 by rpki-client