Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
File:                     iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json)
Hash identifier:          n2fa+coE6nf0UCscY0Uk5+uQQUWSWp7/IJuD6Vnjhu8=
Subject key identifier:   55:4B:A9:04:C3:AB:E9:F2:4B:10:87:C6:A9:86:7C:43:CB:0C:3A:C0
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Certificate issuer:       /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial:       019748F9F99CAF709DB217218A0F8DAD822B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
Manifest number:          0D2A
Signing time:             Sat 07 Jun 2025 06:00:31 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:31 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:31 +0000
Files and hashes:         1: abKcOp3qmm4ybUnw1tBA-G8yOrc.roa (hash: /klckxmc/giyHaniwWbEf+LlQIwRtUPvFDW14KDXips=)
                          2: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: fy9xBdTq6fERMmuqJJzT6z1eokzVjZzhwYw6/MNxml4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:f9:f9:9c:af:70:9d:b2:17:21:8a:0f:8d:ad:82:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
        Validity
            Not Before: Jun  7 06:00:31 2025 GMT
            Not After : Jun  8 06:00:31 2025 GMT
        Subject: CN=554ba904c3abe9f24b1087c6a9867c43cb0c3ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dd:2d:37:b7:81:36:71:58:ed:05:4b:0a:5d:
                    8b:4f:9e:44:9c:09:bb:06:7b:c0:9a:91:89:25:00:
                    02:a5:79:e8:01:78:3a:a5:4a:87:62:94:b4:15:29:
                    94:ba:88:18:95:9b:2a:4e:e8:72:21:38:34:ab:60:
                    38:47:1c:c7:39:6a:9c:43:4d:29:7f:8d:f0:d9:53:
                    49:13:04:1b:e8:ef:1d:e3:3b:5a:2f:dd:27:91:71:
                    47:d9:e3:75:59:a1:b9:f6:4c:8d:91:2e:db:f6:b2:
                    30:4a:29:b0:75:17:59:3c:03:e5:3f:b2:3a:3a:ce:
                    8c:c6:1a:d7:8d:e7:11:cb:30:c2:a1:b9:df:fe:be:
                    b6:f8:93:c6:24:ee:8b:88:55:1f:60:31:17:c1:dd:
                    22:75:7a:e3:e0:ac:0d:c6:40:de:a5:a4:32:a2:e6:
                    12:ec:3f:e1:f4:15:f1:b6:31:af:42:8f:aa:d7:c3:
                    05:e6:67:79:9f:86:54:44:13:99:8e:76:21:c1:2a:
                    ed:b1:15:e8:78:b8:cf:bb:da:83:6c:15:22:69:e2:
                    c6:ab:5d:0a:f7:fe:52:e7:90:c7:93:ed:d7:f3:56:
                    36:70:2a:19:60:9f:ab:8c:a8:4a:62:2f:38:61:e6:
                    c4:07:14:a5:46:31:22:d6:ec:e5:aa:7a:44:34:90:
                    4f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4B:A9:04:C3:AB:E9:F2:4B:10:87:C6:A9:86:7C:43:CB:0C:3A:C0
            X509v3 Authority Key Identifier:
                keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:ac:70:0e:f5:9a:c3:07:ad:23:67:b3:a1:25:58:b3:b3:8e:
         92:f9:7e:8c:e2:75:4a:22:af:a5:a8:02:9f:55:7d:38:9d:b0:
         d0:48:4c:72:15:60:50:c5:c2:a6:fc:44:d9:ce:cc:09:54:e8:
         41:1f:66:4e:fd:4b:7a:dc:bf:e4:52:29:e6:89:84:44:87:22:
         e5:71:92:6e:90:a5:98:65:b1:33:4c:88:a4:4c:4a:95:43:e4:
         6e:57:dc:58:52:b9:61:81:d9:a7:c2:7d:ce:51:94:d7:e1:79:
         39:3a:73:24:5f:6d:dd:fa:b1:eb:1a:7b:7b:42:0f:3f:05:97:
         06:c1:27:a7:7a:b9:e5:2c:bb:9d:df:ca:70:6b:ef:1e:c9:e0:
         04:f4:62:3f:2b:ae:82:ad:fe:48:c3:a3:3e:7c:e2:01:b6:82:
         66:9d:17:f0:25:53:bc:4a:b3:06:fe:d0:eb:00:98:c9:82:79:
         da:dc:2c:e0:f7:77:8e:38:15:1f:62:47:d9:3b:55:ba:3b:5f:
         4c:52:04:50:34:a6:22:c1:fa:4b:6e:99:a8:19:eb:8d:d8:a4:
         4f:6e:af:7f:77:83:b8:2e:dc:a6:1b:15:7b:61:58:b3:f2:4f:
         9e:de:56:79:b3:97:f5:d2:0d:25:89:d4:69:ea:00:c5:a3:63:
         b9:65:84:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+fmcr3Cdshchig+NrYIrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4N2E1ZjA0ODZiMThhMjQ0OGYyMzU4YTI3NDZjMWFiZDlm
YjJlNWUwHhcNMjUwNjA3MDYwMDMxWhcNMjUwNjA4MDYwMDMxWjAzMTEwLwYDVQQD
Eyg1NTRiYTkwNGMzYWJlOWYyNGIxMDg3YzZhOTg2N2M0M2NiMGMzYWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud0tN7eBNnFY7QVLCl2LT55EnAm7
BnvAmpGJJQACpXnoAXg6pUqHYpS0FSmUuogYlZsqTuhyITg0q2A4RxzHOWqcQ00p
f43w2VNJEwQb6O8d4ztaL90nkXFH2eN1WaG59kyNkS7b9rIwSimwdRdZPAPlP7I6
Os6MxhrXjecRyzDCobnf/r62+JPGJO6LiFUfYDEXwd0idXrj4KwNxkDepaQyouYS
7D/h9BXxtjGvQo+q18MF5md5n4ZURBOZjnYhwSrtsRXoeLjPu9qDbBUiaeLGq10K
9/5S55DHk+3X81Y2cCoZYJ+rjKhKYi84YebEBxSlRjEi1uzlqnpENJBPBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVLqQTDq+nySxCHxqmGfEPLDDrAMB8GA1UdIwQY
MBaAFIh6XwSGsYokSPI1iidGwavZ+y5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yOGMzZDEtOGE5MC00MDY4LWJiMjct
MzNhYmM1M2MwZTc5LzEvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yOGMzZDEtOGE5MC00MDY4LWJiMjctMzNhYmM1M2MwZTc5
LzEvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAraxwDvWa
wwetI2ezoSVYs7OOkvl+jOJ1SiKvpagCn1V9OJ2w0EhMchVgUMXCpvxE2c7MCVTo
QR9mTv1Lety/5FIp5omERIci5XGSbpClmGWxM0yIpExKlUPkblfcWFK5YYHZp8J9
zlGU1+F5OTpzJF9t3fqx6xp7e0IPPwWXBsEnp3q55Sy7nd/KcGvvHsngBPRiPyuu
gq3+SMOjPnziAbaCZp0X8CVTvEqzBv7Q6wCYyYJ52tws4Pd3jjgVH2JH2TtVujtf
TFIEUDSmIsH6S26ZqBnrjdikT26vf3eDuC7cphsVe2FYs/JPnt5WebOX9dINJYnU
aeoAxaNjuWWEnQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:28:35 2025 by rpki-client