Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
File:                     h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft (raw, json)
Hash identifier:          qY9wa4ZPcVlJ2DQOJ2pBtpIQdoVPaDluTjOqPRYGsAs=
Subject key identifier:   E8:39:B5:EA:46:07:67:EC:F2:6E:1F:3B:BB:3C:74:EE:B7:71:AA:52
Authority key identifier: 87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
Certificate issuer:       /CN=87e64170f9d82c51670b9a44f329b20613a8082d
Certificate serial:       01974E57E985CBD892788CA23DE36DCDE7EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
Manifest number:          1510
Signing time:             Sun 08 Jun 2025 07:01:13 +0000
Manifest this update:     Sun 08 Jun 2025 07:01:13 +0000
Manifest next update:     Mon 09 Jun 2025 07:01:13 +0000
Files and hashes:         1: 1-cISFCJjrOXOH13uOfejSN0t07U.roa (hash: CsZ+l20+WvDp7ZAvLuoQUu3eyz/VH/hBFp+Sltnj4u8=)
                          2: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl (hash: 7oLtDX1A9kuryHsAW8ERsL73J4eU75+L7rnxLDtNP1s=)
                          3: w3g4Q6aTfVevp6COhE1618_UEpo.roa (hash: OILWL7JqdZLsWKiYyVkTfZSv9EPE18ajIqjcTio33fg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:57:e9:85:cb:d8:92:78:8c:a2:3d:e3:6d:cd:e7:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87e64170f9d82c51670b9a44f329b20613a8082d
        Validity
            Not Before: Jun  8 07:01:13 2025 GMT
            Not After : Jun  9 07:01:13 2025 GMT
        Subject: CN=e839b5ea460767ecf26e1f3bbb3c74eeb771aa52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f3:14:3d:46:66:22:29:dd:98:6f:74:75:31:
                    2f:1f:ce:f3:0f:9b:6a:c0:43:45:d6:13:af:ab:b4:
                    11:ef:8f:20:51:33:15:de:e5:a9:47:34:ea:50:f1:
                    43:b4:d1:00:43:4b:52:4f:4e:25:c9:38:fc:d2:3d:
                    75:d9:5e:d5:c8:03:f4:c1:15:19:aa:78:42:ba:2f:
                    6b:0a:35:1f:55:69:3a:e7:5b:fe:6b:e5:0c:85:6c:
                    c9:54:f4:c2:97:2d:f0:6e:75:4a:ff:ab:87:90:fe:
                    c5:c2:80:25:e6:50:fa:44:5b:b1:9e:c6:e0:dd:0c:
                    bd:2a:74:23:da:4d:8b:b9:85:20:fd:20:b3:8b:05:
                    36:a6:b2:a4:ab:dd:73:fe:7c:64:b8:ed:20:14:8f:
                    30:91:20:33:44:86:2f:01:05:03:42:62:74:7f:f8:
                    9f:76:1a:3b:9a:d5:ca:50:b4:bc:5d:49:9f:23:d0:
                    c6:f6:74:46:81:7c:f7:4e:03:08:af:ed:d1:1a:a7:
                    21:b1:6f:36:7d:3c:63:66:85:7e:5f:47:77:29:0e:
                    24:9e:7a:45:9a:46:ca:93:e7:69:b4:7e:7c:f5:25:
                    79:cd:74:78:af:4a:c6:0b:20:84:2f:b3:fd:50:5b:
                    8b:a5:d5:be:d3:e1:c6:b6:32:16:e0:3a:86:f1:0d:
                    26:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:39:B5:EA:46:07:67:EC:F2:6E:1F:3B:BB:3C:74:EE:B7:71:AA:52
            X509v3 Authority Key Identifier:
                keyid:87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:7c:0b:45:7b:80:db:ba:7e:0d:0f:be:a6:d9:e3:02:0b:32:
         35:01:bc:19:fa:6a:ee:09:48:9e:0b:0a:9d:4d:e9:0b:84:47:
         50:43:58:59:c1:7b:90:6d:9b:3d:5c:9e:54:cf:e5:1e:9c:c4:
         be:42:04:08:0c:53:a5:d4:57:2d:c2:59:77:1f:ab:41:bb:c1:
         61:9d:f1:36:a5:53:2c:d8:ac:af:2a:38:ad:43:e2:a1:32:ac:
         72:7e:a0:00:00:74:71:b7:70:1e:2e:f6:50:02:1a:a2:c5:5c:
         f5:ea:5f:2e:7b:f4:27:ca:01:43:6f:17:58:97:90:53:65:c8:
         eb:50:7c:ad:9e:76:1f:43:8d:f3:bb:29:5a:0a:dc:86:1f:fc:
         40:14:c6:e5:a0:fd:7a:13:76:7e:b5:44:31:2e:cb:ab:93:cd:
         6f:09:15:41:7e:15:6c:c8:49:de:db:b2:c4:d4:18:35:08:e1:
         cb:59:ca:a1:e7:96:78:44:33:fd:c0:f4:dc:a7:bc:8b:f1:12:
         da:76:41:57:ad:48:4c:70:85:16:70:bd:07:43:8c:ca:ce:2f:
         97:0f:6f:de:bf:66:24:67:27:ee:e4:4f:22:db:83:55:cb:a1:
         72:07:1f:aa:e4:d7:3a:df:91:2c:33:ec:6c:78:36:9e:b4:f4:
         84:71:6b:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOV+mFy9iSeIyiPeNtzefvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZTY0MTcwZjlkODJjNTE2NzBiOWE0NGYzMjliMjA2MTNh
ODA4MmQwHhcNMjUwNjA4MDcwMTEzWhcNMjUwNjA5MDcwMTEzWjAzMTEwLwYDVQQD
EyhlODM5YjVlYTQ2MDc2N2VjZjI2ZTFmM2JiYjNjNzRlZWI3NzFhYTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvMUPUZmIindmG90dTEvH87zD5tq
wENF1hOvq7QR748gUTMV3uWpRzTqUPFDtNEAQ0tST04lyTj80j112V7VyAP0wRUZ
qnhCui9rCjUfVWk651v+a+UMhWzJVPTCly3wbnVK/6uHkP7FwoAl5lD6RFuxnsbg
3Qy9KnQj2k2LuYUg/SCziwU2prKkq91z/nxkuO0gFI8wkSAzRIYvAQUDQmJ0f/if
dho7mtXKULS8XUmfI9DG9nRGgXz3TgMIr+3RGqchsW82fTxjZoV+X0d3KQ4knnpF
mkbKk+dptH589SV5zXR4r0rGCyCEL7P9UFuLpdW+0+HGtjIW4DqG8Q0mfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOg5tepGB2fs8m4fO7s8dO63capSMB8GA1UdIwQY
MBaAFIfmQXD52CxRZwuaRPMpsgYTqAgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9iZWIyOWQtZjBlZS00MDdhLTk3MDIt
NmUxM2NjYmY0OTA2LzEvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9iZWIyOWQtZjBlZS00MDdhLTk3MDItNmUxM2NjYmY0OTA2
LzEvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3wLRXuA
27p+DQ++ptnjAgsyNQG8Gfpq7glIngsKnU3pC4RHUENYWcF7kG2bPVyeVM/lHpzE
vkIECAxTpdRXLcJZdx+rQbvBYZ3xNqVTLNisryo4rUPioTKscn6gAAB0cbdwHi72
UAIaosVc9epfLnv0J8oBQ28XWJeQU2XI61B8rZ52H0ON87spWgrchh/8QBTG5aD9
ehN2frVEMS7Lq5PNbwkVQX4VbMhJ3tuyxNQYNQjhy1nKoeeWeEQz/cD03Ke8i/ES
2nZBV61ITHCFFnC9B0OMys4vlw9v3r9mJGcn7uRPItuDVcuhcgcfquTXOt+RLDPs
bHg2nrT0hHFrVg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:36:29 2025 by rpki-client