Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
File:                     hxv5w80rNkB9-9l2-4SiEZeg6qE.mft (raw, json)
Hash identifier:          RPGeZXimdRCvBggSsALXHMiXjdovoG03/YvWsW1JNBE=
Subject key identifier:   E7:E4:E5:3D:6F:2A:EC:02:C6:B2:1F:D8:25:16:B3:3F:6D:D4:94:99
Authority key identifier: 87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1
Certificate issuer:       /CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
Certificate serial:       0197CA5E8B2160CE948D5001CABE38110AA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
Manifest number:          15BC
Signing time:             Wed 02 Jul 2025 09:01:22 +0000
Manifest this update:     Wed 02 Jul 2025 09:01:22 +0000
Manifest next update:     Thu 03 Jul 2025 09:01:22 +0000
Files and hashes:         1: hxv5w80rNkB9-9l2-4SiEZeg6qE.crl (hash: 2VB8EKsWHUsf2Wm14byDJ49VYQUuSAJN2UnhW9q5ces=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 09:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ca:5e:8b:21:60:ce:94:8d:50:01:ca:be:38:11:0a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
        Validity
            Not Before: Jul  2 09:01:22 2025 GMT
            Not After : Jul  3 09:01:22 2025 GMT
        Subject: CN=e7e4e53d6f2aec02c6b21fd82516b33f6dd49499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c0:0b:d4:c6:d1:0f:fd:30:dc:2b:7b:a6:7e:
                    0f:7b:d5:31:fe:17:fe:3b:bf:ac:14:42:39:d6:cd:
                    91:fe:1d:4c:09:82:53:d9:ee:3a:76:a3:52:c4:50:
                    65:a7:31:7e:fd:ee:74:91:8a:52:6b:bb:ee:9a:c1:
                    aa:41:88:3c:6e:1c:98:eb:9c:6a:33:df:4c:28:3e:
                    04:87:db:47:18:2b:d6:db:ee:64:8a:ba:c8:1b:90:
                    0d:1f:cc:af:fd:e1:18:b4:2a:3d:d9:05:2a:cc:77:
                    af:e4:73:cb:be:92:1c:e3:ef:56:a9:2e:38:a7:e3:
                    5c:47:f4:c0:e4:cc:b0:b9:fc:a6:14:75:85:5b:d1:
                    e8:2b:c1:8d:18:5b:f8:e7:08:ce:22:86:e2:c2:38:
                    a7:b6:49:18:72:de:0e:d9:e2:ba:55:4c:12:c4:88:
                    49:4d:1e:6c:33:61:7c:b5:5c:03:fd:41:76:7e:11:
                    23:3f:ea:e0:4f:e9:a9:0a:84:bf:21:a1:0c:8b:03:
                    a1:a6:d4:d8:ee:cc:41:c0:5e:e7:c8:b0:5c:8e:24:
                    89:e4:7f:a5:10:6e:3f:88:74:8f:a2:d3:85:fe:34:
                    6e:e5:87:ce:a0:d2:8c:2d:c1:4a:44:c7:5c:4b:9a:
                    e1:a2:c1:2e:93:ab:e5:6c:69:1e:b2:47:b2:59:9b:
                    fe:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E4:E5:3D:6F:2A:EC:02:C6:B2:1F:D8:25:16:B3:3F:6D:D4:94:99
            X509v3 Authority Key Identifier:
                keyid:87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:90:d4:b5:02:0b:e0:7d:ca:4e:20:7d:a0:08:b7:ca:05:20:
         91:3d:29:3a:9b:3f:aa:ab:db:60:a8:20:ea:65:26:cd:bf:70:
         7f:ba:f4:74:c6:17:9c:79:5f:29:b4:53:2f:37:b4:f8:22:c7:
         02:95:af:0e:02:64:b3:eb:3d:db:b2:d2:34:9b:b1:8f:7a:41:
         18:5b:06:16:fb:fd:39:b9:3f:5b:55:2e:cb:54:d2:ed:43:e1:
         39:58:88:08:ea:2d:f6:9c:78:73:4c:4f:31:66:93:38:1c:ef:
         a8:3b:d6:86:82:ed:42:64:27:8d:9a:eb:b8:63:80:08:99:c1:
         fb:74:dd:18:90:d9:f4:ac:0c:ae:13:0d:e2:65:84:c2:5d:1e:
         fa:a3:3f:c6:1d:98:aa:4a:62:c1:e4:b9:5d:d7:0e:44:bd:9e:
         0e:e7:1c:5d:d9:d3:40:42:2d:a2:a1:e9:f6:5c:26:51:f9:cd:
         31:c7:da:38:7c:fd:ce:09:ed:25:e2:82:5e:75:71:14:fb:90:
         fe:c1:fc:9e:c8:5a:92:af:1d:5c:b5:6f:e5:d1:2a:3a:0e:90:
         d6:5c:87:b9:15:d5:e0:d5:15:c1:ea:75:cd:ab:9d:e6:07:9a:
         84:9e:0e:97:52:6f:12:af:fd:6f:f8:8a:fc:a0:54:53:58:dd:
         1d:38:fb:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKXoshYM6UjVAByr44EQqnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MWJmOWMzY2QyYjM2NDA3ZGZiZDk3NmZiODRhMjExOTdh
MGVhYTEwHhcNMjUwNzAyMDkwMTIyWhcNMjUwNzAzMDkwMTIyWjAzMTEwLwYDVQQD
EyhlN2U0ZTUzZDZmMmFlYzAyYzZiMjFmZDgyNTE2YjMzZjZkZDQ5NDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MAL1MbRD/0w3Ct7pn4Pe9Ux/hf+
O7+sFEI51s2R/h1MCYJT2e46dqNSxFBlpzF+/e50kYpSa7vumsGqQYg8bhyY65xq
M99MKD4Eh9tHGCvW2+5kirrIG5ANH8yv/eEYtCo92QUqzHev5HPLvpIc4+9WqS44
p+NcR/TA5MywufymFHWFW9HoK8GNGFv45wjOIobiwjintkkYct4O2eK6VUwSxIhJ
TR5sM2F8tVwD/UF2fhEjP+rgT+mpCoS/IaEMiwOhptTY7sxBwF7nyLBcjiSJ5H+l
EG4/iHSPotOF/jRu5YfOoNKMLcFKRMdcS5rhosEuk6vlbGkeskeyWZv+4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfk5T1vKuwCxrIf2CUWsz9t1JSZMB8GA1UdIwQY
MBaAFIcb+cPNKzZAffvZdvuEohGXoOqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHh2NXc4MHJOa0I5LTlsMi00U2lFWmVnNnFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9lYmU4OGUtNzE0Mi00YzhhLTkzOWIt
ZmExZTYwODM5OTJkLzEvaHh2NXc4MHJOa0I5LTlsMi00U2lFWmVnNnFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9lYmU4OGUtNzE0Mi00YzhhLTkzOWItZmExZTYwODM5OTJk
LzEvaHh2NXc4MHJOa0I5LTlsMi00U2lFWmVnNnFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZDUtQIL
4H3KTiB9oAi3ygUgkT0pOps/qqvbYKgg6mUmzb9wf7r0dMYXnHlfKbRTLze0+CLH
ApWvDgJks+s927LSNJuxj3pBGFsGFvv9Obk/W1Uuy1TS7UPhOViICOot9px4c0xP
MWaTOBzvqDvWhoLtQmQnjZrruGOACJnB+3TdGJDZ9KwMrhMN4mWEwl0e+qM/xh2Y
qkpiweS5XdcORL2eDuccXdnTQEItoqHp9lwmUfnNMcfaOHz9zgntJeKCXnVxFPuQ
/sH8nshakq8dXLVv5dEqOg6Q1lyHuRXV4NUVwep1zaud5geahJ4Ol1JvEq/9b/iK
/KBUU1jdHTj75w==
-----END CERTIFICATE-----
Generated at Wed Jul 2 13:11:30 2025 by rpki-client