Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
File:                     hoJWrjTlRSbFslqsK51fX6h9Bh4.mft (raw, json)
Hash identifier:          S37B33xcBSYozrPn7Aode/dpVDkO1oD/kEJgSvqvvAE=
Subject key identifier:   7F:16:C5:26:E4:22:EE:0C:FE:CF:E6:D7:01:AF:8E:EE:C6:75:56:C7
Authority key identifier: 86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
Certificate issuer:       /CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Certificate serial:       01976C98A8F9DE777399859842790F9C8FB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
Manifest number:          0C45
Signing time:             Sat 14 Jun 2025 04:00:33 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:33 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:33 +0000
Files and hashes:         1: ggyXYBYJYDyjENMrTDEoM9cmQuY.roa (hash: nvujf7S88P1Vb2Lev6oUVClTcezEWcGUqDcy1w7ylUY=)
                          2: hoJWrjTlRSbFslqsK51fX6h9Bh4.crl (hash: 4Wu519YTE4WERehS0rdYLsKAvkz01AVAHQWWsaArhq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:a8:f9:de:77:73:99:85:98:42:79:0f:9c:8f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
        Validity
            Not Before: Jun 14 04:00:33 2025 GMT
            Not After : Jun 15 04:00:33 2025 GMT
        Subject: CN=7f16c526e422ee0cfecfe6d701af8eeec67556c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:04:1f:7e:5f:ca:63:bd:53:c7:f8:2d:8f:36:
                    cc:89:78:5a:ca:41:b4:00:5e:28:00:af:bf:b2:87:
                    48:50:f1:cd:5c:9e:81:a1:9b:d5:f9:00:f1:e5:d3:
                    1a:ef:23:5e:1b:1a:15:99:41:96:4f:b4:c9:22:ef:
                    cc:39:43:96:6d:fe:d9:80:3b:8d:30:65:3c:ad:14:
                    a8:3c:c5:5a:a4:e3:f8:8b:fd:d7:f0:f9:d3:0e:0e:
                    fd:06:7a:a3:4a:e3:eb:42:c6:23:d7:5f:46:ee:94:
                    d7:ef:58:04:db:10:ba:37:cf:45:de:32:7c:38:74:
                    35:e0:9b:25:60:07:82:fb:d5:42:ff:a5:f2:c2:5f:
                    a9:1c:cc:c0:3c:83:60:c8:3d:89:7e:80:1b:06:73:
                    40:46:0e:05:eb:e4:e5:d9:b8:b1:68:ee:62:d6:6e:
                    54:28:9d:56:65:58:cc:78:94:4d:0a:57:be:c3:cd:
                    59:d5:ac:6c:95:51:9f:51:46:85:bd:7d:19:e0:f6:
                    96:8c:94:c7:9c:f5:89:7a:8a:a4:32:08:4e:df:3d:
                    8b:b0:5b:3f:76:a3:e2:0d:56:43:a3:33:0d:a0:c1:
                    49:26:2c:11:a5:7d:3e:ba:c0:2f:e9:10:ca:20:7c:
                    f0:b0:01:d0:e1:29:0a:d3:80:57:fd:ef:6c:bf:6f:
                    ea:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:16:C5:26:E4:22:EE:0C:FE:CF:E6:D7:01:AF:8E:EE:C6:75:56:C7
            X509v3 Authority Key Identifier:
                keyid:86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:9b:4c:85:e1:35:37:f8:bd:e4:ed:f7:71:a6:aa:65:29:35:
         93:2a:0f:be:2f:68:68:21:3e:fd:ff:e4:b2:5f:9a:5b:cb:91:
         9d:29:a2:9e:c7:71:bc:c2:89:a0:a0:5f:78:e5:3a:f5:83:6e:
         5c:1f:a0:76:18:56:c5:5f:d9:bb:b9:c3:a4:6a:5a:30:63:09:
         bf:a7:34:60:fa:06:83:93:dd:aa:ff:13:17:2b:75:f2:59:99:
         26:8f:7c:d7:1a:ae:b2:93:e8:4f:8a:9f:3f:89:7d:08:92:97:
         14:ba:a2:e1:a5:1b:37:87:7c:89:03:d3:e7:ed:ab:8d:eb:75:
         72:a2:14:16:3c:01:59:2d:bd:55:14:6f:9e:87:4c:4c:dd:1e:
         af:c5:c6:3a:37:af:c0:7c:67:fc:41:48:f4:06:e5:62:5a:21:
         3e:0f:fe:70:68:4e:ec:0c:bd:e6:92:be:ef:57:01:1a:0f:fd:
         9b:f4:3b:3d:69:f3:2c:8d:c6:99:57:14:dd:51:18:e5:6b:d0:
         df:fe:d4:96:a4:a1:27:a5:1a:9c:2b:ca:af:40:1e:b0:b7:4a:
         5f:a0:24:b8:8a:67:f1:df:fb:be:2b:bd:18:b0:c6:88:34:16:
         49:3d:0e:74:74:9d:a0:00:56:68:0a:7c:51:f3:3a:12:79:04:
         dc:3a:cc:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmKj53ndzmYWYQnkPnI+4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ODI1NmFlMzRlNTQ1MjZjNWIyNWFhYzJiOWQ1ZjVmYTg3
ZDA2MWUwHhcNMjUwNjE0MDQwMDMzWhcNMjUwNjE1MDQwMDMzWjAzMTEwLwYDVQQD
Eyg3ZjE2YzUyNmU0MjJlZTBjZmVjZmU2ZDcwMWFmOGVlZWM2NzU1NmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogQffl/KY71Tx/gtjzbMiXhaykG0
AF4oAK+/sodIUPHNXJ6BoZvV+QDx5dMa7yNeGxoVmUGWT7TJIu/MOUOWbf7ZgDuN
MGU8rRSoPMVapOP4i/3X8PnTDg79BnqjSuPrQsYj119G7pTX71gE2xC6N89F3jJ8
OHQ14JslYAeC+9VC/6Xywl+pHMzAPINgyD2JfoAbBnNARg4F6+Tl2bixaO5i1m5U
KJ1WZVjMeJRNCle+w81Z1axslVGfUUaFvX0Z4PaWjJTHnPWJeoqkMghO3z2LsFs/
dqPiDVZDozMNoMFJJiwRpX0+usAv6RDKIHzwsAHQ4SkK04BX/e9sv2/qZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8WxSbkIu4M/s/m1wGvju7GdVbHMB8GA1UdIwQY
MBaAFIaCVq405UUmxbJarCudX1+ofQYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG9KV3JqVGxSU2JGc2xxc0s1MWZYNmg5Qmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83YjI5NmEtZmQwMy00YWZhLWJjZDIt
Y2JmNjA3MDBlYjkyLzEvaG9KV3JqVGxSU2JGc2xxc0s1MWZYNmg5Qmg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS83YjI5NmEtZmQwMy00YWZhLWJjZDItY2JmNjA3MDBlYjky
LzEvaG9KV3JqVGxSU2JGc2xxc0s1MWZYNmg5Qmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALptMheE1
N/i95O33caaqZSk1kyoPvi9oaCE+/f/ksl+aW8uRnSminsdxvMKJoKBfeOU69YNu
XB+gdhhWxV/Zu7nDpGpaMGMJv6c0YPoGg5Pdqv8TFyt18lmZJo981xquspPoT4qf
P4l9CJKXFLqi4aUbN4d8iQPT5+2rjet1cqIUFjwBWS29VRRvnodMTN0er8XGOjev
wHxn/EFI9AblYlohPg/+cGhO7Ay95pK+71cBGg/9m/Q7PWnzLI3GmVcU3VEY5WvQ
3/7UlqShJ6UanCvKr0AesLdKX6AkuIpn8d/7viu9GLDGiDQWST0OdHSdoABWaAp8
UfM6EnkE3DrM+Q==
-----END CERTIFICATE-----
Generated at Sat Jun 14 07:07:06 2025 by rpki-client