Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
File:                     hoJWrjTlRSbFslqsK51fX6h9Bh4.mft (raw, json)
Hash identifier:          zuhkZKSlcRn/S/SSJ861bJJVzjEJAFGOCdmDqesr+RQ=
Subject key identifier:   93:41:2E:17:0C:A5:CB:AD:BF:6B:33:BB:E2:1E:AD:18:A1:E2:13:BF
Authority key identifier: 86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
Certificate issuer:       /CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Certificate serial:       01975949146A296B682307D0A318428F5BD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
Manifest number:          0C3B
Signing time:             Tue 10 Jun 2025 10:00:50 +0000
Manifest this update:     Tue 10 Jun 2025 10:00:50 +0000
Manifest next update:     Wed 11 Jun 2025 10:00:50 +0000
Files and hashes:         1: ggyXYBYJYDyjENMrTDEoM9cmQuY.roa (hash: nvujf7S88P1Vb2Lev6oUVClTcezEWcGUqDcy1w7ylUY=)
                          2: hoJWrjTlRSbFslqsK51fX6h9Bh4.crl (hash: BZLl88g6ng6hU9xd+npQMtUW6uBCAT0YnN7MGoDtzu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 10:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:49:14:6a:29:6b:68:23:07:d0:a3:18:42:8f:5b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
        Validity
            Not Before: Jun 10 10:00:50 2025 GMT
            Not After : Jun 11 10:00:50 2025 GMT
        Subject: CN=93412e170ca5cbadbf6b33bbe21ead18a1e213bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0c:c0:61:95:d4:48:a9:86:69:9d:9a:9f:9c:
                    b8:64:ae:88:62:41:c0:b4:d9:b2:32:cc:5c:78:d6:
                    c1:02:a7:45:63:44:34:d0:a7:5d:9f:96:87:cd:c0:
                    46:aa:a8:7c:53:19:28:bc:09:94:e5:85:a2:73:f6:
                    5c:0e:46:12:42:f9:20:21:94:64:a1:be:df:7e:a9:
                    15:9b:02:8f:9d:a0:21:ca:0b:e2:83:1b:23:65:9e:
                    e3:e0:01:99:0f:f9:24:c8:94:7e:11:22:85:6b:ed:
                    75:ef:60:22:59:de:4c:fb:70:5a:49:8e:ed:50:d4:
                    bb:e4:57:ec:de:2f:d4:f1:49:d1:55:9f:b5:71:70:
                    b8:61:db:de:ca:50:72:70:9c:d1:cb:ad:c0:fd:79:
                    c6:13:a2:fc:ab:2f:72:14:12:e9:0c:3a:0c:e2:9a:
                    86:df:05:c1:d0:04:31:2e:05:3c:ce:50:31:0b:54:
                    b6:3f:0c:0a:fe:24:22:b9:02:93:6e:4d:d8:13:88:
                    26:2a:24:9a:f4:88:d8:44:c4:a9:82:ae:9d:8b:24:
                    a5:cc:ad:a3:c3:10:1e:3a:98:7b:98:9a:71:df:b6:
                    1c:9e:bc:e7:61:10:fc:73:52:f1:a4:f5:03:7c:77:
                    cb:53:8f:fc:f1:b1:78:d6:ce:6a:79:ce:0f:d2:fd:
                    41:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:41:2E:17:0C:A5:CB:AD:BF:6B:33:BB:E2:1E:AD:18:A1:E2:13:BF
            X509v3 Authority Key Identifier:
                keyid:86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c7:e3:49:65:9c:1e:f1:3a:4a:49:7d:c5:06:8c:28:a2:29:
         54:82:28:73:93:8b:51:6d:8e:f9:4a:b8:32:f9:76:fe:f4:3a:
         26:99:81:69:c0:7b:09:7b:bb:97:db:f7:b1:a7:0b:70:da:7f:
         fb:95:72:d6:ab:5d:fb:6b:c8:8e:ae:3d:1a:b9:3b:79:dd:4f:
         98:98:07:93:3c:88:b7:3f:d7:b4:a4:9a:d0:f0:33:b5:8f:cd:
         60:af:65:55:8f:0f:f1:b5:14:81:ad:de:f4:7e:8f:c0:03:eb:
         1a:2d:ab:a2:ef:0a:6d:e5:dd:36:2d:b6:85:b7:26:21:51:63:
         d0:67:aa:87:28:4f:f7:4f:80:95:2a:06:20:cc:84:40:33:b6:
         58:0d:56:38:3c:63:cf:32:61:ef:ca:39:80:5f:69:94:39:bb:
         f7:7c:03:0a:26:d7:2c:8f:7a:53:44:ca:7f:6d:96:85:72:06:
         04:40:0e:6d:da:bd:6a:51:6c:9f:2b:37:96:2e:e5:b1:29:f2:
         85:ca:e9:3f:5c:94:3d:45:0c:47:01:3c:30:6c:83:00:f0:01:
         2d:c9:9f:b6:99:5f:1f:4d:44:26:eb:c3:09:4c:6b:86:94:91:
         8e:43:aa:65:fe:72:e1:a0:f8:04:a2:8c:3f:59:66:76:02:27:
         50:38:78:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZSRRqKWtoIwfQoxhCj1vWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ODI1NmFlMzRlNTQ1MjZjNWIyNWFhYzJiOWQ1ZjVmYTg3
ZDA2MWUwHhcNMjUwNjEwMTAwMDUwWhcNMjUwNjExMTAwMDUwWjAzMTEwLwYDVQQD
Eyg5MzQxMmUxNzBjYTVjYmFkYmY2YjMzYmJlMjFlYWQxOGExZTIxM2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwzAYZXUSKmGaZ2an5y4ZK6IYkHA
tNmyMsxceNbBAqdFY0Q00Kddn5aHzcBGqqh8UxkovAmU5YWic/ZcDkYSQvkgIZRk
ob7ffqkVmwKPnaAhygvigxsjZZ7j4AGZD/kkyJR+ESKFa+1172AiWd5M+3BaSY7t
UNS75Ffs3i/U8UnRVZ+1cXC4YdveylBycJzRy63A/XnGE6L8qy9yFBLpDDoM4pqG
3wXB0AQxLgU8zlAxC1S2PwwK/iQiuQKTbk3YE4gmKiSa9IjYRMSpgq6diySlzK2j
wxAeOph7mJpx37YcnrznYRD8c1LxpPUDfHfLU4/88bF41s5qec4P0v1BlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNBLhcMpcutv2szu+IerRih4hO/MB8GA1UdIwQY
MBaAFIaCVq405UUmxbJarCudX1+ofQYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG9KV3JqVGxSU2JGc2xxc0s1MWZYNmg5Qmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83YjI5NmEtZmQwMy00YWZhLWJjZDIt
Y2JmNjA3MDBlYjkyLzEvaG9KV3JqVGxSU2JGc2xxc0s1MWZYNmg5Qmg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS83YjI5NmEtZmQwMy00YWZhLWJjZDItY2JmNjA3MDBlYjky
LzEvaG9KV3JqVGxSU2JGc2xxc0s1MWZYNmg5Qmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsfjSWWc
HvE6Skl9xQaMKKIpVIIoc5OLUW2O+Uq4Mvl2/vQ6JpmBacB7CXu7l9v3sacLcNp/
+5Vy1qtd+2vIjq49Grk7ed1PmJgHkzyItz/XtKSa0PAztY/NYK9lVY8P8bUUga3e
9H6PwAPrGi2rou8KbeXdNi22hbcmIVFj0GeqhyhP90+AlSoGIMyEQDO2WA1WODxj
zzJh78o5gF9plDm793wDCibXLI96U0TKf22WhXIGBEAObdq9alFsnys3li7lsSny
hcrpP1yUPUUMRwE8MGyDAPABLcmftplfH01EJuvDCUxrhpSRjkOqZf5y4aD4BKKM
P1lmdgInUDh4Yw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 17:15:41 2025 by rpki-client