Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
File:                     HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft (raw, json)
Hash identifier:          kR+obnGv0sbtw5KcS+pgnU0CQGMn+p2brGsPyTw94e4=
Subject key identifier:   22:57:13:F5:2F:14:4A:51:9E:39:8C:DF:6D:E9:E7:6E:60:82:2E:08
Authority key identifier: 1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
Certificate issuer:       /CN=1c5c72ee422c61667e3056de6b3ffce034305175
Certificate serial:       01974A0CA38CB6D5FA2589A6F448FD5CE4D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
Manifest number:          1291
Signing time:             Sat 07 Jun 2025 11:00:31 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:31 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:31 +0000
Files and hashes:         1: 88WU_lo-nSRGdQfY40VdogAMLxE.roa (hash: Hb+L5mbmqk3uGoKDZkv33m+okuLc3B+yQYtGc3eHLEs=)
                          2: HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl (hash: lu1/rz9UvEmk3Imp5VQ/p4mT8sCSBsGjrQ8pGUgkubU=)
                          3: qitb7VLMgvff1nrPh9k84ZNCZis.roa (hash: 5aKxoc3/ZFGyn8GlrxxZrkPDb3gc2rupmpy/hBVwGfg=)
                          4: sSMElgLodEbAl0Mf5M1CJAtGd6o.roa (hash: KsAmDiMwl01kc6yWzv4aB83pLDw7Wb/jRHOPdGc8zK8=)
                          5: uy9rotP4GfgGA6fEbMzkj5aiTZs.roa (hash: aVRFeZsETYjdOaMaKocLpddIBiAt91C1pjmXmkw2oUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:a3:8c:b6:d5:fa:25:89:a6:f4:48:fd:5c:e4:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5c72ee422c61667e3056de6b3ffce034305175
        Validity
            Not Before: Jun  7 11:00:31 2025 GMT
            Not After : Jun  8 11:00:31 2025 GMT
        Subject: CN=225713f52f144a519e398cdf6de9e76e60822e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e6:e7:f1:de:30:e6:78:32:c0:1e:09:48:71:
                    30:b5:33:f5:04:3a:d2:a6:4b:57:ba:8d:74:bd:80:
                    ed:cf:e0:a4:ee:2f:50:ef:74:4b:ee:b6:33:38:04:
                    ce:91:68:58:86:ac:82:6c:2d:d9:bb:16:61:54:a1:
                    9d:ad:22:71:6c:17:cc:2a:93:c0:23:4e:db:5d:21:
                    5a:8c:cf:c4:5f:5a:64:ec:34:4a:96:9d:47:a6:c6:
                    bc:2e:a3:84:e3:ea:5d:79:45:1e:3a:9e:2e:8e:c0:
                    c9:85:c4:ef:9c:c8:65:5d:4a:ae:6b:7f:94:24:2c:
                    f4:62:f2:e6:fd:05:c6:38:a5:81:ba:f1:44:ec:c6:
                    a7:f3:90:d3:0d:ea:f3:87:87:9e:f7:4d:1d:8a:67:
                    b8:7e:80:52:86:74:75:97:24:22:b4:ff:f7:61:64:
                    c2:88:2f:4b:99:f1:a9:cb:d5:c6:f7:b9:ae:45:45:
                    09:c3:72:9b:95:01:51:fc:a9:25:68:67:ba:34:25:
                    27:3f:6c:b6:bb:73:bf:6d:c5:ef:42:b0:fe:20:2c:
                    32:e4:a2:99:39:e6:d4:a2:42:78:ae:5d:e2:05:f6:
                    d5:5f:21:8a:0a:a3:04:e7:3a:9b:8f:c1:20:7b:fc:
                    95:3f:c1:d7:54:4d:e2:e8:ad:25:82:be:be:7f:4c:
                    bb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:57:13:F5:2F:14:4A:51:9E:39:8C:DF:6D:E9:E7:6E:60:82:2E:08
            X509v3 Authority Key Identifier:
                keyid:1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:45:59:10:f9:28:74:f4:26:62:12:a2:dc:a5:9a:c6:9e:3f:
         6a:9c:2a:fa:37:5f:6c:5d:91:23:7d:df:20:ea:ce:ab:6c:3c:
         c8:ae:f7:86:30:9a:37:ca:8e:8f:bd:8f:3d:78:d6:c2:9f:ec:
         58:4e:7c:9a:e6:75:7c:26:ca:d5:7f:a6:d6:26:ad:72:96:e2:
         b9:8d:25:54:4f:fd:33:82:bb:04:9f:f0:0f:43:7f:d2:77:c4:
         50:06:a2:f0:a1:7e:74:92:42:e0:84:44:c3:5f:29:b4:68:ba:
         f4:b1:c2:3c:1a:0d:9f:c8:41:20:98:4e:da:bf:f7:3d:49:b3:
         d5:15:59:19:eb:67:4a:31:7f:9b:66:b4:3d:85:69:14:77:24:
         4c:be:a8:6f:35:f0:a0:76:39:cd:30:50:41:a5:da:e5:2c:b6:
         5e:ee:ec:98:7b:7b:03:af:a0:3b:c1:2c:f9:dd:f9:55:7d:90:
         28:60:33:20:e6:12:7f:bf:16:03:8b:99:b0:0b:ed:ab:f0:df:
         34:f4:21:ac:1f:62:6f:5b:fc:67:9f:90:29:4c:b9:81:28:49:
         4d:2d:92:49:44:b6:19:0a:db:3d:f6:de:75:b2:ec:7a:3b:76:
         8c:8f:a3:e3:84:d8:d2:07:f0:2f:fa:eb:5a:30:b7:4c:e0:ab:
         8e:fe:7b:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDKOMttX6JYmm9Ej9XOTZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNWM3MmVlNDIyYzYxNjY3ZTMwNTZkZTZiM2ZmY2UwMzQz
MDUxNzUwHhcNMjUwNjA3MTEwMDMxWhcNMjUwNjA4MTEwMDMxWjAzMTEwLwYDVQQD
EygyMjU3MTNmNTJmMTQ0YTUxOWUzOThjZGY2ZGU5ZTc2ZTYwODIyZTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+bn8d4w5ngywB4JSHEwtTP1BDrS
pktXuo10vYDtz+Ck7i9Q73RL7rYzOATOkWhYhqyCbC3ZuxZhVKGdrSJxbBfMKpPA
I07bXSFajM/EX1pk7DRKlp1Hpsa8LqOE4+pdeUUeOp4ujsDJhcTvnMhlXUqua3+U
JCz0YvLm/QXGOKWBuvFE7Man85DTDerzh4ee900dime4foBShnR1lyQitP/3YWTC
iC9LmfGpy9XG97muRUUJw3KblQFR/KklaGe6NCUnP2y2u3O/bcXvQrD+ICwy5KKZ
OebUokJ4rl3iBfbVXyGKCqME5zqbj8Ege/yVP8HXVE3i6K0lgr6+f0y7iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJXE/UvFEpRnjmM323p525ggi4IMB8GA1UdIwQY
MBaAFBxccu5CLGFmfjBW3ms//OA0MFF1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEZ4eTdrSXNZV1otTUZiZWF6Xzg0RFF3VVhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lMDhkMGUtZWU0Yy00YWUxLTllMGIt
MTI3OGE0MmUwOTJhLzEvSEZ4eTdrSXNZV1otTUZiZWF6Xzg0RFF3VVhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9lMDhkMGUtZWU0Yy00YWUxLTllMGItMTI3OGE0MmUwOTJh
LzEvSEZ4eTdrSXNZV1otTUZiZWF6Xzg0RFF3VVhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcEVZEPko
dPQmYhKi3KWaxp4/apwq+jdfbF2RI33fIOrOq2w8yK73hjCaN8qOj72PPXjWwp/s
WE58muZ1fCbK1X+m1iatcpbiuY0lVE/9M4K7BJ/wD0N/0nfEUAai8KF+dJJC4IRE
w18ptGi69LHCPBoNn8hBIJhO2r/3PUmz1RVZGetnSjF/m2a0PYVpFHckTL6obzXw
oHY5zTBQQaXa5Sy2Xu7smHt7A6+gO8Es+d35VX2QKGAzIOYSf78WA4uZsAvtq/Df
NPQhrB9ib1v8Z5+QKUy5gShJTS2SSUS2GQrbPfbedbLsejt2jI+j44TY0gfwL/rr
WjC3TOCrjv57JQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:56:38 2025 by rpki-client