Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
File:                     HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft (raw, json)
Hash identifier:          3BBWL6zJ7GBMW6BWUIGk98cNAn2lPv6UZbQAxaqQH1Q=
Subject key identifier:   1E:13:73:11:2E:42:0E:62:A7:4C:D7:AE:EE:C4:78:83:E1:89:5B:E5
Authority key identifier: 1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE
Certificate issuer:       /CN=1d5da9109f614c7c4159b3231a3877702a6f21ce
Certificate serial:       019923A0B6DAD60D51F297BCF205CA7E7042
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
Manifest number:          0C63
Signing time:             Sun 07 Sep 2025 10:02:38 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:38 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:38 +0000
Files and hashes:         1: HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl (hash: BVONztsMOxnu6O9CViS2KVofPo+ao4xB78Sc/G70fV4=)
                          2: tVk3cWsdi3hZrDEonwmclNGT-5M.roa (hash: bJG7n4hjSkt99mV93dCKPOM2IO0DVMxNl1m0F3B2sm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:b6:da:d6:0d:51:f2:97:bc:f2:05:ca:7e:70:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d5da9109f614c7c4159b3231a3877702a6f21ce
        Validity
            Not Before: Sep  7 10:02:38 2025 GMT
            Not After : Sep  8 10:02:38 2025 GMT
        Subject: CN=1e1373112e420e62a74cd7aeeec47883e1895be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:62:72:65:2f:6d:a5:91:b2:d1:bf:bf:79:16:
                    41:9e:8f:31:08:dc:f5:f6:37:74:9a:f7:28:59:c5:
                    83:c1:eb:2d:cd:51:3a:60:a7:eb:c6:7f:02:32:42:
                    29:14:01:ac:dc:ca:ef:20:3d:e0:6c:e8:fa:9c:37:
                    35:12:f8:e3:af:65:41:a2:ff:5a:1d:25:f4:e9:d8:
                    11:29:25:c7:e7:3a:e2:d5:67:82:ac:42:59:52:9d:
                    c0:59:b4:20:60:60:d5:58:9c:0a:6b:04:38:f5:b4:
                    9e:44:35:bf:1a:dd:4b:69:c0:be:ab:31:cc:41:2f:
                    3e:82:4c:ce:32:19:b3:d3:0f:22:a9:ca:2b:fc:25:
                    0d:22:d5:6b:6a:6a:29:f4:b1:9a:06:89:e8:5c:7c:
                    25:82:07:ae:4e:ac:23:87:45:3b:23:d1:90:73:49:
                    e2:56:56:2f:e1:ad:cb:e6:34:18:f4:17:fb:13:14:
                    d9:7a:d6:d0:9e:f4:06:25:90:b7:dc:71:69:48:9f:
                    11:d9:74:45:70:22:a2:85:a1:20:5c:f6:4a:44:e0:
                    55:68:f4:62:0b:99:b5:2c:41:fd:88:c7:c1:48:9c:
                    46:65:51:d0:e3:18:38:c6:f8:31:f5:fd:23:a9:69:
                    1f:dd:27:60:81:23:37:20:62:70:28:00:04:64:73:
                    bf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:13:73:11:2E:42:0E:62:A7:4C:D7:AE:EE:C4:78:83:E1:89:5B:E5
            X509v3 Authority Key Identifier:
                keyid:1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:7e:75:42:1a:d3:c7:9f:a5:86:ee:b3:74:5a:b5:21:26:c2:
         fa:cb:d0:ae:f5:5f:32:3a:a2:de:50:61:4a:85:a9:19:c7:9a:
         9f:a9:53:e9:7d:66:99:12:00:fe:93:9c:95:f9:56:98:ec:66:
         70:5e:31:ee:82:6d:6c:37:ed:31:45:67:fb:67:42:80:a6:73:
         38:aa:b2:c3:0c:d1:6e:36:04:cb:5f:db:01:dd:c6:e8:5f:16:
         dc:68:2f:16:55:28:b0:3e:5c:df:07:dd:b9:80:c1:e8:85:fe:
         e7:6b:40:7a:50:f5:3d:5c:0c:0f:5c:1a:87:4f:53:ce:48:c3:
         3b:25:63:9b:dc:01:13:a3:f3:81:1c:3a:91:b3:ed:02:94:b5:
         63:33:e1:1f:7a:b4:86:70:78:c1:5c:e6:80:09:93:ca:bf:dd:
         28:2e:bc:3f:74:0c:6a:9c:d3:df:c9:cb:46:af:24:f6:5e:f4:
         9e:22:95:76:ce:6a:d3:42:5c:30:00:7a:0f:ca:26:1e:15:20:
         59:3e:f8:20:50:d8:68:6d:16:ef:0c:0f:c4:f7:ab:8c:2a:12:
         80:ff:7d:99:cd:c8:76:b5:2e:72:63:98:c3:85:56:b6:b5:90:
         07:b3:de:c1:c0:86:74:b5:18:94:58:ce:ac:ea:0d:29:ee:fb:
         98:72:70:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoLba1g1R8pe88gXKfnBCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNWRhOTEwOWY2MTRjN2M0MTU5YjMyMzFhMzg3NzcwMmE2
ZjIxY2UwHhcNMjUwOTA3MTAwMjM4WhcNMjUwOTA4MTAwMjM4WjAzMTEwLwYDVQQD
EygxZTEzNzMxMTJlNDIwZTYyYTc0Y2Q3YWVlZWM0Nzg4M2UxODk1YmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWJyZS9tpZGy0b+/eRZBno8xCNz1
9jd0mvcoWcWDwestzVE6YKfrxn8CMkIpFAGs3MrvID3gbOj6nDc1Evjjr2VBov9a
HSX06dgRKSXH5zri1WeCrEJZUp3AWbQgYGDVWJwKawQ49bSeRDW/Gt1LacC+qzHM
QS8+gkzOMhmz0w8iqcor/CUNItVramop9LGaBonoXHwlggeuTqwjh0U7I9GQc0ni
VlYv4a3L5jQY9Bf7ExTZetbQnvQGJZC33HFpSJ8R2XRFcCKihaEgXPZKROBVaPRi
C5m1LEH9iMfBSJxGZVHQ4xg4xvgx9f0jqWkf3SdggSM3IGJwKAAEZHO/KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4TcxEuQg5ip0zXru7EeIPhiVvlMB8GA1UdIwQY
MBaAFB1dqRCfYUx8QVmzIxo4d3AqbyHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFYycEVKOWhUSHhCV2JNakdqaDNjQ3B2SWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zM2FjMGUtZTE5ZS00Yzg5LWJkZjMt
NzA2YTZmYzE2NGIxLzEvSFYycEVKOWhUSHhCV2JNakdqaDNjQ3B2SWM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8zM2FjMGUtZTE5ZS00Yzg5LWJkZjMtNzA2YTZmYzE2NGIx
LzEvSFYycEVKOWhUSHhCV2JNakdqaDNjQ3B2SWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVX51QhrT
x5+lhu6zdFq1ISbC+svQrvVfMjqi3lBhSoWpGcean6lT6X1mmRIA/pOclflWmOxm
cF4x7oJtbDftMUVn+2dCgKZzOKqywwzRbjYEy1/bAd3G6F8W3GgvFlUosD5c3wfd
uYDB6IX+52tAelD1PVwMD1wah09TzkjDOyVjm9wBE6PzgRw6kbPtApS1YzPhH3q0
hnB4wVzmgAmTyr/dKC68P3QMapzT38nLRq8k9l70niKVds5q00JcMAB6D8omHhUg
WT74IFDYaG0W7wwPxPerjCoSgP99mc3IdrUucmOYw4VWtrWQB7PewcCGdLUYlFjO
rOoNKe77mHJwHw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:35:54 2025 by rpki-client