Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft
File:                     hP-lQvPYybB7926uioaYWj17Tcc.mft (raw, json)
Hash identifier:          /e9dVS6WlbbLkUvvh2fHpYZGp5ahdLyC3aw4o2kAdbo=
Subject key identifier:   13:12:4C:73:78:51:10:AC:0B:09:41:DC:66:FB:68:2B:46:E5:90:66
Authority key identifier: 84:FF:A5:42:F3:D8:C9:B0:7B:F7:6E:AE:8A:86:98:5A:3D:7B:4D:C7
Certificate issuer:       /CN=84ffa542f3d8c9b07bf76eae8a86985a3d7b4dc7
Certificate serial:       0199239F9BC870F2FEBDE7CBBD108FCCEDCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft
Manifest number:          103B
Signing time:             Sun 07 Sep 2025 10:01:26 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:26 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:26 +0000
Files and hashes:         1: hP-lQvPYybB7926uioaYWj17Tcc.crl (hash: cIgbZA4wViXODLtxCQfG16s7gfDNvU705XpbmcGk9qE=)
                          2: uVc-YEHIfoCC97dYSAB-pvf1GkY.roa (hash: xpxJQ9Mtn3be8wfSELsmv9qWpA192efhc4xx/FDBoxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:9b:c8:70:f2:fe:bd:e7:cb:bd:10:8f:cc:ed:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ffa542f3d8c9b07bf76eae8a86985a3d7b4dc7
        Validity
            Not Before: Sep  7 10:01:26 2025 GMT
            Not After : Sep  8 10:01:26 2025 GMT
        Subject: CN=13124c73785110ac0b0941dc66fb682b46e59066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:02:71:ba:d4:3a:ff:e8:64:3f:79:94:86:59:
                    35:a9:bd:8e:44:8c:01:72:f7:b8:b5:3e:19:5e:a3:
                    06:8f:8f:b4:68:b7:aa:93:69:46:aa:79:be:6f:e6:
                    80:aa:d5:d9:6f:52:94:b2:8d:82:c2:a4:22:3e:c5:
                    bc:37:ab:d4:81:2e:42:a1:f1:72:c8:af:9d:20:fd:
                    38:cd:90:64:e0:34:bf:76:75:d6:f2:48:aa:44:34:
                    73:5b:e7:d9:1a:6d:d9:8f:d2:00:1e:4b:52:d0:b2:
                    38:8d:80:a4:8f:bc:7b:7a:83:20:63:6b:90:4c:ea:
                    8c:51:5c:27:14:09:29:57:84:8d:2f:92:d8:80:8c:
                    50:af:8b:fa:d0:86:95:55:12:2b:cf:87:c1:cf:a5:
                    22:c3:f7:e0:b0:7e:c5:4f:83:1d:0e:dc:d7:38:cd:
                    9b:af:16:07:ea:d0:11:b0:e5:c0:1b:27:61:9a:ae:
                    5e:15:6a:3c:15:32:dd:3f:bd:e7:2d:79:e6:fd:d6:
                    bf:b5:3e:1e:2c:56:d4:74:69:ff:b1:f1:2f:85:65:
                    98:6c:c3:01:26:87:e5:a3:6c:0d:d7:30:f6:39:92:
                    5a:ec:8b:48:9b:fe:ef:b5:2b:a7:72:2a:35:1a:5d:
                    be:d3:12:2c:e2:47:2e:ff:ea:7b:a0:a4:6d:8d:fe:
                    21:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:12:4C:73:78:51:10:AC:0B:09:41:DC:66:FB:68:2B:46:E5:90:66
            X509v3 Authority Key Identifier:
                keyid:84:FF:A5:42:F3:D8:C9:B0:7B:F7:6E:AE:8A:86:98:5A:3D:7B:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:83:a4:27:e0:bc:92:bd:9e:f6:e3:8b:2f:cf:06:c2:83:b5:
         2b:d1:f2:77:52:1d:87:90:38:3e:b1:0e:bb:27:cc:ef:7c:9b:
         da:6c:45:72:34:0c:1f:ed:c2:a7:4e:1a:cc:ed:4d:cc:a9:ef:
         cf:78:7c:3c:bd:54:b9:d8:83:f9:3d:61:25:31:f9:e0:d1:c1:
         8a:d5:b7:93:57:07:7f:05:19:8f:88:4c:ab:e6:3b:02:96:7c:
         d4:e3:c3:03:02:81:9a:e2:60:db:cb:8b:3c:a7:de:c0:99:1d:
         b7:c5:27:57:9b:c6:35:b9:9d:ae:b7:69:dc:a9:8b:64:ae:dc:
         ac:c6:66:42:ec:9d:d4:1c:66:81:9e:d0:01:a3:89:11:61:3e:
         02:20:54:05:e9:08:2f:8c:1d:e7:e6:75:39:94:e7:73:10:a0:
         f6:a5:f5:3f:18:10:a3:0e:10:d8:b0:66:e7:87:d6:59:bb:85:
         5f:a9:d4:91:7e:77:33:77:c4:e0:45:73:97:1b:90:5d:3e:51:
         63:0c:32:08:ee:f5:33:67:47:8f:35:6b:da:62:2c:b6:6e:c9:
         5f:a4:45:f3:41:77:f4:11:59:cd:c2:e6:d0:f6:71:ac:86:2f:
         9e:8c:25:ea:f3:f4:70:37:15:d1:5f:ea:f9:aa:45:2f:96:4c:
         a1:42:cc:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn5vIcPL+vefLvRCPzO3NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZmZhNTQyZjNkOGM5YjA3YmY3NmVhZThhODY5ODVhM2Q3
YjRkYzcwHhcNMjUwOTA3MTAwMTI2WhcNMjUwOTA4MTAwMTI2WjAzMTEwLwYDVQQD
EygxMzEyNGM3Mzc4NTExMGFjMGIwOTQxZGM2NmZiNjgyYjQ2ZTU5MDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQJxutQ6/+hkP3mUhlk1qb2ORIwB
cve4tT4ZXqMGj4+0aLeqk2lGqnm+b+aAqtXZb1KUso2CwqQiPsW8N6vUgS5CofFy
yK+dIP04zZBk4DS/dnXW8kiqRDRzW+fZGm3Zj9IAHktS0LI4jYCkj7x7eoMgY2uQ
TOqMUVwnFAkpV4SNL5LYgIxQr4v60IaVVRIrz4fBz6Uiw/fgsH7FT4MdDtzXOM2b
rxYH6tARsOXAGydhmq5eFWo8FTLdP73nLXnm/da/tT4eLFbUdGn/sfEvhWWYbMMB
Joflo2wN1zD2OZJa7ItIm/7vtSuncio1Gl2+0xIs4kcu/+p7oKRtjf4hAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMSTHN4URCsCwlB3Gb7aCtG5ZBmMB8GA1UdIwQY
MBaAFIT/pULz2Mmwe/duroqGmFo9e03HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFAtbFF2UFl5YkI3OTI2dWlvYVlXajE3VGNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC83MWZmZjktMzQzZC00ZjA3LWE0OTEt
N2MwZmQyOWNmM2U5LzEvaFAtbFF2UFl5YkI3OTI2dWlvYVlXajE3VGNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC83MWZmZjktMzQzZC00ZjA3LWE0OTEtN2MwZmQyOWNmM2U5
LzEvaFAtbFF2UFl5YkI3OTI2dWlvYVlXajE3VGNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4OkJ+C8
kr2e9uOLL88GwoO1K9Hyd1Idh5A4PrEOuyfM73yb2mxFcjQMH+3Cp04azO1NzKnv
z3h8PL1UudiD+T1hJTH54NHBitW3k1cHfwUZj4hMq+Y7ApZ81OPDAwKBmuJg28uL
PKfewJkdt8UnV5vGNbmdrrdp3KmLZK7crMZmQuyd1BxmgZ7QAaOJEWE+AiBUBekI
L4wd5+Z1OZTncxCg9qX1PxgQow4Q2LBm54fWWbuFX6nUkX53M3fE4EVzlxuQXT5R
YwwyCO71M2dHjzVr2mIstm7JX6RF80F39BFZzcLm0PZxrIYvnowl6vP0cDcV0V/q
+apFL5ZMoULMBg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:09 2025 by rpki-client