Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
File:                     hmuOBdk45F1lrjFNxnUjfeyDEaE.mft (raw, json)
Hash identifier:          jPgwAbEoyzT4wred2ifz81yr8C1DtGrL1/7KsgSHyqY=
Subject key identifier:   CF:4B:15:BA:5D:4C:67:ED:AC:08:66:B7:61:3D:83:1D:B6:76:B1:A7
Authority key identifier: 86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
Certificate issuer:       /CN=866b8e05d938e45d65ae314dc675237dec8311a1
Certificate serial:       019747E76A5618088F2B733EB01CA4C41848
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
Manifest number:          1196
Signing time:             Sat 07 Jun 2025 01:00:37 +0000
Manifest this update:     Sat 07 Jun 2025 01:00:37 +0000
Manifest next update:     Sun 08 Jun 2025 01:00:37 +0000
Files and hashes:         1: hmuOBdk45F1lrjFNxnUjfeyDEaE.crl (hash: lMFF157o4DaH5fXL270eTeaZ5CAAU0vbPfYkaytcd3E=)
                          2: sw4N2lxJHY4O1_YExcGjN1F8VGo.roa (hash: KXUZgZkZitwfC1Jk6g2FCiMl9s8x5hfwqmR4gq981VM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:6a:56:18:08:8f:2b:73:3e:b0:1c:a4:c4:18:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866b8e05d938e45d65ae314dc675237dec8311a1
        Validity
            Not Before: Jun  7 01:00:37 2025 GMT
            Not After : Jun  8 01:00:37 2025 GMT
        Subject: CN=cf4b15ba5d4c67edac0866b7613d831db676b1a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:92:da:e5:7b:61:10:c0:cf:3b:95:ff:5c:e3:
                    d3:49:ef:57:a2:2f:a7:79:f9:83:49:be:83:7d:8a:
                    24:7f:ac:63:ae:63:8a:11:41:f7:6d:75:53:73:78:
                    8e:a2:ae:82:75:a3:7d:68:40:83:1d:99:98:a0:46:
                    2c:3e:d9:0a:82:88:77:88:6f:34:f0:76:d2:f2:55:
                    c2:6e:9e:a2:a3:7c:9e:1c:c7:f6:39:fa:7c:e9:ff:
                    ab:6a:23:d1:21:70:99:9e:02:39:b3:79:57:00:99:
                    2d:a4:35:24:a9:a1:c3:6b:58:46:77:42:51:62:a4:
                    1b:e2:7d:2a:1c:e5:d3:98:e4:f6:d0:65:f1:bc:83:
                    6c:19:33:6a:a2:d8:34:5e:f4:e7:f8:68:a6:2e:0f:
                    ce:e7:8c:5f:48:b3:38:96:8a:55:73:35:bc:c1:4b:
                    e2:32:d6:cf:6e:21:29:89:9e:ab:f7:bc:c1:d3:21:
                    a4:23:11:25:63:cf:88:0e:bf:76:29:04:e2:aa:6b:
                    ea:87:2b:2a:20:86:50:fb:2b:73:6d:33:0d:d3:20:
                    c6:99:43:4c:15:bd:95:95:fa:70:0c:7d:c7:51:72:
                    05:eb:64:1f:47:0d:35:35:bd:83:d4:5d:5a:6c:7d:
                    48:b2:53:ee:00:06:97:8b:e3:ef:6c:55:4a:33:a6:
                    a4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4B:15:BA:5D:4C:67:ED:AC:08:66:B7:61:3D:83:1D:B6:76:B1:A7
            X509v3 Authority Key Identifier:
                keyid:86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:43:c3:76:84:e9:6b:b9:44:de:9a:c5:93:f7:3b:e1:17:34:
         67:bc:11:1c:27:7f:cb:6c:8b:2c:6e:cc:63:ed:99:d9:af:d8:
         24:65:72:37:51:e3:15:aa:8e:32:1f:95:0d:5f:35:72:1e:52:
         d4:19:cd:30:e0:08:91:b9:f7:b3:dc:d7:e3:2d:83:ec:22:ff:
         43:3c:87:6f:8b:59:3c:e8:94:a3:c7:2d:10:eb:3e:00:28:a4:
         23:23:a8:91:a3:0b:dc:c6:dc:da:c4:c5:fc:01:37:3e:04:14:
         bb:8b:05:3d:14:a4:83:38:5f:4f:db:73:c0:cf:03:ca:ce:74:
         10:83:21:3c:e6:30:b4:fa:a3:45:b6:8c:77:6a:07:ae:f4:98:
         a2:ed:91:8a:6b:2d:e7:8b:37:be:3d:f6:06:c4:82:e4:52:61:
         ab:3e:47:35:89:c6:39:87:85:79:23:94:ed:61:10:68:73:ae:
         29:29:2b:98:e7:31:f9:dc:64:a1:02:79:c4:e4:89:f0:6e:fa:
         3b:7a:f8:fc:11:94:24:43:0b:67:24:93:e0:de:ac:06:3d:d4:
         89:d4:2e:78:f1:79:c1:d8:ae:2f:91:eb:1f:18:9b:15:c5:a8:
         6c:03:d1:d6:9e:99:0a:38:2b:6a:34:a6:2a:38:f1:e6:94:81:
         69:90:2c:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdH52pWGAiPK3M+sBykxBhIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NmI4ZTA1ZDkzOGU0NWQ2NWFlMzE0ZGM2NzUyMzdkZWM4
MzExYTEwHhcNMjUwNjA3MDEwMDM3WhcNMjUwNjA4MDEwMDM3WjAzMTEwLwYDVQQD
EyhjZjRiMTViYTVkNGM2N2VkYWMwODY2Yjc2MTNkODMxZGI2NzZiMWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJLa5XthEMDPO5X/XOPTSe9Xoi+n
efmDSb6DfYokf6xjrmOKEUH3bXVTc3iOoq6CdaN9aECDHZmYoEYsPtkKgoh3iG80
8HbS8lXCbp6io3yeHMf2Ofp86f+raiPRIXCZngI5s3lXAJktpDUkqaHDa1hGd0JR
YqQb4n0qHOXTmOT20GXxvINsGTNqotg0XvTn+GimLg/O54xfSLM4lopVczW8wUvi
MtbPbiEpiZ6r97zB0yGkIxElY8+IDr92KQTiqmvqhysqIIZQ+ytzbTMN0yDGmUNM
Fb2VlfpwDH3HUXIF62QfRw01Nb2D1F1abH1IslPuAAaXi+PvbFVKM6akbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9LFbpdTGftrAhmt2E9gx22drGnMB8GA1UdIwQY
MBaAFIZrjgXZOORdZa4xTcZ1I33sgxGhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG11T0JkazQ1RjFscmpGTnhuVWpmZXlERWFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kNWJjZTItYTkyZi00NDJhLWEyMzUt
YWE4OGE0YmE1OGVmLzEvaG11T0JkazQ1RjFscmpGTnhuVWpmZXlERWFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kNWJjZTItYTkyZi00NDJhLWEyMzUtYWE4OGE0YmE1OGVm
LzEvaG11T0JkazQ1RjFscmpGTnhuVWpmZXlERWFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOkPDdoTp
a7lE3prFk/c74Rc0Z7wRHCd/y2yLLG7MY+2Z2a/YJGVyN1HjFaqOMh+VDV81ch5S
1BnNMOAIkbn3s9zX4y2D7CL/QzyHb4tZPOiUo8ctEOs+ACikIyOokaML3Mbc2sTF
/AE3PgQUu4sFPRSkgzhfT9tzwM8Dys50EIMhPOYwtPqjRbaMd2oHrvSYou2Rimst
54s3vj32BsSC5FJhqz5HNYnGOYeFeSOU7WEQaHOuKSkrmOcx+dxkoQJ5xOSJ8G76
O3r4/BGUJEMLZyST4N6sBj3UidQuePF5wdiuL5HrHxibFcWobAPR1p6ZCjgrajSm
Kjjx5pSBaZAsjQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:32 2025 by rpki-client