Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
File:                     hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft (raw, json)
Hash identifier:          YTq7LPiD4nNsr8e2gEAR49FDuEhqh1hDwX1lLChWLaU=
Subject key identifier:   34:E2:32:B0:D4:D6:C5:A2:71:7B:08:62:EC:07:DF:E2:76:12:B4:71
Authority key identifier: 86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C
Certificate issuer:       /CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
Certificate serial:       0197499EEA8749F7236C34BA3999E9895212
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
Manifest number:          0794
Signing time:             Sat 07 Jun 2025 09:00:40 +0000
Manifest this update:     Sat 07 Jun 2025 09:00:40 +0000
Manifest next update:     Sun 08 Jun 2025 09:00:40 +0000
Files and hashes:         1: hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl (hash: wPEEtXdbOmxeeM+k5ObSHEBNQO9UmhfMHr0nDjZe3xk=)
                          2: oiBFy3pkObmB-SUVyi8mjUeggCE.roa (hash: DrQMitQl5NyHBIDeRzh85R9x2+NpayUje01H5X2GJbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9e:ea:87:49:f7:23:6c:34:ba:39:99:e9:89:52:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
        Validity
            Not Before: Jun  7 09:00:40 2025 GMT
            Not After : Jun  8 09:00:40 2025 GMT
        Subject: CN=34e232b0d4d6c5a2717b0862ec07dfe27612b471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b3:6c:9f:34:ff:1e:74:0a:00:94:63:26:84:
                    c3:8f:f3:80:60:be:50:cf:3c:52:86:b4:45:fc:34:
                    1c:58:e3:83:cf:0f:e0:af:d6:df:e1:17:a7:7b:11:
                    eb:35:eb:05:35:86:07:f8:66:24:40:d2:ad:b2:b8:
                    a4:7d:9a:c7:9a:c8:95:4f:9b:57:22:50:56:83:bc:
                    44:ca:25:5e:44:e3:12:2b:1b:72:c0:aa:58:89:6a:
                    87:d4:ed:7f:88:e3:fd:9e:d6:f9:97:ae:99:07:aa:
                    f4:f5:83:33:c9:2e:7c:ac:0c:6d:c9:de:4d:a9:e0:
                    80:1c:dd:33:0f:2c:9f:74:a7:f6:d3:00:56:a4:0c:
                    f4:d2:bc:2f:0f:73:b5:e2:b9:aa:3b:57:69:7f:f9:
                    95:f1:eb:12:aa:83:29:ff:ce:80:4b:89:d6:3c:b4:
                    37:0d:d8:7c:95:c5:98:3a:a6:bd:ed:97:49:a1:ac:
                    c2:fd:fb:30:9a:4a:8d:93:6b:0c:f8:ef:37:5d:a4:
                    28:d1:db:c1:85:be:1b:95:a4:eb:41:bb:63:d5:38:
                    e9:ce:d9:59:2b:f5:da:c1:7e:0e:11:8d:4c:7d:b0:
                    d8:41:72:27:37:75:cf:1c:78:15:b3:07:20:e7:eb:
                    4b:ac:b4:d9:2c:36:cc:55:1e:ef:1a:99:e1:53:30:
                    86:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E2:32:B0:D4:D6:C5:A2:71:7B:08:62:EC:07:DF:E2:76:12:B4:71
            X509v3 Authority Key Identifier:
                keyid:86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:31:68:ff:c3:dd:18:62:0a:5d:25:e2:aa:90:3b:fe:77:a2:
         74:19:fa:e5:60:c8:72:3a:8c:66:50:e2:5a:56:d0:8d:7b:bd:
         73:a6:04:83:76:af:83:8f:bc:d3:1c:1b:17:d1:71:e0:10:52:
         7d:35:33:95:f2:41:10:a7:0f:8d:44:1e:c0:bd:f7:36:80:be:
         b8:e4:e6:ad:33:80:4a:64:64:08:e5:01:b4:1e:85:cc:0f:b3:
         12:4f:20:63:39:ef:53:51:a2:8c:bb:05:e7:87:2b:67:a4:d7:
         3d:53:5a:b7:af:bb:5f:d6:2e:45:5b:b3:e2:5d:72:a5:17:2e:
         ff:49:09:7e:73:52:1b:6f:7c:b1:e8:58:70:84:9f:d3:48:48:
         d2:21:8f:dc:70:87:05:55:9e:37:1c:c9:f3:c5:af:f0:0d:24:
         c3:22:78:09:00:c7:c2:52:09:f0:05:1c:8b:c2:bc:3a:68:17:
         b7:41:4c:35:f5:ef:b2:80:85:02:70:78:75:48:9e:a9:3e:fe:
         6e:8a:19:b9:26:28:34:22:67:39:16:b9:6d:e3:17:de:14:48:
         ee:d7:e1:63:ac:dc:e5:a2:dc:60:9d:59:5f:27:2c:15:a5:3f:
         9d:77:dc:01:a6:47:7b:ee:0d:ff:c2:8a:ec:49:d8:05:2c:e3:
         f6:f3:84:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJnuqHSfcjbDS6OZnpiVISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZWUxMjY4ZmUwYWFkZjMxN2FiNDRmZDgxNmQxMGZlNTRk
ZGZjMGMwHhcNMjUwNjA3MDkwMDQwWhcNMjUwNjA4MDkwMDQwWjAzMTEwLwYDVQQD
EygzNGUyMzJiMGQ0ZDZjNWEyNzE3YjA4NjJlYzA3ZGZlMjc2MTJiNDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrNsnzT/HnQKAJRjJoTDj/OAYL5Q
zzxShrRF/DQcWOODzw/gr9bf4RenexHrNesFNYYH+GYkQNKtsrikfZrHmsiVT5tX
IlBWg7xEyiVeROMSKxtywKpYiWqH1O1/iOP9ntb5l66ZB6r09YMzyS58rAxtyd5N
qeCAHN0zDyyfdKf20wBWpAz00rwvD3O14rmqO1dpf/mV8esSqoMp/86AS4nWPLQ3
Ddh8lcWYOqa97ZdJoazC/fswmkqNk2sM+O83XaQo0dvBhb4blaTrQbtj1TjpztlZ
K/XawX4OEY1MfbDYQXInN3XPHHgVswcg5+tLrLTZLDbMVR7vGpnhUzCGRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTiMrDU1sWicXsIYuwH3+J2ErRxMB8GA1UdIwQY
MBaAFIbuEmj+Cq3zF6tE/YFtEP5U3fwMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHU0U2FQNEtyZk1YcTBUOWdXMFFfbFRkX0F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mMzQyNTQtMGU5ZC00ZGM1LWE0MTgt
MWI3MTFhZWMxZmJjLzEvaHU0U2FQNEtyZk1YcTBUOWdXMFFfbFRkX0F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9mMzQyNTQtMGU5ZC00ZGM1LWE0MTgtMWI3MTFhZWMxZmJj
LzEvaHU0U2FQNEtyZk1YcTBUOWdXMFFfbFRkX0F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDFo/8Pd
GGIKXSXiqpA7/neidBn65WDIcjqMZlDiWlbQjXu9c6YEg3avg4+80xwbF9Fx4BBS
fTUzlfJBEKcPjUQewL33NoC+uOTmrTOASmRkCOUBtB6FzA+zEk8gYznvU1GijLsF
54crZ6TXPVNat6+7X9YuRVuz4l1ypRcu/0kJfnNSG298sehYcISf00hI0iGP3HCH
BVWeNxzJ88Wv8A0kwyJ4CQDHwlIJ8AUci8K8OmgXt0FMNfXvsoCFAnB4dUieqT7+
booZuSYoNCJnORa5beMX3hRI7tfhY6zc5aLcYJ1ZXycsFaU/nXfcAaZHe+4N/8KK
7EnYBSzj9vOEbQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:12 2025 by rpki-client