Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
File:                     hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft (raw, json)
Hash identifier:          rFGoZeQew/aOmvh3+H9CL8a99/YVkzTiplnhwAg2v04=
Subject key identifier:   0B:98:3B:37:06:08:33:E5:7A:08:E9:BC:2D:51:9E:40:1E:6E:D1:E0
Authority key identifier: 86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C
Certificate issuer:       /CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
Certificate serial:       0196526D87738F54090A9A9CCD4761CC6861
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
Manifest number:          0714
Signing time:             Sun 20 Apr 2025 09:00:31 +0000
Manifest this update:     Sun 20 Apr 2025 09:00:31 +0000
Manifest next update:     Mon 21 Apr 2025 09:00:31 +0000
Files and hashes:         1: hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl (hash: /N7iXzGzbRIykeUftUbdDpcHGlhEDdM1D4vGi0uJh4I=)
                          2: oiBFy3pkObmB-SUVyi8mjUeggCE.roa (hash: DrQMitQl5NyHBIDeRzh85R9x2+NpayUje01H5X2GJbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:6d:87:73:8f:54:09:0a:9a:9c:cd:47:61:cc:68:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
        Validity
            Not Before: Apr 20 09:00:31 2025 GMT
            Not After : Apr 21 09:00:31 2025 GMT
        Subject: CN=0b983b37060833e57a08e9bc2d519e401e6ed1e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:52:6c:b1:b3:04:28:ec:2d:4b:c2:fb:e1:cb:
                    bb:79:22:90:2f:3c:6e:a2:d7:de:a5:a9:ab:18:93:
                    2b:f7:34:bf:44:03:68:6a:fe:f4:4d:1f:e1:20:eb:
                    fa:47:84:f0:ad:71:43:9c:6e:6d:e2:b6:dc:e1:e9:
                    47:3d:fc:31:6d:76:2a:e6:de:76:07:61:55:47:27:
                    45:e9:7e:bd:6f:a2:eb:8e:9b:5e:bb:75:c3:6a:76:
                    83:b0:ca:9d:63:76:fd:b2:90:be:02:d4:14:80:60:
                    78:5e:31:f0:fd:24:f0:27:ce:d6:6d:86:de:95:36:
                    d8:25:3c:b0:4a:15:4f:24:e7:1d:6e:7e:8f:3e:9b:
                    d0:3c:1c:00:e3:56:2e:fe:ff:28:d4:27:72:3d:d8:
                    e8:ae:65:3a:be:4f:ed:a4:8c:8f:af:89:fb:96:9a:
                    4e:85:79:be:70:04:fb:b9:35:ae:f1:67:7c:98:65:
                    ff:c5:51:8c:f0:d1:39:05:57:1c:3b:31:4b:79:79:
                    2b:e1:42:e8:f9:04:ec:3d:0e:45:45:7f:ff:0d:5b:
                    9d:52:8f:d7:22:a4:32:c9:41:89:cb:34:27:1d:18:
                    2c:aa:91:8b:85:05:40:8f:a4:0f:fc:e2:e8:3d:d3:
                    64:b5:8b:f7:86:12:8f:ec:fd:ab:5c:b2:8b:3e:c7:
                    4e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:98:3B:37:06:08:33:E5:7A:08:E9:BC:2D:51:9E:40:1E:6E:D1:E0
            X509v3 Authority Key Identifier:
                keyid:86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:b5:8a:4d:17:05:70:44:5e:f1:44:0b:4c:68:f6:18:6f:b5:
         f3:c0:66:06:52:0c:e4:61:aa:1c:d3:64:29:24:30:1d:5e:8c:
         72:ff:35:18:b7:f7:5c:85:6c:93:86:80:85:2d:c0:d4:99:28:
         f1:f4:2b:ac:ca:61:85:5b:8e:4e:f6:a7:48:53:1b:ab:0a:0f:
         ce:64:a6:21:d4:b4:bb:1f:c0:fd:f1:d1:9c:4d:82:bb:fc:b4:
         82:9d:22:f3:f7:0c:a1:96:59:48:3c:71:98:32:b9:ee:89:41:
         26:19:d5:d3:08:bc:34:40:a8:0b:82:ee:32:c5:97:e5:cb:b1:
         0f:c4:31:48:b4:d3:79:a0:2d:b0:4a:29:01:0c:98:e9:73:b7:
         76:6e:2c:b3:f7:b0:14:2f:0b:98:b9:9f:69:2b:d8:2e:2f:41:
         19:71:e0:33:3a:66:3c:7f:38:c9:0c:7f:ee:aa:06:be:cb:ee:
         18:67:9d:75:ea:df:85:dd:b0:5f:05:a9:2e:76:e3:a2:9e:78:
         06:1b:73:b1:53:dc:27:1d:d4:31:a5:59:46:83:6b:5b:08:49:
         b3:e9:61:3b:56:d0:52:c2:b2:89:06:c2:b1:00:df:a3:ac:05:
         d0:87:21:6d:51:ac:02:29:d9:f8:85:fb:b1:bd:60:e2:b2:ad:
         7b:84:43:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSbYdzj1QJCpqczUdhzGhhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZWUxMjY4ZmUwYWFkZjMxN2FiNDRmZDgxNmQxMGZlNTRk
ZGZjMGMwHhcNMjUwNDIwMDkwMDMxWhcNMjUwNDIxMDkwMDMxWjAzMTEwLwYDVQQD
EygwYjk4M2IzNzA2MDgzM2U1N2EwOGU5YmMyZDUxOWU0MDFlNmVkMWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FJssbMEKOwtS8L74cu7eSKQLzxu
otfepamrGJMr9zS/RANoav70TR/hIOv6R4TwrXFDnG5t4rbc4elHPfwxbXYq5t52
B2FVRydF6X69b6Lrjpteu3XDanaDsMqdY3b9spC+AtQUgGB4XjHw/STwJ87WbYbe
lTbYJTywShVPJOcdbn6PPpvQPBwA41Yu/v8o1CdyPdjormU6vk/tpIyPr4n7lppO
hXm+cAT7uTWu8Wd8mGX/xVGM8NE5BVccOzFLeXkr4ULo+QTsPQ5FRX//DVudUo/X
IqQyyUGJyzQnHRgsqpGLhQVAj6QP/OLoPdNktYv3hhKP7P2rXLKLPsdOtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuYOzcGCDPlegjpvC1RnkAebtHgMB8GA1UdIwQY
MBaAFIbuEmj+Cq3zF6tE/YFtEP5U3fwMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHU0U2FQNEtyZk1YcTBUOWdXMFFfbFRkX0F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mMzQyNTQtMGU5ZC00ZGM1LWE0MTgt
MWI3MTFhZWMxZmJjLzEvaHU0U2FQNEtyZk1YcTBUOWdXMFFfbFRkX0F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9mMzQyNTQtMGU5ZC00ZGM1LWE0MTgtMWI3MTFhZWMxZmJj
LzEvaHU0U2FQNEtyZk1YcTBUOWdXMFFfbFRkX0F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw7WKTRcF
cERe8UQLTGj2GG+188BmBlIM5GGqHNNkKSQwHV6Mcv81GLf3XIVsk4aAhS3A1Jko
8fQrrMphhVuOTvanSFMbqwoPzmSmIdS0ux/A/fHRnE2Cu/y0gp0i8/cMoZZZSDxx
mDK57olBJhnV0wi8NECoC4LuMsWX5cuxD8QxSLTTeaAtsEopAQyY6XO3dm4ss/ew
FC8LmLmfaSvYLi9BGXHgMzpmPH84yQx/7qoGvsvuGGedderfhd2wXwWpLnbjop54
BhtzsVPcJx3UMaVZRoNrWwhJs+lhO1bQUsKyiQbCsQDfo6wF0IchbVGsAinZ+IX7
sb1g4rKte4RDTA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:03:33 2025 by rpki-client