Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
File:                     HWtralBhpBFdUwQM_9xks7DXGng.mft (raw, json)
Hash identifier:          oFoVFFJ9ZNVZCo9ILZpwjGnYVA11g0CmF2j3DzcF9Pk=
Subject key identifier:   F6:FD:8F:CD:8D:C0:4E:72:2E:E9:00:A6:7C:2F:F0:C1:B5:CC:B6:97
Authority key identifier: 1D:6B:6B:6A:50:61:A4:11:5D:53:04:0C:FF:DC:64:B3:B0:D7:1A:78
Certificate issuer:       /CN=1d6b6b6a5061a4115d53040cffdc64b3b0d71a78
Certificate serial:       01992331457ED245E5F954893EBEA2B9D1B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
Manifest number:          1672
Signing time:             Sun 07 Sep 2025 08:00:55 +0000
Manifest this update:     Sun 07 Sep 2025 08:00:55 +0000
Manifest next update:     Mon 08 Sep 2025 08:00:55 +0000
Files and hashes:         1: 59rlgV96ANnvbttVckQTSpcL4gg.roa (hash: yMmqOnSAlEZI0n5Ljt8KnwxkwDwpOxx+NBJ3GGUG5bk=)
                          2: HWtralBhpBFdUwQM_9xks7DXGng.crl (hash: Se0cgVrOnlVTx+22S+gw7yl48b+s5vNJhLsJHLVAtmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:31:45:7e:d2:45:e5:f9:54:89:3e:be:a2:b9:d1:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6b6b6a5061a4115d53040cffdc64b3b0d71a78
        Validity
            Not Before: Sep  7 08:00:55 2025 GMT
            Not After : Sep  8 08:00:55 2025 GMT
        Subject: CN=f6fd8fcd8dc04e722ee900a67c2ff0c1b5ccb697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ef:74:a3:46:85:ec:ea:37:54:a8:45:aa:64:
                    25:54:8f:9a:6b:1f:02:4a:09:d0:31:c7:44:e9:ae:
                    07:e2:af:19:b6:1f:fd:c8:02:ec:c2:36:70:e3:55:
                    cf:f7:d7:06:4f:02:33:81:0c:46:21:a0:b2:2c:7d:
                    28:c6:9e:13:a7:a0:f9:85:83:1b:bf:92:ab:e4:08:
                    a8:7a:9d:88:6b:9b:df:44:31:66:09:bf:ea:cc:30:
                    0c:ee:f5:da:cf:29:9c:9b:98:38:a7:d0:06:c0:a1:
                    64:c6:cf:db:35:56:69:db:b8:03:be:77:a8:fb:e2:
                    5a:db:57:54:6d:b6:7a:64:41:25:38:a0:0c:66:f4:
                    c8:6c:b6:c2:a8:23:3d:07:d8:d0:01:75:64:2a:d8:
                    d8:dc:6c:59:7b:80:4e:d1:21:de:94:b0:0c:cf:6a:
                    b4:79:7e:3d:88:d7:24:26:c2:ff:ee:c1:30:86:95:
                    b0:cf:d6:80:3f:06:47:6f:7a:78:02:ce:4f:93:74:
                    46:15:99:8a:e5:09:aa:a6:4a:c6:bf:d6:6a:ce:cd:
                    b0:9a:eb:c6:32:ac:ac:d2:5e:94:3a:ec:a0:8f:29:
                    7e:bd:5b:ce:bf:a9:aa:2d:ab:be:bd:6a:79:aa:e0:
                    e1:43:f9:ab:b2:23:56:3e:9d:7f:ba:9c:a8:b7:9b:
                    ec:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FD:8F:CD:8D:C0:4E:72:2E:E9:00:A6:7C:2F:F0:C1:B5:CC:B6:97
            X509v3 Authority Key Identifier:
                keyid:1D:6B:6B:6A:50:61:A4:11:5D:53:04:0C:FF:DC:64:B3:B0:D7:1A:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:cf:9c:ff:0f:61:28:35:73:62:9c:c3:ec:db:c0:8c:92:db:
         ff:5f:26:40:72:03:86:9e:75:cf:3b:23:31:74:f9:34:d8:fa:
         b4:85:64:31:98:4e:c0:f5:7b:96:f5:8e:03:18:31:2e:fb:36:
         50:95:3c:6b:52:49:44:17:6d:41:ca:1a:d6:24:a4:d6:5c:a3:
         7d:58:43:27:04:b1:9f:9e:c5:8a:33:d5:20:c5:49:18:ed:de:
         37:34:43:f3:1d:24:81:62:1f:63:93:eb:80:4b:44:08:f0:36:
         14:64:b5:02:2c:cd:b9:44:c6:0b:ec:7e:f4:a6:bc:84:0b:14:
         c3:6e:ca:da:c9:7f:32:fc:7a:ec:40:f3:02:63:71:d1:e7:4b:
         8f:6b:81:8c:1b:3f:ce:dd:54:a7:df:4b:ef:04:9d:59:06:4a:
         68:cd:3d:8d:1f:c8:04:40:fc:e5:ac:fb:eb:a6:1c:60:47:ac:
         a4:61:b9:3f:f7:30:94:96:10:37:66:c5:d4:65:c5:0c:cc:79:
         90:9b:27:fd:15:b2:69:14:ba:48:e1:8f:10:3d:f6:06:d6:18:
         27:93:b7:a4:37:91:43:32:b4:fc:b5:88:14:9f:9b:ac:d8:9f:
         06:a4:56:37:0a:3e:87:08:79:77:13:48:f8:31:58:1e:15:dd:
         e3:9b:0b:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMUV+0kXl+VSJPr6iudG2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNmI2YjZhNTA2MWE0MTE1ZDUzMDQwY2ZmZGM2NGIzYjBk
NzFhNzgwHhcNMjUwOTA3MDgwMDU1WhcNMjUwOTA4MDgwMDU1WjAzMTEwLwYDVQQD
EyhmNmZkOGZjZDhkYzA0ZTcyMmVlOTAwYTY3YzJmZjBjMWI1Y2NiNjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4O90o0aF7Oo3VKhFqmQlVI+aax8C
SgnQMcdE6a4H4q8Zth/9yALswjZw41XP99cGTwIzgQxGIaCyLH0oxp4Tp6D5hYMb
v5Kr5Aioep2Ia5vfRDFmCb/qzDAM7vXazymcm5g4p9AGwKFkxs/bNVZp27gDvneo
++Ja21dUbbZ6ZEElOKAMZvTIbLbCqCM9B9jQAXVkKtjY3GxZe4BO0SHelLAMz2q0
eX49iNckJsL/7sEwhpWwz9aAPwZHb3p4As5Pk3RGFZmK5QmqpkrGv9Zqzs2wmuvG
Mqys0l6UOuygjyl+vVvOv6mqLau+vWp5quDhQ/mrsiNWPp1/upyot5vsMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPb9j82NwE5yLukApnwv8MG1zLaXMB8GA1UdIwQY
MBaAFB1ra2pQYaQRXVMEDP/cZLOw1xp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFd0cmFsQmhwQkZkVXdRTV85eGtzN0RYR25nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC85ZTVmNTQtYmEzZi00YjZlLTlkYTkt
YmZhZmQ2MjJlODlmLzEvSFd0cmFsQmhwQkZkVXdRTV85eGtzN0RYR25nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC85ZTVmNTQtYmEzZi00YjZlLTlkYTktYmZhZmQ2MjJlODlm
LzEvSFd0cmFsQmhwQkZkVXdRTV85eGtzN0RYR25nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATc+c/w9h
KDVzYpzD7NvAjJLb/18mQHIDhp51zzsjMXT5NNj6tIVkMZhOwPV7lvWOAxgxLvs2
UJU8a1JJRBdtQcoa1iSk1lyjfVhDJwSxn57FijPVIMVJGO3eNzRD8x0kgWIfY5Pr
gEtECPA2FGS1AizNuUTGC+x+9Ka8hAsUw27K2sl/Mvx67EDzAmNx0edLj2uBjBs/
zt1Up99L7wSdWQZKaM09jR/IBED85az766YcYEespGG5P/cwlJYQN2bF1GXFDMx5
kJsn/RWyaRS6SOGPED32BtYYJ5O3pDeRQzK0/LWIFJ+brNifBqRWNwo+hwh5dxNI
+DFYHhXd45sL/w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:22 2025 by rpki-client