Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
File:                     8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft (raw, json)
Hash identifier:          X8lS3/l6NwOw13FXO6JUBLbdZl1LB5BqtuxK4YdgwHU=
Subject key identifier:   92:2D:5F:B7:F0:28:B7:2B:5C:49:E5:C0:F0:6E:05:0E:27:4C:4F:00
Authority key identifier: F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC
Certificate issuer:       /CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc
Certificate serial:       0197B6A10A0D7AB9547F0FFA2BBB29AD9F97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
Manifest number:          150E
Signing time:             Sat 28 Jun 2025 13:01:36 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:36 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:36 +0000
Files and hashes:         1: 8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl (hash: yMVIdEjP7VNb5SZ6ZWniBrRr14PJ0ZlqCuD5hEKhCNw=)
                          2: C3nJIzqXqtfT9J07ejsBxjCr7Es.roa (hash: 0iPZreySqxS1TmgmvlfhSgIdLiwkUUv4lfeOkL5knpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:0a:0d:7a:b9:54:7f:0f:fa:2b:bb:29:ad:9f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc
        Validity
            Not Before: Jun 28 13:01:36 2025 GMT
            Not After : Jun 29 13:01:36 2025 GMT
        Subject: CN=922d5fb7f028b72b5c49e5c0f06e050e274c4f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b2:fc:1a:2e:80:58:05:ce:6d:15:5b:16:84:
                    09:18:f6:91:2b:5c:44:4e:4c:7d:f4:cf:fc:87:76:
                    8c:a9:4d:0a:d3:2c:e5:5a:b5:8e:8b:bd:2c:4d:57:
                    62:0f:64:e7:fc:4a:3b:c2:55:fd:23:c9:5b:e7:6a:
                    a1:a2:c0:bc:81:2f:ee:fe:2f:70:0a:7e:ed:25:08:
                    88:af:53:5e:45:35:df:a0:ad:69:ba:0d:2f:68:09:
                    08:7f:43:7f:92:9e:66:0b:7b:b1:60:ed:b1:4a:f3:
                    d8:13:69:cd:e1:36:11:3b:8e:a1:8d:00:e2:08:cb:
                    fb:75:bf:59:3e:76:fb:5b:33:41:ed:e3:fb:eb:f4:
                    7b:b3:1b:c1:3f:7e:98:bd:59:33:f9:c1:72:c5:44:
                    04:00:bb:db:cb:ff:c0:8c:cb:41:25:c0:ee:86:55:
                    e0:26:1d:c6:f7:94:52:2a:c8:c6:b6:7b:9a:13:56:
                    1d:d7:dd:0e:8f:dd:b9:4e:c2:e8:99:a6:08:32:03:
                    50:64:57:fa:ed:89:1d:bc:7d:1b:56:e4:ee:18:bd:
                    0e:1c:e3:da:b2:fb:a7:3e:d9:6c:52:f6:ed:13:13:
                    7b:c0:8a:28:f5:1c:5b:f0:52:a9:0a:c0:db:b8:e3:
                    e6:ff:e5:21:6b:7e:86:de:2c:14:ba:85:cf:6c:cb:
                    e4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2D:5F:B7:F0:28:B7:2B:5C:49:E5:C0:F0:6E:05:0E:27:4C:4F:00
            X509v3 Authority Key Identifier:
                keyid:F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:95:a4:3a:62:c7:9b:d0:5b:52:55:96:80:dd:be:e8:5a:1f:
         c3:23:f5:8b:2d:db:5f:94:a0:0c:a8:94:45:f3:99:1b:00:98:
         a0:73:7d:eb:21:36:a4:a0:28:85:9c:6b:5b:9b:e5:85:6f:c4:
         59:c4:03:d3:35:1c:ad:24:ce:ae:9d:7f:48:be:a9:b8:2a:85:
         09:47:71:32:d2:48:11:38:43:c5:37:99:91:e0:4f:c0:8d:c5:
         8f:b5:bc:37:b9:7e:fa:dc:28:9a:3b:f0:eb:3c:8e:e8:0f:b6:
         5d:4f:ad:03:2a:49:81:7d:18:ad:de:39:e5:78:83:e5:2f:ff:
         7f:4c:44:ac:c0:bf:51:31:d8:d5:8b:81:a1:44:1d:8d:12:0f:
         97:19:5d:22:03:e5:27:dc:da:4a:9f:4b:1c:b0:f7:91:6b:b8:
         89:f6:91:dc:0f:f8:2d:9b:5b:7d:5a:4a:ce:31:fe:96:25:ab:
         ec:c8:48:37:d0:b5:50:87:99:2f:47:4c:86:00:29:5c:1c:7d:
         e0:88:04:2e:05:e7:33:8a:5c:79:7a:ff:5c:bb:18:45:1a:10:
         13:60:87:50:55:0c:c4:27:ae:f5:a5:e3:5e:64:9a:a2:92:b2:
         21:51:93:bc:12:4c:af:c1:3f:03:dd:61:11:d6:08:b1:bf:94:
         ea:98:60:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oQoNerlUfw/6K7sprZ+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZWY2YTZjZmNlMzQzZjkxNGM5YWQ5NGMzNDEwZGEwMGE3
Y2QxY2MwHhcNMjUwNjI4MTMwMTM2WhcNMjUwNjI5MTMwMTM2WjAzMTEwLwYDVQQD
Eyg5MjJkNWZiN2YwMjhiNzJiNWM0OWU1YzBmMDZlMDUwZTI3NGM0ZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7L8Gi6AWAXObRVbFoQJGPaRK1xE
Tkx99M/8h3aMqU0K0yzlWrWOi70sTVdiD2Tn/Eo7wlX9I8lb52qhosC8gS/u/i9w
Cn7tJQiIr1NeRTXfoK1pug0vaAkIf0N/kp5mC3uxYO2xSvPYE2nN4TYRO46hjQDi
CMv7db9ZPnb7WzNB7eP76/R7sxvBP36YvVkz+cFyxUQEALvby//AjMtBJcDuhlXg
Jh3G95RSKsjGtnuaE1Yd190Oj925TsLomaYIMgNQZFf67YkdvH0bVuTuGL0OHOPa
svunPtlsUvbtExN7wIoo9Rxb8FKpCsDbuOPm/+Uha36G3iwUuoXPbMvkPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJItX7fwKLcrXEnlwPBuBQ4nTE8AMB8GA1UdIwQY
MBaAFPPvamz840P5FMmtlMNBDaAKfNHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOC05cWJQempRX2tVeWEyVXcwRU5vQXA4MGN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85MzNlZGMtMjMwZi00YmZjLWJjNDct
MmM0NzYzZDY0ZDQzLzEvOC05cWJQempRX2tVeWEyVXcwRU5vQXA4MGN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi85MzNlZGMtMjMwZi00YmZjLWJjNDctMmM0NzYzZDY0ZDQz
LzEvOC05cWJQempRX2tVeWEyVXcwRU5vQXA4MGN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZWkOmLH
m9BbUlWWgN2+6FofwyP1iy3bX5SgDKiURfOZGwCYoHN96yE2pKAohZxrW5vlhW/E
WcQD0zUcrSTOrp1/SL6puCqFCUdxMtJIEThDxTeZkeBPwI3Fj7W8N7l++twomjvw
6zyO6A+2XU+tAypJgX0Yrd455XiD5S//f0xErMC/UTHY1YuBoUQdjRIPlxldIgPl
J9zaSp9LHLD3kWu4ifaR3A/4LZtbfVpKzjH+liWr7MhIN9C1UIeZL0dMhgApXBx9
4IgELgXnM4pceXr/XLsYRRoQE2CHUFUMxCeu9aXjXmSaopKyIVGTvBJMr8E/A91h
EdYIsb+U6phglw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:22 2025 by rpki-client