Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
File:                     9lO0wxURtUguuEJaORN51D_W1FU.mft (raw, json)
Hash identifier:          juTt46C5JWroZ8y/L/w0A7GH9gcODjlVp3nEYF9BO+Q=
Subject key identifier:   9C:41:4E:58:8A:4F:07:67:87:82:6D:CD:8C:64:62:EE:08:37:39:26
Authority key identifier: F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
Certificate issuer:       /CN=f653b4c31511b5482eb8425a391379d43fd6d455
Certificate serial:       0198D6CD05D915A9F7056AFB964648B4DE15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
Manifest number:          1647
Signing time:             Sat 23 Aug 2025 12:00:17 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:17 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:17 +0000
Files and hashes:         1: 9lO0wxURtUguuEJaORN51D_W1FU.crl (hash: sN9D0vGpgYQNPrWFSC9ozDu7XGXAHFgpJiLSg0ziJ3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:05:d9:15:a9:f7:05:6a:fb:96:46:48:b4:de:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f653b4c31511b5482eb8425a391379d43fd6d455
        Validity
            Not Before: Aug 23 12:00:17 2025 GMT
            Not After : Aug 24 12:00:17 2025 GMT
        Subject: CN=9c414e588a4f076787826dcd8c6462ee08373926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f6:db:f0:62:14:da:47:04:84:01:5c:86:5c:
                    5c:b5:a0:4e:04:65:81:9a:7e:c4:7e:24:ec:d3:ed:
                    c4:ef:12:cf:f5:a7:f9:00:6d:bb:85:a1:cc:0d:e0:
                    6f:e7:95:36:f7:c0:57:f5:ab:ef:a1:f1:ef:e4:00:
                    ba:fe:b8:03:fd:b1:8b:b7:75:74:c2:43:04:cc:9b:
                    58:3d:16:25:18:89:4e:55:1d:66:97:29:b6:58:a2:
                    89:84:16:0a:8e:7b:eb:a7:e9:70:cf:a4:60:2c:4e:
                    47:bd:0a:91:50:0d:21:9b:17:70:a3:e4:0a:1a:d1:
                    f8:fc:61:01:77:3e:f0:f1:cf:22:7c:f4:b4:b0:56:
                    40:18:a9:ad:48:28:f7:f6:31:59:4c:b7:e7:da:bc:
                    d5:53:b1:21:9c:39:84:39:87:f8:8c:ef:a3:4b:e3:
                    0e:94:56:9a:e1:58:19:3a:91:52:a2:b7:4d:78:48:
                    69:4f:35:c4:76:2a:28:b1:58:2f:e8:41:25:fb:a0:
                    34:98:14:28:5b:ac:fd:75:99:b0:a1:d5:b0:b5:5d:
                    f6:7d:db:18:01:f8:1f:28:22:0e:69:cd:aa:f3:5e:
                    0c:5e:7a:c9:c8:10:5f:a7:c6:70:aa:06:9d:33:ea:
                    81:4c:9b:cc:c7:b3:c0:75:df:45:88:b4:1f:01:36:
                    2f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:41:4E:58:8A:4F:07:67:87:82:6D:CD:8C:64:62:EE:08:37:39:26
            X509v3 Authority Key Identifier:
                keyid:F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:4b:23:f1:6d:63:00:b0:48:3e:b3:b0:54:d6:eb:8f:03:86:
         de:05:0f:e8:1f:12:90:61:d6:ed:9e:1e:42:c5:d5:66:fd:ad:
         0a:ac:89:fd:60:ed:22:cf:4d:8c:01:af:81:3e:d8:f3:6c:b8:
         4a:06:e5:af:2c:e6:5c:45:41:d3:80:e0:9a:71:65:38:bd:9a:
         7d:9f:da:5a:89:16:f7:7e:08:19:3d:f5:8b:dd:dd:d4:1c:ff:
         18:fc:0c:41:b8:75:a9:74:bc:3c:32:a2:10:5e:0c:b4:3e:45:
         8e:69:d8:5a:3a:c2:f7:a2:bd:2a:ce:fa:6a:48:23:22:fa:42:
         7d:5c:17:95:f7:b6:bb:10:28:30:18:cd:e7:de:88:30:10:90:
         c9:06:d7:e0:4f:b1:93:30:d1:de:8b:30:d1:ea:e8:50:a7:c1:
         90:6c:af:97:72:6e:6f:9f:b9:51:09:3a:30:ba:b4:61:2a:6b:
         56:34:99:63:54:67:5a:62:a6:14:66:e1:2b:cb:f7:a4:8a:23:
         28:2d:0b:1f:88:51:cf:91:31:77:9e:67:fa:7b:d6:a3:6d:25:
         0e:55:41:6e:81:a9:0b:e0:b6:46:13:58:71:c3:18:b7:f7:84:
         1e:be:74:64:3d:ed:c2:3d:3a:d1:70:2e:3d:a9:d4:3f:cf:02:
         04:28:30:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzQXZFan3BWr7lkZItN4VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTNiNGMzMTUxMWI1NDgyZWI4NDI1YTM5MTM3OWQ0M2Zk
NmQ0NTUwHhcNMjUwODIzMTIwMDE3WhcNMjUwODI0MTIwMDE3WjAzMTEwLwYDVQQD
Eyg5YzQxNGU1ODhhNGYwNzY3ODc4MjZkY2Q4YzY0NjJlZTA4MzczOTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPbb8GIU2kcEhAFchlxctaBOBGWB
mn7EfiTs0+3E7xLP9af5AG27haHMDeBv55U298BX9avvofHv5AC6/rgD/bGLt3V0
wkMEzJtYPRYlGIlOVR1mlym2WKKJhBYKjnvrp+lwz6RgLE5HvQqRUA0hmxdwo+QK
GtH4/GEBdz7w8c8ifPS0sFZAGKmtSCj39jFZTLfn2rzVU7EhnDmEOYf4jO+jS+MO
lFaa4VgZOpFSordNeEhpTzXEdioosVgv6EEl+6A0mBQoW6z9dZmwodWwtV32fdsY
AfgfKCIOac2q814MXnrJyBBfp8ZwqgadM+qBTJvMx7PAdd9FiLQfATYv0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxBTliKTwdnh4JtzYxkYu4INzkmMB8GA1UdIwQY
MBaAFPZTtMMVEbVILrhCWjkTedQ/1tRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxPMHd4VVJ0VWd1dUVKYU9STjUxRF9XMUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82ZjYyODUtMTI5ZC00MWY2LWI4MzAt
MzE5MzY4ZDkxZmMzLzEvOWxPMHd4VVJ0VWd1dUVKYU9STjUxRF9XMUZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82ZjYyODUtMTI5ZC00MWY2LWI4MzAtMzE5MzY4ZDkxZmMz
LzEvOWxPMHd4VVJ0VWd1dUVKYU9STjUxRF9XMUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUsj8W1j
ALBIPrOwVNbrjwOG3gUP6B8SkGHW7Z4eQsXVZv2tCqyJ/WDtIs9NjAGvgT7Y82y4
SgblryzmXEVB04DgmnFlOL2afZ/aWokW934IGT31i93d1Bz/GPwMQbh1qXS8PDKi
EF4MtD5FjmnYWjrC96K9Ks76akgjIvpCfVwXlfe2uxAoMBjN596IMBCQyQbX4E+x
kzDR3osw0eroUKfBkGyvl3Jub5+5UQk6MLq0YSprVjSZY1RnWmKmFGbhK8v3pIoj
KC0LH4hRz5Exd55n+nvWo20lDlVBboGpC+C2RhNYccMYt/eEHr50ZD3twj060XAu
PanUP88CBCgwVQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:34:14 2025 by rpki-client