Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
File:                     9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft (raw, json)
Hash identifier:          VTRGAl2cIK94ThM8nsMa4m/X3i1swn203XHOiH4d53M=
Subject key identifier:   F6:F7:72:76:0F:15:AB:1D:1B:95:EA:78:91:00:B6:75:E9:74:02:13
Authority key identifier: F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
Certificate issuer:       /CN=f709528b8828b4d826355e2c52237d642071cd54
Certificate serial:       0198D5BC3DC597E05252C32E845F46D2D78F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
Manifest number:          062E
Signing time:             Sat 23 Aug 2025 07:02:20 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:20 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:20 +0000
Files and hashes:         1: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl (hash: PLHd4SXG8h1vW2QF4z331o8jNxmmpDocEJpf4WWBONk=)
                          2: iKhGCzGlkdUH-YeR40es_shy-iQ.roa (hash: UctZx1wGvAAr9xLOczqP8p1as4JR/y4gz7WSAX7sYrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:3d:c5:97:e0:52:52:c3:2e:84:5f:46:d2:d7:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f709528b8828b4d826355e2c52237d642071cd54
        Validity
            Not Before: Aug 23 07:02:20 2025 GMT
            Not After : Aug 24 07:02:20 2025 GMT
        Subject: CN=f6f772760f15ab1d1b95ea789100b675e9740213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ef:ee:91:ac:ef:d4:b7:0c:68:da:8c:13:ed:
                    9b:86:bb:9d:6c:52:84:bb:3a:b3:cc:27:d6:81:9a:
                    ad:50:0a:93:c2:df:18:4a:4a:26:cb:a4:a3:09:65:
                    3b:b1:67:d9:c1:ba:84:24:8e:9c:ed:36:f7:0e:e5:
                    8b:ae:70:f6:35:51:15:23:f6:4c:43:ad:e4:85:8c:
                    48:34:b0:aa:35:df:27:a7:78:e8:6a:6c:11:4a:ca:
                    c1:ca:35:a4:98:43:ae:76:09:21:0f:a7:e7:e8:6b:
                    90:27:2c:f6:e2:7f:07:b4:8d:27:e4:9a:83:e6:ee:
                    35:9f:d0:99:20:82:e1:81:42:0d:cb:16:65:e7:2f:
                    a3:e6:cf:06:d1:7d:36:32:e5:76:ee:39:fc:9d:87:
                    d7:bb:da:d4:d3:7a:ca:57:9d:53:96:3d:2e:20:43:
                    a8:74:05:a7:5f:55:95:fb:bd:06:76:cb:b7:25:9d:
                    21:9b:99:0e:cd:d6:0d:23:47:de:e5:08:42:86:03:
                    3c:dd:55:61:ae:56:30:8c:f0:a1:2f:fa:2d:28:fc:
                    f5:6d:6f:3e:28:5d:4d:4a:8f:37:54:88:f2:af:45:
                    b9:ee:1b:79:59:e4:67:0b:4f:81:a8:34:8b:cf:a6:
                    57:07:5a:27:83:09:c0:ac:01:28:7e:d0:f6:f2:79:
                    4b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F7:72:76:0F:15:AB:1D:1B:95:EA:78:91:00:B6:75:E9:74:02:13
            X509v3 Authority Key Identifier:
                keyid:F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:79:00:be:42:3e:48:3d:08:1b:6b:98:d4:10:87:90:74:79:
         b2:8b:fc:ac:04:22:bf:9c:19:d8:dc:5b:00:e4:e2:58:04:09:
         96:bd:9b:b4:77:83:28:0e:01:fa:e6:7e:f6:95:c9:ea:3b:ea:
         2c:2b:da:16:18:96:5d:14:a8:44:e0:f7:92:5a:fa:82:4c:81:
         a1:ca:fa:82:2f:e9:44:5f:24:b1:cd:a7:ba:86:22:e2:b5:d2:
         0e:6d:d5:42:76:1f:a5:be:2a:7f:4d:c2:74:64:ef:da:57:19:
         b1:3d:82:7f:3e:31:30:67:8e:d1:88:da:bd:bf:f3:b1:a1:c5:
         56:c2:2e:32:7b:0b:e7:15:6f:77:22:1a:98:0f:59:e5:c1:1b:
         7e:30:be:67:c8:0b:b8:7b:da:0b:62:4d:34:8b:5e:41:b2:4f:
         fd:a4:0b:92:10:df:21:ac:77:f5:63:b5:ee:8e:97:a9:5a:c5:
         5d:fa:af:e1:b8:28:34:f6:88:35:1f:55:25:64:7d:b8:a6:09:
         4e:b2:7c:10:44:5f:39:4e:1b:ff:53:34:da:00:21:59:27:43:
         ef:5d:bd:c2:08:81:17:8e:75:72:f4:40:93:1d:19:16:b9:6f:
         6c:b6:16:d6:f3:9f:a8:f2:f2:88:0a:9b:4c:1d:e6:40:20:c1:
         1d:5f:d1:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvD3Fl+BSUsMuhF9G0tePMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MDk1MjhiODgyOGI0ZDgyNjM1NWUyYzUyMjM3ZDY0MjA3
MWNkNTQwHhcNMjUwODIzMDcwMjIwWhcNMjUwODI0MDcwMjIwWjAzMTEwLwYDVQQD
EyhmNmY3NzI3NjBmMTVhYjFkMWI5NWVhNzg5MTAwYjY3NWU5NzQwMjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO/ukazv1LcMaNqME+2bhrudbFKE
uzqzzCfWgZqtUAqTwt8YSkomy6SjCWU7sWfZwbqEJI6c7Tb3DuWLrnD2NVEVI/ZM
Q63khYxINLCqNd8np3joamwRSsrByjWkmEOudgkhD6fn6GuQJyz24n8HtI0n5JqD
5u41n9CZIILhgUINyxZl5y+j5s8G0X02MuV27jn8nYfXu9rU03rKV51Tlj0uIEOo
dAWnX1WV+70Gdsu3JZ0hm5kOzdYNI0fe5QhChgM83VVhrlYwjPChL/otKPz1bW8+
KF1NSo83VIjyr0W57ht5WeRnC0+BqDSLz6ZXB1ongwnArAEoftD28nlLFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPb3cnYPFasdG5XqeJEAtnXpdAITMB8GA1UdIwQY
MBaAFPcJUouIKLTYJjVeLFIjfWQgcc1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yZDlkODAtYjhiZi00NjVhLWEyOTEt
OWY3NGZhY2FlOGYxLzEvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8yZDlkODAtYjhiZi00NjVhLWEyOTEtOWY3NGZhY2FlOGYx
LzEvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXkAvkI+
SD0IG2uY1BCHkHR5sov8rAQiv5wZ2NxbAOTiWAQJlr2btHeDKA4B+uZ+9pXJ6jvq
LCvaFhiWXRSoROD3klr6gkyBocr6gi/pRF8ksc2nuoYi4rXSDm3VQnYfpb4qf03C
dGTv2lcZsT2Cfz4xMGeO0Yjavb/zsaHFVsIuMnsL5xVvdyIamA9Z5cEbfjC+Z8gL
uHvaC2JNNIteQbJP/aQLkhDfIax39WO17o6XqVrFXfqv4bgoNPaINR9VJWR9uKYJ
TrJ8EERfOU4b/1M02gAhWSdD7129wgiBF451cvRAkx0ZFrlvbLYW1vOfqPLyiAqb
TB3mQCDBHV/RlA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:24 2025 by rpki-client