Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
File:                     ktf2mgS9nK1SOzn3ei3atEwpEZI.mft (raw, json)
Hash identifier:          +hZ3lxUA4m8oLyaUZXHdb3f4F+HDtoibPMaaVBWozsQ=
Subject key identifier:   9D:E8:AF:B8:B6:33:7D:EF:16:96:A4:1A:37:A8:75:2E:62:50:56:26
Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
Certificate issuer:       /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Certificate serial:       0197B6D7A6D75DB6A968FA1B444B4B02E3F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
Manifest number:          1546
Signing time:             Sat 28 Jun 2025 14:01:15 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:15 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:15 +0000
Files and hashes:         1: ktf2mgS9nK1SOzn3ei3atEwpEZI.crl (hash: NwMMjVCSDcB/1LhOoClMtCNpjk8xVRaL9fH0Znyyt8A=)
                          2: tX7ugzTELMCfaa10qZ6cRQFzo6s.roa (hash: pM1f1c7cpi8tX6YPlXTmsRIvmuNbzIiqqMIx6Cp/Bqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:a6:d7:5d:b6:a9:68:fa:1b:44:4b:4b:02:e3:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
        Validity
            Not Before: Jun 28 14:01:15 2025 GMT
            Not After : Jun 29 14:01:15 2025 GMT
        Subject: CN=9de8afb8b6337def1696a41a37a8752e62505626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cd:e6:cb:30:6c:1e:81:47:18:7b:d7:42:db:
                    89:f4:0e:a6:bb:73:2a:a7:f9:cf:cb:8a:7a:73:2f:
                    23:f7:f0:a5:a4:54:29:87:89:05:20:84:06:a3:7e:
                    a8:6d:fd:58:34:3d:e4:23:ef:49:94:92:99:66:74:
                    1a:66:f8:4a:ed:5b:02:c1:3e:a1:58:09:e9:fb:14:
                    6d:77:09:11:96:db:38:67:9c:8d:99:34:a8:56:2d:
                    f2:cb:a2:89:f5:ff:b7:f2:27:04:c2:72:7f:70:94:
                    5f:3a:b0:8d:2f:c0:b4:e1:a5:cf:ed:a6:a8:11:7c:
                    36:02:53:24:9f:fd:2f:d3:4b:21:f1:3b:c4:f2:3d:
                    87:11:d4:df:6a:2b:3d:5f:6f:af:4c:41:f9:df:30:
                    44:8d:27:be:f3:a8:c7:9b:5e:88:a5:32:da:18:b6:
                    39:b7:c1:57:21:7b:9c:4f:dc:2a:04:c4:25:7d:76:
                    9f:ef:f9:b4:ea:c3:db:5a:86:26:9e:55:b3:92:1a:
                    c2:68:21:fc:13:dd:9a:04:90:e5:ce:ff:6a:8a:18:
                    68:7a:c6:27:c0:dc:90:cc:67:7a:de:b8:29:92:7d:
                    f0:3d:a4:9c:4f:7e:05:07:c5:e0:da:7e:39:d8:fc:
                    d7:c0:ba:3a:a4:8a:18:d8:4d:7b:ba:b4:0c:94:4f:
                    17:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E8:AF:B8:B6:33:7D:EF:16:96:A4:1A:37:A8:75:2E:62:50:56:26
            X509v3 Authority Key Identifier:
                keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:0a:36:c4:51:b7:93:79:73:8e:94:60:5f:4f:7f:50:88:44:
         db:25:95:74:ce:bc:6c:0b:67:e0:eb:c6:9f:77:56:08:8e:63:
         26:13:3e:c5:18:27:27:40:f1:1f:52:1b:21:87:a0:bb:bc:36:
         dd:ad:c0:f5:c4:23:4a:e7:bf:3b:67:5e:89:22:88:d7:6c:d2:
         7e:0e:4c:17:ef:49:38:38:c9:4f:ad:cc:36:86:3b:07:e6:13:
         6a:8e:a6:de:68:81:92:b9:d2:21:0a:2a:57:3c:c3:63:d4:80:
         7c:7f:9b:b4:41:5a:32:58:29:74:04:b0:b7:2f:85:6f:d3:31:
         3b:a1:51:7d:db:2b:c3:1d:a2:ed:df:8d:9b:40:e5:b0:14:c1:
         79:a3:69:55:00:31:b1:45:8c:77:31:71:b0:86:fa:63:af:7d:
         5e:eb:79:3b:d2:db:4f:ae:55:89:26:be:27:4e:ef:55:3a:f9:
         f3:09:cf:a8:74:ab:3d:6a:df:af:f6:1b:50:4c:37:88:42:ed:
         d7:21:c8:2e:a2:2e:a9:35:bf:ba:17:dd:97:4b:1e:62:31:c5:
         f7:df:6a:c9:50:04:34:50:bb:a0:c0:8d:c8:f8:f6:d8:b0:05:
         08:54:eb:15:bb:bd:f9:7d:1b:3e:7f:df:e0:9f:0d:66:de:5a:
         e2:d6:d2:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe216bXXbapaPobREtLAuPwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdmNjlhMDRiZDljYWQ1MjNiMzlmNzdhMmRkYWI0NGMy
OTExOTIwHhcNMjUwNjI4MTQwMTE1WhcNMjUwNjI5MTQwMTE1WjAzMTEwLwYDVQQD
Eyg5ZGU4YWZiOGI2MzM3ZGVmMTY5NmE0MWEzN2E4NzUyZTYyNTA1NjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss3myzBsHoFHGHvXQtuJ9A6mu3Mq
p/nPy4p6cy8j9/ClpFQph4kFIIQGo36obf1YND3kI+9JlJKZZnQaZvhK7VsCwT6h
WAnp+xRtdwkRlts4Z5yNmTSoVi3yy6KJ9f+38icEwnJ/cJRfOrCNL8C04aXP7aao
EXw2AlMkn/0v00sh8TvE8j2HEdTfais9X2+vTEH53zBEjSe+86jHm16IpTLaGLY5
t8FXIXucT9wqBMQlfXaf7/m06sPbWoYmnlWzkhrCaCH8E92aBJDlzv9qihhoesYn
wNyQzGd63rgpkn3wPaScT34FB8Xg2n452PzXwLo6pIoY2E17urQMlE8XXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3or7i2M33vFpakGjeodS5iUFYmMB8GA1UdIwQY
MBaAFJLX9poEvZytUjs593ot2rRMKRGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmMm1nUzluSzFTT3puM2VpM2F0RXdwRVpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy81MGQ4NTUtY2Q4MS00ODFhLTk1ZWYt
Yjg0NDg3ZjkyMGU0LzEva3RmMm1nUzluSzFTT3puM2VpM2F0RXdwRVpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy81MGQ4NTUtY2Q4MS00ODFhLTk1ZWYtYjg0NDg3ZjkyMGU0
LzEva3RmMm1nUzluSzFTT3puM2VpM2F0RXdwRVpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbgo2xFG3
k3lzjpRgX09/UIhE2yWVdM68bAtn4OvGn3dWCI5jJhM+xRgnJ0DxH1IbIYegu7w2
3a3A9cQjSue/O2deiSKI12zSfg5MF+9JODjJT63MNoY7B+YTao6m3miBkrnSIQoq
VzzDY9SAfH+btEFaMlgpdASwty+Fb9MxO6FRfdsrwx2i7d+Nm0DlsBTBeaNpVQAx
sUWMdzFxsIb6Y699Xut5O9LbT65ViSa+J07vVTr58wnPqHSrPWrfr/YbUEw3iELt
1yHILqIuqTW/uhfdl0seYjHF999qyVAENFC7oMCNyPj22LAFCFTrFbu9+X0bPn/f
4J8NZt5a4tbSBQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:23 2025 by rpki-client