Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
File:                     9WFTxQuIFb0o37sA4j5vJjIDFy4.mft (raw, json)
Hash identifier:          trwyzJtyR6MzdhiLAWG9CxG8H63c9x9wGJOaYzRoFaA=
Subject key identifier:   AF:B1:A1:A1:0A:79:39:29:9D:3B:41:3E:C1:13:FF:72:8D:D4:A8:7D
Authority key identifier: F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
Certificate issuer:       /CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Certificate serial:       0198D54EA501E16E99AB3023FEAFE0D3D866
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
Manifest number:          0B2C
Signing time:             Sat 23 Aug 2025 05:02:37 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:37 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:37 +0000
Files and hashes:         1: 9WFTxQuIFb0o37sA4j5vJjIDFy4.crl (hash: rKqNE7lAMd7EIoDJLwM+ay0fSnE3oxDMTZD9GM9oGoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:a5:01:e1:6e:99:ab:30:23:fe:af:e0:d3:d8:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56153c50b8815bd28dfbb00e23e6f263203172e
        Validity
            Not Before: Aug 23 05:02:37 2025 GMT
            Not After : Aug 24 05:02:37 2025 GMT
        Subject: CN=afb1a1a10a7939299d3b413ec113ff728dd4a87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:98:4b:55:1c:89:c8:89:7f:15:3c:61:6b:6f:
                    05:97:60:9a:d4:07:b8:7a:9a:ef:c8:60:db:82:44:
                    14:cd:ad:ef:ee:2a:78:f9:1c:91:74:17:56:24:1c:
                    55:88:0e:10:6d:fb:b7:65:f5:b1:83:d8:45:c5:83:
                    bd:bf:a9:7a:cf:5c:68:01:4f:8f:87:78:a2:81:cc:
                    e6:49:4b:ac:58:00:a3:ab:ff:b9:9d:cb:2d:b5:4f:
                    62:24:cc:9e:61:6b:e3:28:29:de:b1:ba:a4:fc:f0:
                    9d:7f:e8:bf:03:35:77:f9:cc:a0:eb:98:b6:81:b9:
                    6d:37:88:e2:14:9e:37:b6:86:6f:92:f0:a3:9c:3a:
                    cb:c0:cc:1d:13:af:99:53:76:e6:f6:5a:25:9d:ab:
                    32:06:eb:69:a1:f4:8c:26:85:a0:36:cd:a0:d0:d8:
                    80:a8:66:41:2d:b9:6c:fe:19:85:d2:0f:6e:30:91:
                    c1:0b:65:42:72:02:be:d1:8e:22:52:7e:e9:de:ed:
                    35:1d:68:87:b1:d0:9e:63:69:e9:a2:45:d8:48:0d:
                    40:44:5b:ee:e7:f5:70:30:68:d1:ba:5b:a8:20:ef:
                    e6:47:81:4f:99:f2:e8:be:64:1a:93:b4:41:85:fa:
                    e3:2c:d1:c5:5f:43:2d:6f:4b:76:f4:e2:f9:5c:0f:
                    a9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B1:A1:A1:0A:79:39:29:9D:3B:41:3E:C1:13:FF:72:8D:D4:A8:7D
            X509v3 Authority Key Identifier:
                keyid:F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:fb:9f:77:bc:23:7e:c6:39:56:cf:98:12:72:ff:c5:91:4e:
         e1:5c:04:c2:92:5c:bb:b2:5b:34:cd:a5:62:08:4b:80:07:08:
         de:f5:7e:eb:87:31:65:0f:96:83:ee:94:57:ab:ca:43:64:60:
         8f:b8:50:65:a8:5f:e7:09:e6:38:43:fd:1a:39:a2:7e:3f:29:
         a8:39:c8:93:03:9e:3d:6f:8c:c2:c8:f6:0c:ce:7f:c1:ce:a5:
         01:46:34:9a:57:fb:d8:f4:18:5b:3c:ae:b2:60:e8:ca:c4:d9:
         58:ed:4c:c8:08:58:e1:f1:93:62:8d:bc:17:46:75:27:4e:11:
         53:92:47:a6:59:ad:f7:5c:f0:10:78:83:09:f5:df:d3:e1:6c:
         f7:a3:40:1a:1d:c4:61:82:53:6c:a6:79:d3:ea:28:c8:ef:85:
         f5:81:90:3f:ac:85:cf:14:49:7f:77:37:ac:66:b7:c0:2d:54:
         f2:02:e7:08:34:f3:9c:5a:13:26:7a:e4:6f:1f:1d:48:ab:2d:
         2a:2c:cf:ce:ee:5f:f7:07:98:ff:7c:cc:bd:a5:84:c0:fd:c1:
         bc:88:19:c0:a0:42:7c:16:c7:fd:9c:28:3a:7a:d7:fe:10:f6:
         17:66:31:08:f9:60:91:25:65:7a:a1:33:c6:c2:2d:9b:33:3a:
         36:71:e3:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTqUB4W6ZqzAj/q/g09hmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NjE1M2M1MGI4ODE1YmQyOGRmYmIwMGUyM2U2ZjI2MzIw
MzE3MmUwHhcNMjUwODIzMDUwMjM3WhcNMjUwODI0MDUwMjM3WjAzMTEwLwYDVQQD
EyhhZmIxYTFhMTBhNzkzOTI5OWQzYjQxM2VjMTEzZmY3MjhkZDRhODdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJhLVRyJyIl/FTxha28Fl2Ca1Ae4
eprvyGDbgkQUza3v7ip4+RyRdBdWJBxViA4Qbfu3ZfWxg9hFxYO9v6l6z1xoAU+P
h3iigczmSUusWACjq/+5ncsttU9iJMyeYWvjKCnesbqk/PCdf+i/AzV3+cyg65i2
gbltN4jiFJ43toZvkvCjnDrLwMwdE6+ZU3bm9lolnasyButpofSMJoWgNs2g0NiA
qGZBLbls/hmF0g9uMJHBC2VCcgK+0Y4iUn7p3u01HWiHsdCeY2npokXYSA1ARFvu
5/VwMGjRuluoIO/mR4FPmfLovmQak7RBhfrjLNHFX0Mtb0t29OL5XA+pmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+xoaEKeTkpnTtBPsET/3KN1Kh9MB8GA1UdIwQY
MBaAFPVhU8ULiBW9KN+7AOI+byYyAxcuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVdGVHhRdUlGYjBvMzdzQTRqNXZKaklERnk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82MDZhY2EtMzc3Zi00ZmU5LWIyN2Ut
OGM3MjYyOTFkODZjLzEvOVdGVHhRdUlGYjBvMzdzQTRqNXZKaklERnk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy82MDZhY2EtMzc3Zi00ZmU5LWIyN2UtOGM3MjYyOTFkODZj
LzEvOVdGVHhRdUlGYjBvMzdzQTRqNXZKaklERnk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/ufd7wj
fsY5Vs+YEnL/xZFO4VwEwpJcu7JbNM2lYghLgAcI3vV+64cxZQ+Wg+6UV6vKQ2Rg
j7hQZahf5wnmOEP9Gjmifj8pqDnIkwOePW+Mwsj2DM5/wc6lAUY0mlf72PQYWzyu
smDoysTZWO1MyAhY4fGTYo28F0Z1J04RU5JHplmt91zwEHiDCfXf0+Fs96NAGh3E
YYJTbKZ50+ooyO+F9YGQP6yFzxRJf3c3rGa3wC1U8gLnCDTznFoTJnrkbx8dSKst
KizPzu5f9weY/3zMvaWEwP3BvIgZwKBCfBbH/ZwoOnrX/hD2F2YxCPlgkSVleqEz
xsItmzM6NnHjMw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:40 2025 by rpki-client