Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
File:                     x87XolsQkPDT8-uXyBSrL_fb_DY.mft (raw, json)
Hash identifier:          q5tVNXXBQy7weEfe3oL3poT9PFM2d4lLAPr9pp3vhhM=
Subject key identifier:   32:A0:6E:39:B2:1E:26:7B:65:72:5A:D3:27:5F:FC:B6:76:CB:E4:67
Authority key identifier: C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36
Certificate issuer:       /CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
Certificate serial:       0197C6B88ECF60FC90B267614138E6DF5F5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
Manifest number:          092E
Signing time:             Tue 01 Jul 2025 16:01:13 +0000
Manifest this update:     Tue 01 Jul 2025 16:01:13 +0000
Manifest next update:     Wed 02 Jul 2025 16:01:13 +0000
Files and hashes:         1: x87XolsQkPDT8-uXyBSrL_fb_DY.crl (hash: rmC5hebngcP//5II+IT5IYdHJBp2HLCxLcgE4eHfTRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c6:b8:8e:cf:60:fc:90:b2:67:61:41:38:e6:df:5f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
        Validity
            Not Before: Jul  1 16:01:13 2025 GMT
            Not After : Jul  2 16:01:13 2025 GMT
        Subject: CN=32a06e39b21e267b65725ad3275ffcb676cbe467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b7:e7:01:c0:d6:25:af:10:84:21:4c:3f:c1:
                    99:75:86:91:26:c9:bc:d0:82:c2:0e:ab:ff:65:aa:
                    c6:4a:79:b0:12:75:7a:fe:ed:b9:a1:65:09:3e:52:
                    85:12:fd:f5:6f:82:10:36:0a:3e:7a:95:96:35:83:
                    4f:5f:78:34:ec:5b:58:e0:3b:c8:89:ad:c8:93:7a:
                    37:df:34:56:14:4e:bb:6d:b0:7e:3e:cf:af:bf:a9:
                    06:b9:a3:ac:6c:59:ea:5d:74:28:82:b8:ae:3f:a9:
                    6b:6f:56:7b:5b:63:90:3f:f1:26:74:a5:fb:02:d3:
                    6f:f3:43:20:62:34:0f:83:3f:0a:5c:3b:84:01:ba:
                    2b:09:4d:b4:07:23:bb:65:90:93:00:ef:fd:03:dc:
                    44:4f:9f:07:a4:3b:90:cd:fb:71:d9:aa:d9:35:77:
                    cf:d7:92:ab:8f:fb:b8:ff:f0:21:48:8e:b1:72:ad:
                    ac:6e:b0:7a:53:03:b1:10:f5:c3:da:84:54:cc:bc:
                    25:1d:36:40:df:8d:e4:6e:70:da:bf:9a:54:a9:d0:
                    52:a7:b5:73:be:16:20:22:7d:ab:6e:03:f0:e5:f5:
                    fe:38:b3:46:22:8e:af:2d:af:01:58:c1:46:77:5d:
                    9d:cd:da:78:14:36:6d:bf:bf:49:a3:36:c1:dd:56:
                    c5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A0:6E:39:B2:1E:26:7B:65:72:5A:D3:27:5F:FC:B6:76:CB:E4:67
            X509v3 Authority Key Identifier:
                keyid:C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:6a:56:ab:20:83:e1:3c:0f:95:85:2a:fa:5d:30:5a:d7:d3:
         10:9d:0a:89:3d:76:8d:13:77:3d:5d:91:87:4b:9b:58:56:03:
         e1:52:4f:83:2b:44:c1:06:eb:1a:bc:fc:a4:9d:8a:97:94:46:
         b8:53:12:8a:d5:95:c7:52:a8:1e:6e:c8:32:46:e9:b2:ef:04:
         54:e3:a2:2c:2f:a1:b8:dc:03:35:a4:2d:b3:fa:94:14:e8:8f:
         d5:c7:26:06:ff:be:75:6b:97:3e:f0:41:83:f5:e6:a1:a8:dd:
         33:18:1c:6a:95:a7:b5:57:1f:fe:37:7c:6d:18:7f:6a:d9:29:
         b8:35:f9:4f:c6:bd:79:8e:7a:8a:47:d1:77:97:ec:7f:a2:79:
         bb:39:fb:43:bd:e6:dd:ec:97:45:09:c3:c3:1e:c2:9a:81:2d:
         be:c4:1c:92:50:04:fc:c4:a1:3f:93:19:e5:84:4d:48:74:b5:
         9d:fb:22:33:98:30:a4:f9:ae:be:e6:6a:3d:aa:3c:f4:9f:40:
         15:ea:88:db:15:f5:6d:25:e4:7c:f5:14:ce:2e:64:a6:c2:3b:
         68:c3:72:ca:50:e0:e4:05:82:0d:f4:8a:3d:d7:52:8b:16:20:
         d0:33:84:ad:cf:6f:47:a9:76:f4:68:ae:54:9d:13:86:16:d4:
         77:51:d1:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfGuI7PYPyQsmdhQTjm319fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3Y2VkN2EyNWIxMDkwZjBkM2YzZWI5N2M4MTRhYjJmZjdk
YmZjMzYwHhcNMjUwNzAxMTYwMTEzWhcNMjUwNzAyMTYwMTEzWjAzMTEwLwYDVQQD
EygzMmEwNmUzOWIyMWUyNjdiNjU3MjVhZDMyNzVmZmNiNjc2Y2JlNDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrfnAcDWJa8QhCFMP8GZdYaRJsm8
0ILCDqv/ZarGSnmwEnV6/u25oWUJPlKFEv31b4IQNgo+epWWNYNPX3g07FtY4DvI
ia3Ik3o33zRWFE67bbB+Ps+vv6kGuaOsbFnqXXQogriuP6lrb1Z7W2OQP/EmdKX7
AtNv80MgYjQPgz8KXDuEAborCU20ByO7ZZCTAO/9A9xET58HpDuQzftx2arZNXfP
15Krj/u4//AhSI6xcq2sbrB6UwOxEPXD2oRUzLwlHTZA343kbnDav5pUqdBSp7Vz
vhYgIn2rbgPw5fX+OLNGIo6vLa8BWMFGd12dzdp4FDZtv79JozbB3VbFVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKgbjmyHiZ7ZXJa0ydf/LZ2y+RnMB8GA1UdIwQY
MBaAFMfO16JbEJDw0/Prl8gUqy/32/w2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDg3WG9sc1FrUERUOC11WHlCU3JMX2ZiX0RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8wYTkzYTEtMTIyOS00MDVjLWJhNDkt
OGEyYjc4MDIwZmVlLzEveDg3WG9sc1FrUERUOC11WHlCU3JMX2ZiX0RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8wYTkzYTEtMTIyOS00MDVjLWJhNDktOGEyYjc4MDIwZmVl
LzEveDg3WG9sc1FrUERUOC11WHlCU3JMX2ZiX0RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkWpWqyCD
4TwPlYUq+l0wWtfTEJ0KiT12jRN3PV2Rh0ubWFYD4VJPgytEwQbrGrz8pJ2Kl5RG
uFMSitWVx1KoHm7IMkbpsu8EVOOiLC+huNwDNaQts/qUFOiP1ccmBv++dWuXPvBB
g/XmoajdMxgcapWntVcf/jd8bRh/atkpuDX5T8a9eY56ikfRd5fsf6J5uzn7Q73m
3eyXRQnDwx7CmoEtvsQcklAE/MShP5MZ5YRNSHS1nfsiM5gwpPmuvuZqPao89J9A
FeqI2xX1bSXkfPUUzi5kpsI7aMNyylDg5AWCDfSKPddSixYg0DOErc9vR6l29Giu
VJ0ThhbUd1HRAg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 18:36:42 2025 by rpki-client