Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
File:                     9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft (raw, json)
Hash identifier:          6+oe7RUkWy4wco29uLivZyiUJpfUruZYLi2/6kVWZRM=
Subject key identifier:   A7:A9:61:B9:52:92:81:8B:0E:E3:69:49:AA:66:08:9A:44:86:3A:77
Authority key identifier: F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0
Certificate issuer:       /CN=f55e5e0d815893a68a40000805a18ae6b9f603c0
Certificate serial:       0197B70F4C98C54BE84F109DB2CE2FF51C68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
Manifest number:          1543
Signing time:             Sat 28 Jun 2025 15:02:02 +0000
Manifest this update:     Sat 28 Jun 2025 15:02:02 +0000
Manifest next update:     Sun 29 Jun 2025 15:02:02 +0000
Files and hashes:         1: 9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl (hash: qLdsZDpOvFAyC/DqrqiNYHQWGCfUPsYA3Cxj9M6LZeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:4c:98:c5:4b:e8:4f:10:9d:b2:ce:2f:f5:1c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55e5e0d815893a68a40000805a18ae6b9f603c0
        Validity
            Not Before: Jun 28 15:02:02 2025 GMT
            Not After : Jun 29 15:02:02 2025 GMT
        Subject: CN=a7a961b95292818b0ee36949aa66089a44863a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b0:a0:b3:e4:ab:77:e0:82:e5:b7:11:5e:d6:
                    e1:0d:57:2a:1c:01:3d:8d:4f:53:70:5c:89:30:b0:
                    b5:f5:ef:68:bc:7d:61:a6:08:ec:ab:b7:09:91:55:
                    ba:00:d5:50:31:f8:05:23:f3:51:3e:6d:1a:11:26:
                    75:b7:0d:9d:ae:5e:6d:7b:60:f5:1e:af:7c:6c:e4:
                    37:4f:f8:8b:60:5a:88:76:b9:55:62:7f:02:e6:b2:
                    c9:89:51:e9:b2:87:4e:80:dc:60:e5:23:03:2b:74:
                    e2:d6:1a:98:cf:5b:11:a7:a3:5a:54:04:5d:71:8d:
                    72:85:8f:e3:37:c8:97:71:8c:2a:6c:6d:8b:8a:15:
                    b8:3d:12:c1:f1:45:84:9a:85:7e:b5:7c:e5:2a:4e:
                    9e:a1:6b:b6:7e:23:e6:f3:f7:42:99:56:e8:c4:7e:
                    0b:93:8c:ef:00:e3:14:a6:08:0c:80:d0:12:74:13:
                    24:e7:45:97:5a:3b:57:2a:27:23:3a:c7:4c:13:72:
                    73:01:47:73:09:1f:aa:a5:e3:65:f8:f9:85:11:e6:
                    c3:20:d0:9e:2e:b3:4d:b1:da:33:e7:4b:6b:e7:22:
                    2c:bd:42:73:9a:5f:c4:d4:79:f9:31:ee:9b:5c:b5:
                    9e:d7:4b:6a:74:59:a6:e5:4c:0a:27:8e:8b:77:e2:
                    b5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A9:61:B9:52:92:81:8B:0E:E3:69:49:AA:66:08:9A:44:86:3A:77
            X509v3 Authority Key Identifier:
                keyid:F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:e8:0c:d6:81:1f:eb:41:2a:d6:04:bf:32:cf:e1:42:ed:e9:
         f6:34:0d:0c:4c:d2:ef:2f:a8:1e:87:70:c2:b4:50:2f:2f:43:
         47:cf:78:fc:50:bd:23:76:38:36:a3:05:e8:20:bd:85:fc:af:
         f9:67:7d:8d:97:25:9d:0b:a5:7f:f5:26:17:0d:be:b1:18:eb:
         44:a4:80:76:f0:99:aa:b3:2b:a4:61:da:2a:8a:f0:77:04:3d:
         58:ed:f6:ce:84:bf:48:43:28:77:ef:4a:29:29:90:a0:5c:a5:
         4d:22:4e:fd:3e:c3:fe:f8:ef:d5:05:30:0a:67:22:4a:db:20:
         06:2c:ec:88:23:1a:b9:53:36:f6:c1:1b:59:6e:0d:dc:7a:71:
         6c:20:21:53:e8:59:e1:a5:65:97:29:ba:31:0a:54:47:a1:61:
         75:99:3c:60:f2:68:1a:77:71:b2:93:6c:1d:28:54:94:f6:5d:
         35:60:dd:51:bb:e1:8e:0c:12:60:1a:9f:7f:bc:ee:18:32:08:
         34:f6:42:61:57:8c:8e:05:d1:3d:5c:e4:f6:30:2c:b2:d6:e7:
         50:b0:16:fe:4e:50:14:99:22:b5:98:39:77:cc:4e:7b:23:b9:
         61:f3:4b:6f:d8:63:31:e0:11:e4:44:b8:4d:77:6d:c7:26:3b:
         b9:2a:78:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3D0yYxUvoTxCdss4v9RxoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NWU1ZTBkODE1ODkzYTY4YTQwMDAwODA1YTE4YWU2Yjlm
NjAzYzAwHhcNMjUwNjI4MTUwMjAyWhcNMjUwNjI5MTUwMjAyWjAzMTEwLwYDVQQD
EyhhN2E5NjFiOTUyOTI4MThiMGVlMzY5NDlhYTY2MDg5YTQ0ODYzYTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7Cgs+Srd+CC5bcRXtbhDVcqHAE9
jU9TcFyJMLC19e9ovH1hpgjsq7cJkVW6ANVQMfgFI/NRPm0aESZ1tw2drl5te2D1
Hq98bOQ3T/iLYFqIdrlVYn8C5rLJiVHpsodOgNxg5SMDK3Ti1hqYz1sRp6NaVARd
cY1yhY/jN8iXcYwqbG2LihW4PRLB8UWEmoV+tXzlKk6eoWu2fiPm8/dCmVboxH4L
k4zvAOMUpggMgNASdBMk50WXWjtXKicjOsdME3JzAUdzCR+qpeNl+PmFEebDINCe
LrNNsdoz50tr5yIsvUJzml/E1Hn5Me6bXLWe10tqdFmm5UwKJ46Ld+K1PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKepYblSkoGLDuNpSapmCJpEhjp3MB8GA1UdIwQY
MBaAFPVeXg2BWJOmikAACAWhiua59gPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVY1ZURZRllrNmFLUUFBSUJhR0s1cm4yQThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8yOWY3MDctNDhlMC00MGU0LTk0Y2Et
OGZjYjUwY2FkODQwLzEvOVY1ZURZRllrNmFLUUFBSUJhR0s1cm4yQThBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8yOWY3MDctNDhlMC00MGU0LTk0Y2EtOGZjYjUwY2FkODQw
LzEvOVY1ZURZRllrNmFLUUFBSUJhR0s1cm4yQThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlOgM1oEf
60Eq1gS/Ms/hQu3p9jQNDEzS7y+oHodwwrRQLy9DR894/FC9I3Y4NqMF6CC9hfyv
+Wd9jZclnQulf/UmFw2+sRjrRKSAdvCZqrMrpGHaKorwdwQ9WO32zoS/SEMod+9K
KSmQoFylTSJO/T7D/vjv1QUwCmciStsgBizsiCMauVM29sEbWW4N3HpxbCAhU+hZ
4aVllym6MQpUR6FhdZk8YPJoGndxspNsHShUlPZdNWDdUbvhjgwSYBqff7zuGDII
NPZCYVeMjgXRPVzk9jAsstbnULAW/k5QFJkitZg5d8xOeyO5YfNLb9hjMeAR5ES4
TXdtxyY7uSp4IA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:25 2025 by rpki-client