Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
File:                     9jOGnDZCtefqAii_DgspXO_MTd8.mft (raw, json)
Hash identifier:          Toc3n0/vY+48d3twCpeUHBYXJvRGfV2uZQgQArzPdVI=
Subject key identifier:   06:78:3A:74:08:AE:0B:67:03:4D:B2:3E:64:5A:70:39:32:A2:B5:02
Authority key identifier: F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF
Certificate issuer:       /CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf
Certificate serial:       0198D515F25F8D532AB438B5E38F6DAE4D98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
Manifest number:          10BF
Signing time:             Sat 23 Aug 2025 04:00:41 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:41 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:41 +0000
Files and hashes:         1: 9jOGnDZCtefqAii_DgspXO_MTd8.crl (hash: +AkusQu6u0k0LMV6CAxyvb84W3vdaSkilRu/8WLWiG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:f2:5f:8d:53:2a:b4:38:b5:e3:8f:6d:ae:4d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf
        Validity
            Not Before: Aug 23 04:00:41 2025 GMT
            Not After : Aug 24 04:00:41 2025 GMT
        Subject: CN=06783a7408ae0b67034db23e645a703932a2b502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7e:03:3e:84:3d:75:75:0c:41:36:28:db:33:
                    1c:fe:ea:12:89:79:e6:d2:35:8c:4e:20:ec:c8:81:
                    b9:67:7e:79:57:83:c2:f5:77:55:c2:2c:49:73:56:
                    a0:33:32:f1:10:ee:df:73:51:55:8e:d3:cc:74:64:
                    0e:ec:14:96:3c:7f:65:19:fb:b4:e4:63:81:63:a6:
                    d8:49:b5:60:c6:5c:60:42:02:df:4e:71:31:82:5a:
                    55:49:4d:9e:b5:af:da:97:e4:14:a7:35:47:84:80:
                    5b:44:ae:85:ce:1a:b7:2e:14:45:4d:83:ec:d6:49:
                    12:c6:af:46:d7:b8:af:9f:42:7d:bf:90:e7:c3:f4:
                    77:83:65:91:a9:2a:36:32:d6:f2:66:38:e2:c7:77:
                    c9:b0:6d:20:42:4a:3a:31:6e:93:5a:3d:28:48:54:
                    e4:15:8c:b2:93:46:32:a5:7b:6b:84:1c:0a:96:07:
                    5b:ab:5d:ad:c9:b9:2d:2a:d1:56:c0:11:d2:f9:b3:
                    49:f8:f1:7e:98:7c:1a:1f:a4:8a:14:04:7f:7d:34:
                    6d:4b:ae:fe:b3:b5:05:03:09:c8:3a:f9:45:bf:d2:
                    80:34:02:63:be:3f:59:20:c8:68:c8:b7:af:b1:a2:
                    30:a7:fe:0c:98:2b:9e:29:33:67:6c:f1:88:1b:71:
                    48:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:78:3A:74:08:AE:0B:67:03:4D:B2:3E:64:5A:70:39:32:A2:B5:02
            X509v3 Authority Key Identifier:
                keyid:F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:0e:4b:32:24:f3:73:d9:a8:ca:b9:37:aa:c8:a7:37:6a:9c:
         5e:84:6e:ee:d5:df:40:0e:20:eb:fe:d0:c3:27:a0:d2:84:81:
         a0:52:8b:24:5e:26:68:53:55:23:6f:ef:a0:a5:81:ee:5d:61:
         75:87:8a:86:e9:b7:78:12:b4:7d:67:de:0e:e5:ee:87:a1:f9:
         78:16:07:08:13:79:19:80:38:0c:ef:c3:af:28:35:a1:df:67:
         35:e6:59:50:37:51:19:f9:10:38:78:5e:54:f6:78:26:3b:79:
         2c:20:84:9f:98:d1:c7:63:5c:c2:2e:79:b7:c8:87:b7:f9:ef:
         2a:04:d8:71:21:82:f7:14:0f:07:78:12:44:11:bc:15:9b:03:
         bf:60:d7:ae:84:90:0a:24:ac:5a:73:08:df:1b:28:21:e6:04:
         4a:73:94:68:a0:bf:8b:4b:cb:df:3a:e6:db:0a:c0:77:57:90:
         df:0e:3e:e3:88:a2:43:09:76:63:bc:3c:73:6a:99:f0:eb:c9:
         04:fc:ea:69:d5:7c:0f:0f:83:0a:fe:a5:bc:a5:da:52:6e:ed:
         be:69:43:f7:98:89:db:98:8f:5f:1a:1a:26:30:1a:b0:87:41:
         93:b2:3c:95:47:b1:e0:82:fc:69:0f:99:a7:ec:62:28:51:47:
         73:55:08:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFfJfjVMqtDi1449trk2YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MzM4NjljMzY0MmI1ZTdlYTAyMjhiZjBlMGIyOTVjZWZj
YzRkZGYwHhcNMjUwODIzMDQwMDQxWhcNMjUwODI0MDQwMDQxWjAzMTEwLwYDVQQD
EygwNjc4M2E3NDA4YWUwYjY3MDM0ZGIyM2U2NDVhNzAzOTMyYTJiNTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n4DPoQ9dXUMQTYo2zMc/uoSiXnm
0jWMTiDsyIG5Z355V4PC9XdVwixJc1agMzLxEO7fc1FVjtPMdGQO7BSWPH9lGfu0
5GOBY6bYSbVgxlxgQgLfTnExglpVSU2eta/al+QUpzVHhIBbRK6Fzhq3LhRFTYPs
1kkSxq9G17ivn0J9v5Dnw/R3g2WRqSo2MtbyZjjix3fJsG0gQko6MW6TWj0oSFTk
FYyyk0YypXtrhBwKlgdbq12tybktKtFWwBHS+bNJ+PF+mHwaH6SKFAR/fTRtS67+
s7UFAwnIOvlFv9KANAJjvj9ZIMhoyLevsaIwp/4MmCueKTNnbPGIG3FI2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZ4OnQIrgtnA02yPmRacDkyorUCMB8GA1UdIwQY
MBaAFPYzhpw2QrXn6gIovw4LKVzvzE3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWpPR25EWkN0ZWZxQWlpX0Rnc3BYT19NVGQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82ZGE1NjItYTgzNi00OGNjLWFhNTct
OGM0YmI0NDg1ZjM0LzEvOWpPR25EWkN0ZWZxQWlpX0Rnc3BYT19NVGQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82ZGE1NjItYTgzNi00OGNjLWFhNTctOGM0YmI0NDg1ZjM0
LzEvOWpPR25EWkN0ZWZxQWlpX0Rnc3BYT19NVGQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZw5LMiTz
c9moyrk3qsinN2qcXoRu7tXfQA4g6/7Qwyeg0oSBoFKLJF4maFNVI2/voKWB7l1h
dYeKhum3eBK0fWfeDuXuh6H5eBYHCBN5GYA4DO/Dryg1od9nNeZZUDdRGfkQOHhe
VPZ4Jjt5LCCEn5jRx2Ncwi55t8iHt/nvKgTYcSGC9xQPB3gSRBG8FZsDv2DXroSQ
CiSsWnMI3xsoIeYESnOUaKC/i0vL3zrm2wrAd1eQ3w4+44iiQwl2Y7w8c2qZ8OvJ
BPzqadV8Dw+DCv6lvKXaUm7tvmlD95iJ25iPXxoaJjAasIdBk7I8lUex4IL8aQ+Z
p+xiKFFHc1UINg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:10 2025 by rpki-client