Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
File:                     c_yJAj6sdKsphWP5ndtx9vFflTg.mft (raw, json)
Hash identifier:          +mdcEZKJKWIskbTRI7ereeEtXcOAZoONfp5hyDsdMeM=
Subject key identifier:   14:C1:36:00:34:F6:51:B4:E2:D5:C3:9F:B1:72:AF:59:60:33:52:12
Authority key identifier: 73:FC:89:02:3E:AC:74:AB:29:85:63:F9:9D:DB:71:F6:F1:5F:95:38
Certificate issuer:       /CN=73fc89023eac74ab298563f99ddb71f6f15f9538
Certificate serial:       0197B7B31CFB9465DD6968956795E3E4361D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_yJAj6sdKsphWP5ndtx9vFflTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
Manifest number:          09C9
Signing time:             Sat 28 Jun 2025 18:00:58 +0000
Manifest this update:     Sat 28 Jun 2025 18:00:58 +0000
Manifest next update:     Sun 29 Jun 2025 18:00:58 +0000
Files and hashes:         1: cS_oROlW9-wwbVo9EJJ4pl2eigE.roa (hash: JJRh33aNovJ8ixT1Vh+De6OT6uSujo/Saa2Iamwl/iI=)
                          2: c_yJAj6sdKsphWP5ndtx9vFflTg.crl (hash: fXceLhTrvgM35HP3muCxbiqeUMuSfo9d3MEdEQ92/HE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_yJAj6sdKsphWP5ndtx9vFflTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:1c:fb:94:65:dd:69:68:95:67:95:e3:e4:36:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73fc89023eac74ab298563f99ddb71f6f15f9538
        Validity
            Not Before: Jun 28 18:00:58 2025 GMT
            Not After : Jun 29 18:00:58 2025 GMT
        Subject: CN=14c1360034f651b4e2d5c39fb172af5960335212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:95:cc:d9:4f:2d:e4:67:92:6a:6a:88:8f:
                    eb:27:47:f8:83:d4:89:2e:86:f3:c7:3d:b6:69:0c:
                    5a:60:bb:c9:77:85:63:85:88:fb:4a:03:51:7f:bb:
                    ef:14:5b:20:d8:de:b1:0c:39:12:a2:67:73:b8:39:
                    ac:ee:8a:10:0f:1d:51:50:cc:70:f8:41:cc:2c:09:
                    5d:5b:3f:49:89:d5:64:57:27:2f:8f:5a:3d:52:f0:
                    6d:03:78:ec:6a:5c:bb:9b:34:ee:76:66:f9:3e:39:
                    6b:8c:2c:fe:a1:69:04:b1:73:b5:1f:ce:91:54:4b:
                    1b:d9:b1:42:79:18:25:8d:dc:7f:9b:d9:3d:07:0e:
                    42:33:92:15:41:d2:b5:08:63:70:29:3b:27:95:61:
                    fb:a8:ec:04:53:88:be:12:d3:7c:a9:e1:85:c6:60:
                    5e:f1:39:cd:6d:db:e9:9b:0a:78:cb:82:c9:d6:6c:
                    eb:ac:58:1b:0b:d9:cb:db:21:67:ac:2b:1c:c3:3e:
                    33:ee:6b:9c:63:4c:d1:12:34:ee:4f:06:39:d1:a0:
                    7c:79:cb:4e:64:4f:e8:bf:48:d8:fe:4d:87:1d:c7:
                    ba:56:31:fd:44:fa:e2:da:b2:cd:f6:e2:a8:25:4a:
                    26:7d:48:0e:c9:f5:9d:a4:a2:38:a6:eb:f1:88:e1:
                    bc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C1:36:00:34:F6:51:B4:E2:D5:C3:9F:B1:72:AF:59:60:33:52:12
            X509v3 Authority Key Identifier:
                keyid:73:FC:89:02:3E:AC:74:AB:29:85:63:F9:9D:DB:71:F6:F1:5F:95:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_yJAj6sdKsphWP5ndtx9vFflTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a9:9d:37:bd:53:88:78:d9:a6:f7:f7:46:0d:ae:53:09:be:
         03:30:1f:80:20:51:c4:b1:30:06:18:e1:70:c5:bf:86:94:90:
         38:c3:28:2b:43:10:3e:4f:a0:ce:40:33:9a:d8:3b:4f:b3:b1:
         ff:21:26:6c:70:73:c7:6d:c6:a0:3c:c4:ad:f9:a2:75:dd:4c:
         e5:d6:90:9b:5d:e8:90:b5:6a:f0:b6:e5:9a:71:78:02:f8:1f:
         7d:1f:75:61:e6:d6:72:78:60:b7:12:ad:15:22:fa:c0:d6:4d:
         21:95:b5:65:9c:28:50:fa:4b:44:28:9f:50:d5:63:44:12:19:
         f9:53:c9:13:19:e1:c0:43:b5:4f:7f:e2:55:01:10:0a:fe:d4:
         17:3e:e5:5f:05:8b:3c:16:10:59:9f:7d:b7:6e:d3:82:30:b3:
         a3:df:b0:f4:fb:6e:9d:d5:8d:28:1c:64:41:29:90:ce:b5:d5:
         6e:8a:12:60:54:e8:78:fd:cc:c5:36:ec:f6:32:5c:77:c6:42:
         ff:80:e3:7d:c7:59:2c:60:c2:f9:e3:36:d4:ae:88:f9:1a:cf:
         b4:05:dc:5b:40:18:c2:09:70:6a:42:bb:66:ac:3a:b2:75:34:
         81:61:01:f4:c0:aa:84:e2:2a:26:18:a3:69:ba:d4:ef:73:a1:
         99:12:04:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3sxz7lGXdaWiVZ5Xj5DYdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZmM4OTAyM2VhYzc0YWIyOTg1NjNmOTlkZGI3MWY2ZjE1
Zjk1MzgwHhcNMjUwNjI4MTgwMDU4WhcNMjUwNjI5MTgwMDU4WjAzMTEwLwYDVQQD
EygxNGMxMzYwMDM0ZjY1MWI0ZTJkNWMzOWZiMTcyYWY1OTYwMzM1MjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs72VzNlPLeRnkmpqiI/rJ0f4g9SJ
Lobzxz22aQxaYLvJd4VjhYj7SgNRf7vvFFsg2N6xDDkSomdzuDms7ooQDx1RUMxw
+EHMLAldWz9JidVkVycvj1o9UvBtA3jsaly7mzTudmb5PjlrjCz+oWkEsXO1H86R
VEsb2bFCeRgljdx/m9k9Bw5CM5IVQdK1CGNwKTsnlWH7qOwEU4i+EtN8qeGFxmBe
8TnNbdvpmwp4y4LJ1mzrrFgbC9nL2yFnrCscwz4z7mucY0zREjTuTwY50aB8ectO
ZE/ov0jY/k2HHce6VjH9RPri2rLN9uKoJUomfUgOyfWdpKI4puvxiOG8MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTBNgA09lG04tXDn7Fyr1lgM1ISMB8GA1UdIwQY
MBaAFHP8iQI+rHSrKYVj+Z3bcfbxX5U4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY195SkFqNnNkS3NwaFdQNW5kdHg5dkZmbFRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81NTMwM2EtZjIyNS00YTNmLTgyNWYt
NWRjZDgyZGVmODRmLzEvY195SkFqNnNkS3NwaFdQNW5kdHg5dkZmbFRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81NTMwM2EtZjIyNS00YTNmLTgyNWYtNWRjZDgyZGVmODRm
LzEvY195SkFqNnNkS3NwaFdQNW5kdHg5dkZmbFRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqmdN71T
iHjZpvf3Rg2uUwm+AzAfgCBRxLEwBhjhcMW/hpSQOMMoK0MQPk+gzkAzmtg7T7Ox
/yEmbHBzx23GoDzErfmidd1M5daQm13okLVq8LblmnF4AvgffR91YebWcnhgtxKt
FSL6wNZNIZW1ZZwoUPpLRCifUNVjRBIZ+VPJExnhwEO1T3/iVQEQCv7UFz7lXwWL
PBYQWZ99t27TgjCzo9+w9PtundWNKBxkQSmQzrXVbooSYFToeP3MxTbs9jJcd8ZC
/4DjfcdZLGDC+eM21K6I+RrPtAXcW0AYwglwakK7Zqw6snU0gWEB9MCqhOIqJhij
abrU73OhmRIEeQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:05 2025 by rpki-client