Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
File:                     9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft (raw, json)
Hash identifier:          uCyPX1dXds1Oabwy83SL2h1rzBxRWddzIw1TVnCabyQ=
Subject key identifier:   62:93:C4:81:93:A5:9B:3B:5C:B9:08:34:54:7C:15:52:6C:4D:23:B8
Authority key identifier: F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
Certificate issuer:       /CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Certificate serial:       0196BC37202009C9CA130519AD90D33C2F27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
Manifest number:          103A
Signing time:             Sat 10 May 2025 22:00:51 +0000
Manifest this update:     Sat 10 May 2025 22:00:51 +0000
Manifest next update:     Sun 11 May 2025 22:00:51 +0000
Files and hashes:         1: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl (hash: YS82MZMm8edpTQvdvaoyIR2VoPjQ3kbEbYWhsp8IQfg=)
                          2: DaSMaWZYfnj6ceinzYPrOhJJgQA.roa (hash: tLMLMu2mXxzV//rWf7p3b0LjE6TE93dgy9UoXP39ok8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:37:20:20:09:c9:ca:13:05:19:ad:90:d3:3c:2f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
        Validity
            Not Before: May 10 22:00:51 2025 GMT
            Not After : May 11 22:00:51 2025 GMT
        Subject: CN=6293c48193a59b3b5cb90834547c15526c4d23b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:14:3a:2a:11:9f:f1:9b:f2:44:d0:8d:4b:aa:
                    6d:69:36:e5:4c:88:fa:83:0b:c7:2f:87:5d:91:7d:
                    38:7e:60:da:83:dc:a3:46:0d:5d:49:be:99:6c:36:
                    d1:17:79:6a:f1:38:af:4a:63:e8:f2:a8:48:e7:f4:
                    79:bb:f7:a6:a6:28:98:85:36:63:a0:f6:92:b8:22:
                    5f:4f:c4:3c:83:02:79:54:59:1d:34:73:d0:1e:59:
                    c2:43:99:1e:cc:56:dc:dc:37:ac:75:d6:be:fc:0a:
                    02:df:02:c8:44:4a:b2:4e:eb:a5:6c:cb:80:3e:82:
                    b6:15:0b:98:22:13:d5:3e:fd:0b:6e:81:96:c8:0f:
                    b4:be:18:a3:81:df:b4:63:d1:dc:c7:f9:5c:7b:b2:
                    fd:a0:9b:3f:01:be:21:b3:95:65:55:e9:4d:4e:e9:
                    b6:7e:2a:c4:03:08:00:0c:f7:c3:c8:5c:29:d4:c8:
                    2a:90:1a:36:67:be:62:89:10:26:d7:79:a2:7c:94:
                    c2:f6:0b:bb:99:aa:18:8e:91:ab:f8:18:04:78:f1:
                    e9:68:1c:e4:89:f5:c7:5e:44:04:47:cc:6a:bd:c5:
                    40:ad:fa:c5:86:fc:c8:84:50:fa:39:ab:0c:93:82:
                    11:e1:6d:26:b6:c0:1a:d9:8f:7c:06:b8:6b:50:d3:
                    60:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:93:C4:81:93:A5:9B:3B:5C:B9:08:34:54:7C:15:52:6C:4D:23:B8
            X509v3 Authority Key Identifier:
                keyid:F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:83:c3:6c:4c:72:68:dc:fb:bd:03:de:c8:28:4d:19:9e:fd:
         81:99:95:ad:6f:15:99:82:36:54:c5:fa:a4:80:4e:f5:12:96:
         50:3c:e0:36:9e:bb:60:71:81:f1:7d:d8:88:25:dc:5c:c4:39:
         a7:30:71:38:7e:8e:69:e4:f2:7f:6d:e3:c4:5a:a1:10:a3:14:
         ce:96:e2:c0:4c:ee:e0:57:7f:61:a9:2e:c4:c5:0a:8a:5b:e6:
         2d:18:2a:3d:93:4e:22:da:58:ab:05:e1:9d:9c:80:c8:6d:ca:
         a2:96:e3:e4:8b:d8:d7:da:e4:da:08:50:be:a2:13:53:02:46:
         e3:05:6b:f5:7d:dd:f8:07:6b:27:62:ec:d1:be:cb:58:3c:cf:
         0d:e9:c5:4a:fc:1e:19:e1:7d:38:f3:f2:14:ba:9f:8b:53:c9:
         dc:4d:ad:ca:85:72:ea:30:fd:36:d1:62:4c:f3:d1:1d:b6:64:
         6c:ce:1a:99:10:4d:a5:aa:79:fc:3b:52:c1:12:0b:9c:3a:19:
         1d:5e:d7:10:51:d5:37:53:cd:b4:66:99:3a:9d:36:7f:e9:f6:
         06:cf:0c:83:61:8c:fe:72:18:db:a6:2c:c1:72:b8:25:c4:df:
         4a:21:8c:17:56:a6:f8:47:69:de:ef:c3:d1:ca:36:07:6a:fd:
         e6:9e:a0:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8NyAgCcnKEwUZrZDTPC8nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YWM5OWQ3N2E3YTFjODRkZDQ3ZjQzYmI3MjA1MWFhNzNi
MWFhZDYwHhcNMjUwNTEwMjIwMDUxWhcNMjUwNTExMjIwMDUxWjAzMTEwLwYDVQQD
Eyg2MjkzYzQ4MTkzYTU5YjNiNWNiOTA4MzQ1NDdjMTU1MjZjNGQyM2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRQ6KhGf8ZvyRNCNS6ptaTblTIj6
gwvHL4ddkX04fmDag9yjRg1dSb6ZbDbRF3lq8TivSmPo8qhI5/R5u/empiiYhTZj
oPaSuCJfT8Q8gwJ5VFkdNHPQHlnCQ5kezFbc3Desdda+/AoC3wLIREqyTuulbMuA
PoK2FQuYIhPVPv0LboGWyA+0vhijgd+0Y9Hcx/lce7L9oJs/Ab4hs5VlVelNTum2
firEAwgADPfDyFwp1MgqkBo2Z75iiRAm13mifJTC9gu7maoYjpGr+BgEePHpaBzk
ifXHXkQER8xqvcVArfrFhvzIhFD6OasMk4IR4W0mtsAa2Y98BrhrUNNgDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKTxIGTpZs7XLkINFR8FVJsTSO4MB8GA1UdIwQY
MBaAFPSsmdd6ehyE3Uf0O7cgUapzsarWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUt5WjEzcDZISVRkUl9RN3R5QlJxbk94cXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNzY0NDUtMTk4YS00Zjg1LWJiZjgt
NjZjY2E4MWU2YzA3LzEvOUt5WjEzcDZISVRkUl9RN3R5QlJxbk94cXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hNzY0NDUtMTk4YS00Zjg1LWJiZjgtNjZjY2E4MWU2YzA3
LzEvOUt5WjEzcDZISVRkUl9RN3R5QlJxbk94cXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYPDbExy
aNz7vQPeyChNGZ79gZmVrW8VmYI2VMX6pIBO9RKWUDzgNp67YHGB8X3YiCXcXMQ5
pzBxOH6OaeTyf23jxFqhEKMUzpbiwEzu4Fd/YakuxMUKilvmLRgqPZNOItpYqwXh
nZyAyG3Kopbj5IvY19rk2ghQvqITUwJG4wVr9X3d+AdrJ2Ls0b7LWDzPDenFSvwe
GeF9OPPyFLqfi1PJ3E2tyoVy6jD9NtFiTPPRHbZkbM4amRBNpap5/DtSwRILnDoZ
HV7XEFHVN1PNtGaZOp02f+n2Bs8Mg2GM/nIY26YswXK4JcTfSiGMF1am+Edp3u/D
0co2B2r95p6gMw==
-----END CERTIFICATE-----
Generated at Sun May 11 02:04:40 2025 by rpki-client