Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
File:                     9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft (raw, json)
Hash identifier:          QSMSn0Dfg8u++I3xB76TH2roxCZOe9Vn8PMt7+JB9Y4=
Subject key identifier:   D9:A3:5B:4D:12:90:7D:CB:37:12:F6:D7:B9:62:02:06:6E:77:B9:AF
Authority key identifier: F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
Certificate issuer:       /CN=f57331288d908dd762e4b56f003b448f01881d24
Certificate serial:       019879E4704156FDD821017497A63D3F983C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
Manifest number:          0A51
Signing time:             Tue 05 Aug 2025 11:01:10 +0000
Manifest this update:     Tue 05 Aug 2025 11:01:10 +0000
Manifest next update:     Wed 06 Aug 2025 11:01:10 +0000
Files and hashes:         1: 0bWQKA9zOtioaMzmn9TsZ_m-_Ak.roa (hash: XVs6Vl4wE42XJXEmtUVk+/HVBTJz/D0t8xUAsepjFh4=)
                          2: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl (hash: 1its9tCadqyVoI4ghtRk1CB0+zx4Tsr4WF8bGAHJt6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 11:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:e4:70:41:56:fd:d8:21:01:74:97:a6:3d:3f:98:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57331288d908dd762e4b56f003b448f01881d24
        Validity
            Not Before: Aug  5 11:01:10 2025 GMT
            Not After : Aug  6 11:01:10 2025 GMT
        Subject: CN=d9a35b4d12907dcb3712f6d7b96202066e77b9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ca:09:dc:79:aa:1e:44:9b:67:71:9e:11:80:
                    fb:01:f4:be:68:6c:2b:c4:40:40:79:67:c7:33:ab:
                    99:b0:99:24:59:be:e6:f8:42:04:53:fc:52:f1:ed:
                    c7:f6:7f:6d:c7:02:4a:7e:5a:99:0a:36:bb:9c:bf:
                    df:3d:07:6a:40:f9:53:e0:1e:d6:d2:33:3a:0e:27:
                    0c:27:5b:2e:0e:fa:0f:f1:aa:5c:80:76:16:09:35:
                    11:8d:e8:4b:cf:0f:ae:ce:a0:ff:44:bc:af:4e:f9:
                    f8:95:fd:39:1d:85:de:32:7b:9d:dc:44:2d:43:19:
                    5f:c5:1c:e6:62:a0:fc:76:c8:83:80:36:e6:f8:c6:
                    65:3c:a2:32:ac:d3:22:fd:28:4c:5d:35:d8:22:ca:
                    3a:ad:38:cc:07:00:14:48:b8:ad:4b:46:c5:b7:76:
                    2f:c4:65:f5:4d:62:d2:b2:75:c9:7f:83:46:12:cf:
                    43:9f:1e:7b:85:13:60:98:ca:f9:00:bd:0e:d0:34:
                    96:25:54:a0:30:8a:c3:54:83:5e:be:79:0d:48:ed:
                    b5:b7:82:d1:22:e9:28:3d:e6:76:a9:7c:13:41:9e:
                    19:d1:bd:97:b0:5f:44:98:48:7d:1b:6d:f3:70:ab:
                    3f:9b:26:bb:40:5d:65:bd:fe:e9:02:b3:b5:d5:0c:
                    ce:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A3:5B:4D:12:90:7D:CB:37:12:F6:D7:B9:62:02:06:6E:77:B9:AF
            X509v3 Authority Key Identifier:
                keyid:F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:9d:8f:e9:38:3a:4a:46:19:5a:8d:3f:71:c8:81:9b:63:d8:
         65:33:39:8a:a7:4b:e2:05:55:c5:ee:16:df:f7:ab:91:62:b4:
         63:d2:e5:37:b9:cf:a3:69:ed:02:aa:4e:25:6f:52:fd:88:c5:
         92:cd:1b:15:4a:d2:6b:29:6b:b4:05:90:a7:4c:d4:7a:e5:94:
         86:41:c5:3c:67:97:1f:da:99:ab:fd:d2:b1:cc:f2:0b:c5:19:
         b0:9a:14:66:57:02:f8:f3:c7:52:3e:c5:d2:7d:d3:dc:ef:02:
         6e:07:82:95:11:26:23:6e:25:bf:7a:2e:4e:64:9b:1b:8e:c0:
         1c:5e:79:49:04:68:20:62:ed:58:22:a0:db:fd:09:e3:3b:8a:
         20:e1:09:9c:45:11:c5:6d:a7:55:91:4b:7e:73:8d:6c:84:9d:
         db:18:a5:98:45:ba:24:20:48:c8:be:f1:fe:8e:17:82:ca:3a:
         42:34:e3:a1:d8:13:a7:90:af:47:b2:87:68:94:a6:51:87:a6:
         b9:ae:96:c6:3a:fd:9b:86:fd:30:f9:11:45:ba:76:a2:2e:5b:
         16:61:ca:d9:fb:d6:e7:d6:7c:b9:e8:c5:cd:50:64:a4:eb:a5:
         68:ee:a7:47:ac:f9:00:23:46:91:f2:50:31:3a:de:e1:de:9f:
         1c:fd:e4:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh55HBBVv3YIQF0l6Y9P5g8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NzMzMTI4OGQ5MDhkZDc2MmU0YjU2ZjAwM2I0NDhmMDE4
ODFkMjQwHhcNMjUwODA1MTEwMTEwWhcNMjUwODA2MTEwMTEwWjAzMTEwLwYDVQQD
EyhkOWEzNWI0ZDEyOTA3ZGNiMzcxMmY2ZDdiOTYyMDIwNjZlNzdiOWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsoJ3HmqHkSbZ3GeEYD7AfS+aGwr
xEBAeWfHM6uZsJkkWb7m+EIEU/xS8e3H9n9txwJKflqZCja7nL/fPQdqQPlT4B7W
0jM6DicMJ1suDvoP8apcgHYWCTURjehLzw+uzqD/RLyvTvn4lf05HYXeMnud3EQt
QxlfxRzmYqD8dsiDgDbm+MZlPKIyrNMi/ShMXTXYIso6rTjMBwAUSLitS0bFt3Yv
xGX1TWLSsnXJf4NGEs9Dnx57hRNgmMr5AL0O0DSWJVSgMIrDVINevnkNSO21t4LR
IukoPeZ2qXwTQZ4Z0b2XsF9EmEh9G23zcKs/mya7QF1lvf7pArO11QzONQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmjW00SkH3LNxL217liAgZud7mvMB8GA1UdIwQY
MBaAFPVzMSiNkI3XYuS1bwA7RI8BiB0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81YWJiM2EtYjFiNi00ZDcwLWIwOTgt
OGFlYTFmNjhiNzliLzEvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy81YWJiM2EtYjFiNi00ZDcwLWIwOTgtOGFlYTFmNjhiNzli
LzEvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJ2P6Tg6
SkYZWo0/cciBm2PYZTM5iqdL4gVVxe4W3/erkWK0Y9LlN7nPo2ntAqpOJW9S/YjF
ks0bFUrSaylrtAWQp0zUeuWUhkHFPGeXH9qZq/3SsczyC8UZsJoUZlcC+PPHUj7F
0n3T3O8CbgeClREmI24lv3ouTmSbG47AHF55SQRoIGLtWCKg2/0J4zuKIOEJnEUR
xW2nVZFLfnONbISd2xilmEW6JCBIyL7x/o4Xgso6QjTjodgTp5CvR7KHaJSmUYem
ua6Wxjr9m4b9MPkRRbp2oi5bFmHK2fvW59Z8uejFzVBkpOulaO6nR6z5ACNGkfJQ
MTre4d6fHP3kYg==
-----END CERTIFICATE-----
Generated at Tue Aug 5 16:43:54 2025 by rpki-client