Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
File:                     9X2cj_wgS2294BIFMDvfi1BjiqY.mft (raw, json)
Hash identifier:          MX0W4wVnh+JqxmRCO4TuTfAHJgjv7RcIuFU538cl7s4=
Subject key identifier:   DB:E0:D8:6F:3F:2E:80:FB:58:C4:A8:6E:1F:88:E1:57:53:EF:F8:72
Authority key identifier: F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
Certificate issuer:       /CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Certificate serial:       019770AC4F9DC8B4B12EF5D0D4CEC1D278F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
Manifest number:          96
Signing time:             Sat 14 Jun 2025 23:00:30 +0000
Manifest this update:     Sat 14 Jun 2025 23:00:30 +0000
Manifest next update:     Sun 15 Jun 2025 23:00:30 +0000
Files and hashes:         1: 9X2cj_wgS2294BIFMDvfi1BjiqY.crl (hash: hFY2cy5VGXqbnpX3axv3Knijz4DD8xsx8wK6xtTL6QI=)
                          2: blFPI1QT3vGyXWS1-axkqAT7T1o.roa (hash: 9ZF4v61ldXuDLq/JdKEO0mrKJOTY13vVthxskJAXAEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:ac:4f:9d:c8:b4:b1:2e:f5:d0:d4:ce:c1:d2:78:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
        Validity
            Not Before: Jun 14 23:00:30 2025 GMT
            Not After : Jun 15 23:00:30 2025 GMT
        Subject: CN=dbe0d86f3f2e80fb58c4a86e1f88e15753eff872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:41:fe:89:6c:01:94:48:8a:56:c9:45:19:80:
                    a5:a9:c8:09:64:60:12:0a:4a:29:14:08:87:8e:06:
                    ad:4b:c2:94:23:4f:fb:2f:03:a9:e2:d6:ee:ad:a1:
                    55:17:1d:96:e2:fe:d5:57:14:60:b3:f3:76:78:9c:
                    1c:e0:fd:eb:95:a2:6f:c4:1f:ce:26:6f:48:c3:a9:
                    27:b6:93:ba:83:92:1a:75:62:48:4c:b9:c5:9d:b6:
                    41:04:2a:5f:6f:f2:8e:c6:53:be:c0:57:17:55:4b:
                    62:01:65:6a:75:a7:9e:7e:c6:73:f0:94:a0:cb:92:
                    fe:a1:0a:22:3c:c2:5d:30:8b:95:58:a5:3b:60:b8:
                    72:2c:dd:af:37:88:03:72:f0:ba:b9:5a:10:a3:80:
                    69:38:ad:8e:91:f8:8f:23:27:83:70:f9:4a:db:f1:
                    34:5b:e9:c4:f3:87:5f:fb:d5:9d:e0:c3:f2:79:d9:
                    d3:8e:10:b8:57:97:60:e8:d2:23:02:5b:28:87:dd:
                    5e:42:d9:10:d7:1d:56:94:0a:0d:58:71:ca:a6:92:
                    7e:38:8f:80:59:a7:0f:a8:6d:86:85:71:96:55:72:
                    83:05:2d:a1:c8:b3:6d:35:28:b5:d2:91:cb:31:51:
                    46:40:05:49:28:81:96:49:99:62:88:f1:74:07:fa:
                    37:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E0:D8:6F:3F:2E:80:FB:58:C4:A8:6E:1F:88:E1:57:53:EF:F8:72
            X509v3 Authority Key Identifier:
                keyid:F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:de:11:56:66:0f:44:2b:90:27:cb:90:96:83:15:cf:91:a8:
         63:a0:b2:3a:7d:e9:68:b1:6b:bc:4b:9a:f1:0f:21:2d:f3:78:
         cf:db:d4:7d:38:12:04:8c:48:f6:8d:21:cc:59:62:10:64:86:
         5d:fd:32:bb:f1:f5:fd:32:b5:ad:dd:04:c8:a6:0b:3d:c2:fe:
         2c:52:45:05:3c:6e:9d:00:87:29:41:16:55:1c:1d:04:b5:24:
         da:30:64:01:56:28:1a:f5:1b:ec:93:86:8d:5c:1e:f4:3e:d2:
         3d:1e:cf:59:cf:ef:ae:6a:65:58:ec:22:78:fc:eb:34:58:b4:
         46:20:5d:45:51:bd:d1:60:9b:74:54:9f:6b:1e:5c:e9:dc:78:
         86:ca:b5:3f:1e:6b:eb:25:8f:78:6e:63:ff:b0:28:34:58:38:
         6f:96:21:4e:ec:55:f7:7b:a6:a0:b8:b6:d4:b9:9b:3f:ad:be:
         4e:6e:4e:4f:bc:54:be:d2:44:d8:4f:f9:5d:d3:cc:ac:f3:e4:
         bc:ce:6d:ce:3e:ce:00:f3:03:9e:80:51:05:c3:c8:e1:80:b2:
         d4:e8:5d:51:54:bb:a6:73:96:ae:59:5c:5c:d4:1d:e7:1c:d5:
         e1:16:08:b6:64:e4:63:e6:8a:4a:05:cf:ca:c6:3d:8b:51:4a:
         c0:c8:29:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwrE+dyLSxLvXQ1M7B0nj5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1N2Q5YzhmZmMyMDRiNmRiZGUwMTIwNTMwM2JkZjhiNTA2
MzhhYTYwHhcNMjUwNjE0MjMwMDMwWhcNMjUwNjE1MjMwMDMwWjAzMTEwLwYDVQQD
EyhkYmUwZDg2ZjNmMmU4MGZiNThjNGE4NmUxZjg4ZTE1NzUzZWZmODcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUH+iWwBlEiKVslFGYClqcgJZGAS
CkopFAiHjgatS8KUI0/7LwOp4tburaFVFx2W4v7VVxRgs/N2eJwc4P3rlaJvxB/O
Jm9Iw6kntpO6g5IadWJITLnFnbZBBCpfb/KOxlO+wFcXVUtiAWVqdaeefsZz8JSg
y5L+oQoiPMJdMIuVWKU7YLhyLN2vN4gDcvC6uVoQo4BpOK2OkfiPIyeDcPlK2/E0
W+nE84df+9Wd4MPyednTjhC4V5dg6NIjAlsoh91eQtkQ1x1WlAoNWHHKppJ+OI+A
WacPqG2GhXGWVXKDBS2hyLNtNSi10pHLMVFGQAVJKIGWSZliiPF0B/o3CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvg2G8/LoD7WMSobh+I4VdT7/hyMB8GA1UdIwQY
MBaAFPV9nI/8IEttveASBTA734tQY4qmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVgyY2pfd2dTMjI5NEJJRk1EdmZpMUJqaXFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lNTBiODMtYjI5Mi00MTE3LTg5OTEt
YjY3ZDMyMDk5MGM2LzEvOVgyY2pfd2dTMjI5NEJJRk1EdmZpMUJqaXFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lNTBiODMtYjI5Mi00MTE3LTg5OTEtYjY3ZDMyMDk5MGM2
LzEvOVgyY2pfd2dTMjI5NEJJRk1EdmZpMUJqaXFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyN4RVmYP
RCuQJ8uQloMVz5GoY6CyOn3paLFrvEua8Q8hLfN4z9vUfTgSBIxI9o0hzFliEGSG
Xf0yu/H1/TK1rd0EyKYLPcL+LFJFBTxunQCHKUEWVRwdBLUk2jBkAVYoGvUb7JOG
jVwe9D7SPR7PWc/vrmplWOwiePzrNFi0RiBdRVG90WCbdFSfax5c6dx4hsq1Px5r
6yWPeG5j/7AoNFg4b5YhTuxV93umoLi21LmbP62+Tm5OT7xUvtJE2E/5XdPMrPPk
vM5tzj7OAPMDnoBRBcPI4YCy1OhdUVS7pnOWrllcXNQd5xzV4RYItmTkY+aKSgXP
ysY9i1FKwMgpXQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:20:53 2025 by rpki-client