Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
File:                     m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft (raw, json)
Hash identifier:          HF7y5MwjJjvPZ7B/2E1eQLWJy+zBQpAVxI35bOAJr2Y=
Subject key identifier:   89:B6:3E:0B:C0:C2:26:DD:73:FC:45:18:AB:74:44:30:9B:A1:3E:AC
Authority key identifier: 9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5
Certificate issuer:       /CN=9be4717112fec119f6cfcace7cc4434fb47df8f5
Certificate serial:       019768852599115F2CD7CF919BCEBA0873D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
Manifest number:          10DF
Signing time:             Fri 13 Jun 2025 09:00:45 +0000
Manifest this update:     Fri 13 Jun 2025 09:00:45 +0000
Manifest next update:     Sat 14 Jun 2025 09:00:45 +0000
Files and hashes:         1: QEBRn3jAI_lp2ryrgLPg_-qD0_w.roa (hash: 4DrVU+ddF+HESS/HTUefXV0kpzIAWWdGYlZL3aihd10=)
                          2: m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl (hash: 3pDhZOG/YzmjZQ1SV4lRT1TMZclbokNZmkVyr+BQjH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 09:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:85:25:99:11:5f:2c:d7:cf:91:9b:ce:ba:08:73:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be4717112fec119f6cfcace7cc4434fb47df8f5
        Validity
            Not Before: Jun 13 09:00:45 2025 GMT
            Not After : Jun 14 09:00:45 2025 GMT
        Subject: CN=89b63e0bc0c226dd73fc4518ab7444309ba13eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d0:aa:f5:e5:ce:de:16:6f:0e:90:0b:ce:33:
                    32:da:ba:13:55:13:3c:c7:79:ce:1a:fa:6a:6f:0b:
                    cd:9f:75:0c:23:00:ef:64:06:93:19:79:1b:7b:3c:
                    a2:34:d0:2c:a1:2e:38:3b:a5:5b:5a:71:31:e4:39:
                    1a:ff:93:5b:f7:75:3f:61:02:29:d9:e2:2d:12:44:
                    62:cf:6b:3d:2b:4a:fd:c8:c6:76:ab:f4:63:10:6b:
                    8a:76:3c:2c:55:ff:00:6e:97:cf:02:a4:9f:71:54:
                    b7:7a:49:53:5e:5b:40:7a:2f:a5:af:07:ba:76:6a:
                    af:fa:04:a5:78:fe:e9:c2:39:4b:6b:18:31:0f:91:
                    1f:61:db:cc:0f:10:4f:ac:c3:a3:79:52:55:e1:87:
                    a9:9c:89:71:71:7e:7f:0e:1b:0c:f6:c5:51:1c:7e:
                    c2:47:de:d4:67:93:e3:3b:09:81:6b:b0:f5:e5:51:
                    91:eb:50:15:20:35:34:c8:5b:fe:5f:58:c4:fd:37:
                    24:c4:fb:99:d6:27:f2:f9:a2:c1:04:c3:e4:34:dd:
                    86:6a:ff:a9:0e:cd:23:10:3a:db:51:b9:04:35:39:
                    b7:00:87:96:a6:49:30:73:50:72:b1:a5:5f:4e:9d:
                    00:34:b1:bb:62:22:16:4e:ca:7f:d4:ba:5e:1b:6a:
                    39:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B6:3E:0B:C0:C2:26:DD:73:FC:45:18:AB:74:44:30:9B:A1:3E:AC
            X509v3 Authority Key Identifier:
                keyid:9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e0:c8:d8:09:dd:5b:b8:7a:5d:3f:b5:77:87:66:78:1a:55:
         a4:72:ce:69:37:62:6b:a4:0b:a6:53:d4:5f:82:18:ff:d7:00:
         8c:2b:48:33:bf:97:a3:c9:8f:00:76:60:50:99:0c:1c:c8:c6:
         22:c9:21:9d:60:ef:39:81:c9:c4:36:b1:04:b3:b6:0e:f4:d3:
         d5:9b:56:88:77:5d:f3:b6:6b:7d:47:56:d5:ae:6b:96:e8:a0:
         04:23:27:f2:93:68:f1:0b:e0:c7:03:48:f6:cd:88:d5:f0:97:
         a4:ec:43:3a:7a:4d:0b:c0:4e:bc:48:1f:16:d1:9d:a3:20:ef:
         dd:2f:63:ed:8a:53:5b:20:c5:ea:32:d6:11:cb:eb:e2:31:ca:
         5c:9c:08:5f:56:ba:8f:d1:77:ab:f9:4a:54:61:21:82:a7:59:
         56:60:e1:cf:98:0d:e7:32:86:b6:e5:9c:11:5c:41:8c:e0:79:
         a3:f6:c5:ef:55:a3:23:9e:14:2e:d5:f0:41:52:68:bd:01:a0:
         87:a6:f0:25:6f:04:83:09:bf:8e:7a:8b:f4:31:b3:8d:12:00:
         7c:1d:99:a7:8f:2f:e8:c0:97:72:45:58:7d:e3:ef:b2:b4:55:
         d1:cd:a7:0e:d5:b7:9b:d4:2c:6d:4d:1e:08:c6:ca:62:8c:c4:
         16:15:86:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdohSWZEV8s18+Rm866CHPWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZTQ3MTcxMTJmZWMxMTlmNmNmY2FjZTdjYzQ0MzRmYjQ3
ZGY4ZjUwHhcNMjUwNjEzMDkwMDQ1WhcNMjUwNjE0MDkwMDQ1WjAzMTEwLwYDVQQD
Eyg4OWI2M2UwYmMwYzIyNmRkNzNmYzQ1MThhYjc0NDQzMDliYTEzZWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdCq9eXO3hZvDpALzjMy2roTVRM8
x3nOGvpqbwvNn3UMIwDvZAaTGXkbezyiNNAsoS44O6VbWnEx5Dka/5Nb93U/YQIp
2eItEkRiz2s9K0r9yMZ2q/RjEGuKdjwsVf8AbpfPAqSfcVS3eklTXltAei+lrwe6
dmqv+gSleP7pwjlLaxgxD5EfYdvMDxBPrMOjeVJV4YepnIlxcX5/DhsM9sVRHH7C
R97UZ5PjOwmBa7D15VGR61AVIDU0yFv+X1jE/TckxPuZ1ify+aLBBMPkNN2Gav+p
Ds0jEDrbUbkENTm3AIeWpkkwc1BysaVfTp0ANLG7YiIWTsp/1LpeG2o5yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIm2PgvAwibdc/xFGKt0RDCboT6sMB8GA1UdIwQY
MBaAFJvkcXES/sEZ9s/KznzEQ0+0ffj1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbS1SeGNSTC13Um4yejhyT2ZNUkRUN1I5LVBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85NjA2ZjYtZGEwMi00YmI4LWIzZTQt
ZjAzYWM1OWI1YTk3LzEvbS1SeGNSTC13Um4yejhyT2ZNUkRUN1I5LVBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS85NjA2ZjYtZGEwMi00YmI4LWIzZTQtZjAzYWM1OWI1YTk3
LzEvbS1SeGNSTC13Um4yejhyT2ZNUkRUN1I5LVBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+DI2And
W7h6XT+1d4dmeBpVpHLOaTdia6QLplPUX4IY/9cAjCtIM7+Xo8mPAHZgUJkMHMjG
IskhnWDvOYHJxDaxBLO2DvTT1ZtWiHdd87ZrfUdW1a5rluigBCMn8pNo8QvgxwNI
9s2I1fCXpOxDOnpNC8BOvEgfFtGdoyDv3S9j7YpTWyDF6jLWEcvr4jHKXJwIX1a6
j9F3q/lKVGEhgqdZVmDhz5gN5zKGtuWcEVxBjOB5o/bF71WjI54ULtXwQVJovQGg
h6bwJW8Egwm/jnqL9DGzjRIAfB2Zp48v6MCXckVYfePvsrRV0c2nDtW3m9QsbU0e
CMbKYozEFhWG1Q==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:31:26 2025 by rpki-client