Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/fa396e-0dd4-4226-ae61-6e89a88dae93/1/09XiCPMtcw1DHUpNTtgJWx59lDE.mft
File:                     09XiCPMtcw1DHUpNTtgJWx59lDE.mft (raw, json)
Hash identifier:          3pRK3Nx90xIqaH9PjkTjM/6HSHw/lbuIS2hI4MLCFJs=
Subject key identifier:   A9:EC:98:D4:A5:5C:A0:0A:27:27:CC:52:07:ED:FB:66:94:BD:B1:5D
Authority key identifier: D3:D5:E2:08:F3:2D:73:0D:43:1D:4A:4D:4E:D8:09:5B:1E:7D:94:31
Certificate issuer:       /CN=d3d5e208f32d730d431d4a4d4ed8095b1e7d9431
Certificate serial:       019776E54B14C1284388497F2DB352B0E99A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/09XiCPMtcw1DHUpNTtgJWx59lDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/fa396e-0dd4-4226-ae61-6e89a88dae93/1/09XiCPMtcw1DHUpNTtgJWx59lDE.mft
Manifest number:          C1
Signing time:             Mon 16 Jun 2025 04:00:27 +0000
Manifest this update:     Mon 16 Jun 2025 04:00:27 +0000
Manifest next update:     Tue 17 Jun 2025 04:00:27 +0000
Files and hashes:         1: 09XiCPMtcw1DHUpNTtgJWx59lDE.crl (hash: 6nPd9F806yxTfbaMCP0hUdEIS0V4zW4vVKggYU2qBtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/fa396e-0dd4-4226-ae61-6e89a88dae93/1/09XiCPMtcw1DHUpNTtgJWx59lDE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/fa396e-0dd4-4226-ae61-6e89a88dae93/1/09XiCPMtcw1DHUpNTtgJWx59lDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/09XiCPMtcw1DHUpNTtgJWx59lDE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 04:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:e5:4b:14:c1:28:43:88:49:7f:2d:b3:52:b0:e9:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3d5e208f32d730d431d4a4d4ed8095b1e7d9431
        Validity
            Not Before: Jun 16 04:00:27 2025 GMT
            Not After : Jun 17 04:00:27 2025 GMT
        Subject: CN=a9ec98d4a55ca00a2727cc5207edfb6694bdb15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c4:0d:56:c2:47:0d:af:60:24:99:86:0f:c9:
                    40:3b:30:3a:85:c5:c7:d8:86:42:3a:ad:39:d1:4d:
                    68:f7:22:ff:1d:c3:de:79:f3:5b:57:6d:86:83:50:
                    b1:ab:52:e5:1e:25:cb:2a:2f:ec:29:11:ff:2d:14:
                    ed:d9:49:56:8c:67:c9:81:93:c9:ec:eb:0a:1d:32:
                    05:bc:d9:af:b6:4e:b6:53:4d:37:8b:53:62:81:bc:
                    38:1b:04:b4:34:a0:26:5a:a7:c0:a2:df:5f:81:57:
                    80:d7:37:e0:86:b1:6f:6e:7d:27:89:ee:82:cb:19:
                    3e:dc:e4:88:86:dc:03:97:e5:66:be:0b:d2:d8:59:
                    d7:2b:ea:f4:ee:cb:d0:3f:c3:30:a5:cb:7f:d0:7a:
                    e8:f5:e0:13:e8:e6:c2:d4:1b:be:95:d4:cd:7b:55:
                    fc:a4:0e:af:40:c2:4c:32:a7:e2:b1:ae:f8:2b:5f:
                    95:61:39:5a:36:ff:b0:26:b0:e7:9d:54:02:60:0d:
                    84:72:05:4e:af:ea:0c:21:b5:e7:c5:1e:7a:64:ac:
                    1f:9e:ae:3d:4d:0d:a1:90:fe:b4:aa:f2:d0:38:8f:
                    db:43:71:d3:f9:ea:de:7a:f3:62:91:f3:37:19:70:
                    c4:43:b0:f9:47:cc:ce:6e:10:82:17:d4:df:85:ee:
                    f2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EC:98:D4:A5:5C:A0:0A:27:27:CC:52:07:ED:FB:66:94:BD:B1:5D
            X509v3 Authority Key Identifier:
                keyid:D3:D5:E2:08:F3:2D:73:0D:43:1D:4A:4D:4E:D8:09:5B:1E:7D:94:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09XiCPMtcw1DHUpNTtgJWx59lDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/fa396e-0dd4-4226-ae61-6e89a88dae93/1/09XiCPMtcw1DHUpNTtgJWx59lDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/fa396e-0dd4-4226-ae61-6e89a88dae93/1/09XiCPMtcw1DHUpNTtgJWx59lDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:01:a4:5b:dd:89:69:d9:e8:35:bf:87:69:78:49:a0:4e:a1:
         1b:e4:bb:e2:4b:95:f2:cd:86:d6:12:f3:65:4c:3f:77:e5:da:
         d5:46:35:6c:7e:2a:d7:b4:94:a9:14:59:de:64:88:0e:51:8c:
         1f:f0:b9:37:4f:64:5f:e6:1e:13:26:2e:6b:06:32:80:b6:49:
         f2:1f:72:cf:49:35:fb:e2:fc:b8:6d:f5:9e:19:07:e2:60:36:
         04:d7:70:99:5e:4f:37:1c:ac:a0:c1:21:f9:2b:70:f5:3a:46:
         3a:38:5a:7f:73:cf:ab:21:7f:70:84:72:6c:5f:a6:01:46:27:
         cb:c4:53:d3:9d:b2:5d:e6:c8:c4:b4:42:13:f1:1d:36:7b:be:
         93:0b:bc:3c:5b:47:ed:3f:08:f4:87:48:8c:8b:77:0f:4b:5a:
         35:05:4e:05:59:3e:c6:48:6b:59:e2:6e:74:d0:35:46:bd:80:
         ae:6a:e4:9a:4a:0a:ae:4f:67:58:ef:f0:d0:b4:9f:3e:d9:cb:
         01:05:15:c2:cf:09:51:6f:6d:b7:24:32:4a:f1:1e:68:82:14:
         8a:bc:67:03:ea:2b:1c:ac:26:01:65:45:0d:dd:5b:8a:51:79:
         ea:9d:66:66:d8:12:d4:7e:2a:a8:e6:9c:e6:55:01:f1:d5:cc:
         b8:ff:79:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd25UsUwShDiEl/LbNSsOmaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZDVlMjA4ZjMyZDczMGQ0MzFkNGE0ZDRlZDgwOTViMWU3
ZDk0MzEwHhcNMjUwNjE2MDQwMDI3WhcNMjUwNjE3MDQwMDI3WjAzMTEwLwYDVQQD
EyhhOWVjOThkNGE1NWNhMDBhMjcyN2NjNTIwN2VkZmI2Njk0YmRiMTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MQNVsJHDa9gJJmGD8lAOzA6hcXH
2IZCOq050U1o9yL/HcPeefNbV22Gg1Cxq1LlHiXLKi/sKRH/LRTt2UlWjGfJgZPJ
7OsKHTIFvNmvtk62U003i1Nigbw4GwS0NKAmWqfAot9fgVeA1zfghrFvbn0nie6C
yxk+3OSIhtwDl+VmvgvS2FnXK+r07svQP8Mwpct/0Hro9eAT6ObC1Bu+ldTNe1X8
pA6vQMJMMqfisa74K1+VYTlaNv+wJrDnnVQCYA2EcgVOr+oMIbXnxR56ZKwfnq49
TQ2hkP60qvLQOI/bQ3HT+ereevNikfM3GXDEQ7D5R8zObhCCF9Tfhe7yRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnsmNSlXKAKJyfMUgft+2aUvbFdMB8GA1UdIwQY
MBaAFNPV4gjzLXMNQx1KTU7YCVsefZQxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDlYaUNQTXRjdzFESFVwTlR0Z0pXeDU5bERFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mYTM5NmUtMGRkNC00MjI2LWFlNjEt
NmU4OWE4OGRhZTkzLzEvMDlYaUNQTXRjdzFESFVwTlR0Z0pXeDU5bERFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mYTM5NmUtMGRkNC00MjI2LWFlNjEtNmU4OWE4OGRhZTkz
LzEvMDlYaUNQTXRjdzFESFVwTlR0Z0pXeDU5bERFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApwGkW92J
adnoNb+HaXhJoE6hG+S74kuV8s2G1hLzZUw/d+Xa1UY1bH4q17SUqRRZ3mSIDlGM
H/C5N09kX+YeEyYuawYygLZJ8h9yz0k1++L8uG31nhkH4mA2BNdwmV5PNxysoMEh
+Stw9TpGOjhaf3PPqyF/cIRybF+mAUYny8RT052yXebIxLRCE/EdNnu+kwu8PFtH
7T8I9IdIjIt3D0taNQVOBVk+xkhrWeJudNA1Rr2ArmrkmkoKrk9nWO/w0LSfPtnL
AQUVws8JUW9ttyQySvEeaIIUirxnA+orHKwmAWVFDd1bilF56p1mZtgS1H4qqOac
5lUB8dXMuP95QQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:10:51 2025 by rpki-client