Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
File:                     ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft (raw, json)
Hash identifier:          +D+2Ihl6eYzxkfTUKu55074erQ5O2XbafdctKZ5d5Jw=
Subject key identifier:   9C:BC:FA:14:DC:41:5D:E7:D0:25:CD:70:41:67:1C:BC:3C:B4:1E:4D
Authority key identifier: 92:C5:75:C1:67:E6:03:E4:6D:CD:E4:A0:27:1B:B5:ED:B3:B3:FD:93
Certificate issuer:       /CN=92c575c167e603e46dcde4a0271bb5edb3b3fd93
Certificate serial:       01988242F9706AF0F4DCC8302AC7CB3B4197
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
Manifest number:          9B
Signing time:             Thu 07 Aug 2025 02:01:23 +0000
Manifest this update:     Thu 07 Aug 2025 02:01:23 +0000
Manifest next update:     Fri 08 Aug 2025 02:01:23 +0000
Files and hashes:         1: ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl (hash: YpXQ21Igo0r+9Pr6pLBZKVwA349mnH4pMAy5ZoM/VwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:42:f9:70:6a:f0:f4:dc:c8:30:2a:c7:cb:3b:41:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92c575c167e603e46dcde4a0271bb5edb3b3fd93
        Validity
            Not Before: Aug  7 02:01:23 2025 GMT
            Not After : Aug  8 02:01:23 2025 GMT
        Subject: CN=9cbcfa14dc415de7d025cd7041671cbc3cb41e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6a:d5:eb:8c:46:87:c4:e7:84:a0:c7:55:09:
                    12:52:94:57:d4:46:9a:0e:3c:36:51:2b:97:5a:9d:
                    30:70:12:51:cf:26:f0:66:12:97:bd:4a:d3:15:d9:
                    52:7c:f2:15:ca:85:28:9c:8b:36:14:cf:de:d7:61:
                    cc:98:2f:0a:2e:b9:30:82:46:99:52:92:15:79:2c:
                    b7:c5:ba:e6:1d:c1:62:bb:7e:89:4d:e1:74:4e:33:
                    8f:15:2c:36:18:59:e6:2f:bc:6d:a9:36:ec:23:50:
                    1a:c2:b4:e2:6b:5d:26:75:cd:67:c0:9c:a6:55:d2:
                    cc:68:4a:ee:83:a9:17:6f:fd:3a:a9:b6:58:30:1f:
                    41:b3:c4:5d:bf:5d:48:1d:7c:cc:b3:84:b7:54:c4:
                    2a:59:ca:ea:9d:c4:02:8d:94:c1:2f:9d:85:44:27:
                    0a:56:d5:5c:02:eb:65:e8:cd:b3:12:96:2a:20:cb:
                    98:4d:33:d2:ac:7d:40:8f:ae:8d:00:ff:55:0d:76:
                    04:56:43:37:44:5d:22:d8:7a:ff:28:1c:29:70:04:
                    99:81:9a:dd:a1:de:dd:f1:94:3d:c6:f9:00:25:72:
                    5d:7a:ac:89:e0:7f:51:56:11:02:eb:0c:96:97:d6:
                    43:72:9d:b6:26:37:33:74:3a:9b:e4:19:89:83:25:
                    dd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BC:FA:14:DC:41:5D:E7:D0:25:CD:70:41:67:1C:BC:3C:B4:1E:4D
            X509v3 Authority Key Identifier:
                keyid:92:C5:75:C1:67:E6:03:E4:6D:CD:E4:A0:27:1B:B5:ED:B3:B3:FD:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f1:65:30:97:85:07:25:aa:62:eb:2e:38:62:3b:1e:31:64:
         38:93:d6:9c:26:cf:d7:ee:7f:07:01:62:6f:53:b7:eb:f4:fe:
         fb:4a:a1:6d:24:39:1d:43:8e:b9:1e:71:2c:15:06:b7:f9:de:
         7b:dc:17:74:da:72:cd:4c:70:c5:e2:c8:58:8b:22:37:12:9c:
         a4:c4:8f:1d:1e:b3:b2:a8:aa:e8:ce:cb:ae:31:01:cf:f6:4e:
         d7:d5:9c:26:84:59:d3:41:a1:19:1d:47:60:cf:e6:5c:ee:50:
         cd:a9:cb:94:4e:e4:95:6d:ea:a2:b9:a0:33:e8:1d:07:33:22:
         40:4f:58:e7:9e:d0:58:e3:07:33:71:68:2f:a2:f7:42:36:9d:
         69:6d:39:c7:5e:0a:7b:e4:4e:ad:5f:6c:9a:4f:6c:b6:26:6f:
         da:07:cb:09:0e:f6:bf:7c:fd:02:23:2d:0b:f1:79:dc:e1:d5:
         b9:32:2d:b4:5a:15:0a:9c:a7:bf:95:00:09:f2:4a:e3:47:ca:
         12:fb:77:7f:3d:58:14:2f:1f:52:f5:c2:37:f8:de:83:67:cf:
         dc:72:cd:04:d1:a5:de:d3:2f:53:8d:93:05:1c:53:ff:75:8d:
         79:4f:65:ed:fd:21:ab:b2:82:4b:90:0d:0c:1b:1a:dd:bc:fe:
         70:5f:3b:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCQvlwavD03MgwKsfLO0GXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYzU3NWMxNjdlNjAzZTQ2ZGNkZTRhMDI3MWJiNWVkYjNi
M2ZkOTMwHhcNMjUwODA3MDIwMTIzWhcNMjUwODA4MDIwMTIzWjAzMTEwLwYDVQQD
Eyg5Y2JjZmExNGRjNDE1ZGU3ZDAyNWNkNzA0MTY3MWNiYzNjYjQxZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2rV64xGh8TnhKDHVQkSUpRX1Eaa
Djw2USuXWp0wcBJRzybwZhKXvUrTFdlSfPIVyoUonIs2FM/e12HMmC8KLrkwgkaZ
UpIVeSy3xbrmHcFiu36JTeF0TjOPFSw2GFnmL7xtqTbsI1AawrTia10mdc1nwJym
VdLMaErug6kXb/06qbZYMB9Bs8Rdv11IHXzMs4S3VMQqWcrqncQCjZTBL52FRCcK
VtVcAutl6M2zEpYqIMuYTTPSrH1Aj66NAP9VDXYEVkM3RF0i2Hr/KBwpcASZgZrd
od7d8ZQ9xvkAJXJdeqyJ4H9RVhEC6wyWl9ZDcp22JjczdDqb5BmJgyXdeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJy8+hTcQV3n0CXNcEFnHLw8tB5NMB8GA1UdIwQY
MBaAFJLFdcFn5gPkbc3koCcbte2zs/2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3NWMXdXZm1BLVJ0emVTZ0p4dTE3Yk96X1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zYjkzMTUtYmFlOC00ZGNlLTgxMDkt
NzdiMTVjNTllMzg3LzEva3NWMXdXZm1BLVJ0emVTZ0p4dTE3Yk96X1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zYjkzMTUtYmFlOC00ZGNlLTgxMDktNzdiMTVjNTllMzg3
LzEva3NWMXdXZm1BLVJ0emVTZ0p4dTE3Yk96X1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/FlMJeF
ByWqYusuOGI7HjFkOJPWnCbP1+5/BwFib1O36/T++0qhbSQ5HUOOuR5xLBUGt/ne
e9wXdNpyzUxwxeLIWIsiNxKcpMSPHR6zsqiq6M7LrjEBz/ZO19WcJoRZ00GhGR1H
YM/mXO5QzanLlE7klW3qormgM+gdBzMiQE9Y557QWOMHM3FoL6L3QjadaW05x14K
e+ROrV9smk9stiZv2gfLCQ72v3z9AiMtC/F53OHVuTIttFoVCpynv5UACfJK40fK
Evt3fz1YFC8fUvXCN/jeg2fP3HLNBNGl3tMvU42TBRxT/3WNeU9l7f0hq7KCS5AN
DBsa3bz+cF872Q==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:29:50 2025 by rpki-client