Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
File:                     _sl9DBu8zD2GcSKhFxD1X3AjAI4.mft (raw, json)
Hash identifier:          CqbnL2cZmYFeYt1p5TdohCTrEXP7U38vTKDn2sCU1TE=
Subject key identifier:   94:F8:BF:F8:B1:E2:0A:9A:6C:50:DE:01:B7:CD:8E:50:B5:8F:DD:30
Authority key identifier: FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E
Certificate issuer:       /CN=fec97d0c1bbccc3d867122a11710f55f7023008e
Certificate serial:       0198820B6EB504AD2002B28DFD59301B5461
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
Manifest number:          0516
Signing time:             Thu 07 Aug 2025 01:00:43 +0000
Manifest this update:     Thu 07 Aug 2025 01:00:43 +0000
Manifest next update:     Fri 08 Aug 2025 01:00:43 +0000
Files and hashes:         1: _sl9DBu8zD2GcSKhFxD1X3AjAI4.crl (hash: TlK+Xf0+iXrACTGxr7/cvWpHzM0O75Y/yy9mNDanYxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:0b:6e:b5:04:ad:20:02:b2:8d:fd:59:30:1b:54:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec97d0c1bbccc3d867122a11710f55f7023008e
        Validity
            Not Before: Aug  7 01:00:43 2025 GMT
            Not After : Aug  8 01:00:43 2025 GMT
        Subject: CN=94f8bff8b1e20a9a6c50de01b7cd8e50b58fdd30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:20:89:84:16:4a:56:8f:28:77:48:bb:2d:49:
                    02:84:99:40:8c:31:4d:37:89:62:09:27:dd:c6:20:
                    cb:a5:2e:54:23:03:55:62:85:1f:96:19:4a:80:43:
                    a4:64:32:68:23:7b:cb:df:22:5b:7c:bc:98:5f:d1:
                    25:3c:ee:d6:82:0c:47:98:df:5e:ec:57:23:8d:77:
                    36:c4:18:b7:e6:cb:06:cf:2c:80:46:d9:94:fd:db:
                    1d:ab:a8:4d:73:94:60:e5:0a:2b:37:0e:28:52:64:
                    20:e2:69:f9:8c:fc:24:6e:8f:70:c7:e3:98:5a:fb:
                    ed:15:4f:34:fb:68:fc:62:9a:e9:ad:7a:8f:e6:bf:
                    30:d3:cd:78:ac:d1:96:08:f8:9b:58:73:86:97:84:
                    57:73:9c:87:f2:86:31:f6:09:8d:92:60:56:7c:75:
                    7e:e8:3d:fc:d4:cb:64:3d:5a:46:81:3a:b7:83:f2:
                    2e:78:f2:51:df:69:59:ca:e4:fe:2b:55:1d:83:40:
                    32:89:93:65:89:c0:16:ff:0d:04:b2:58:05:df:e4:
                    fd:22:c6:13:5b:b1:d2:8b:d7:96:a5:7f:73:f6:35:
                    00:17:5b:3a:58:2e:f2:e2:12:2b:87:9c:98:3f:b9:
                    f1:38:6a:b5:05:4e:71:e7:55:c9:da:12:28:66:9a:
                    85:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F8:BF:F8:B1:E2:0A:9A:6C:50:DE:01:B7:CD:8E:50:B5:8F:DD:30
            X509v3 Authority Key Identifier:
                keyid:FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b8:37:db:d0:95:8d:aa:34:17:0c:5c:de:98:24:2e:53:b5:
         b7:2d:7f:75:21:a3:e8:39:50:ac:0a:44:74:33:ce:dd:28:1c:
         fe:0c:84:ca:eb:e2:c0:e9:6d:dc:e2:30:58:6c:ed:fb:54:8f:
         f1:ff:7e:69:f5:5f:34:70:65:a9:39:1f:44:1c:fd:3a:df:17:
         2c:1c:ea:8a:8a:93:93:0c:fe:78:0f:11:83:1a:4c:af:ab:e3:
         0d:63:8a:be:65:07:31:aa:62:9f:a1:84:2b:99:75:c0:f4:5b:
         35:6d:1d:2b:61:1d:12:26:7b:79:92:d8:ea:66:6a:5a:af:b4:
         e5:53:06:d5:b1:f3:52:dc:9e:7a:26:da:fa:b8:4c:fb:0e:f0:
         37:bc:b8:95:66:2a:10:ae:30:a7:2f:a5:c5:6d:28:90:90:99:
         5f:3b:1e:20:0d:3b:77:9b:d9:f0:6a:51:b1:0f:ca:f7:93:cc:
         bf:ba:18:8d:f7:20:4f:e8:a8:c3:1d:04:df:06:97:88:1a:97:
         15:47:27:6e:66:3a:6f:53:7a:b0:84:74:71:3b:b1:6e:13:48:
         a0:60:b2:53:e2:04:41:36:ca:16:23:db:26:da:eb:b4:28:f2:
         ca:bd:1f:92:c9:ea:48:d5:29:5f:f1:e0:c0:7a:89:9e:84:f8:
         fd:61:5b:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCC261BK0gArKN/VkwG1RhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzk3ZDBjMWJiY2NjM2Q4NjcxMjJhMTE3MTBmNTVmNzAy
MzAwOGUwHhcNMjUwODA3MDEwMDQzWhcNMjUwODA4MDEwMDQzWjAzMTEwLwYDVQQD
Eyg5NGY4YmZmOGIxZTIwYTlhNmM1MGRlMDFiN2NkOGU1MGI1OGZkZDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iCJhBZKVo8od0i7LUkChJlAjDFN
N4liCSfdxiDLpS5UIwNVYoUflhlKgEOkZDJoI3vL3yJbfLyYX9ElPO7WggxHmN9e
7FcjjXc2xBi35ssGzyyARtmU/dsdq6hNc5Rg5QorNw4oUmQg4mn5jPwkbo9wx+OY
WvvtFU80+2j8YprprXqP5r8w0814rNGWCPibWHOGl4RXc5yH8oYx9gmNkmBWfHV+
6D381MtkPVpGgTq3g/IuePJR32lZyuT+K1Udg0AyiZNlicAW/w0EslgF3+T9IsYT
W7HSi9eWpX9z9jUAF1s6WC7y4hIrh5yYP7nxOGq1BU5x51XJ2hIoZpqFzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJT4v/ix4gqabFDeAbfNjlC1j90wMB8GA1UdIwQY
MBaAFP7JfQwbvMw9hnEioRcQ9V9wIwCOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NsOURCdTh6RDJHY1NLaEZ4RDFYM0FqQUk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9iZTc1ODAtNTExMi00YWFiLWFhNzkt
OTM5Zjg3YTMxYmYwLzEvX3NsOURCdTh6RDJHY1NLaEZ4RDFYM0FqQUk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9iZTc1ODAtNTExMi00YWFiLWFhNzktOTM5Zjg3YTMxYmYw
LzEvX3NsOURCdTh6RDJHY1NLaEZ4RDFYM0FqQUk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLg329CV
jao0Fwxc3pgkLlO1ty1/dSGj6DlQrApEdDPO3Sgc/gyEyuviwOlt3OIwWGzt+1SP
8f9+afVfNHBlqTkfRBz9Ot8XLBzqioqTkwz+eA8RgxpMr6vjDWOKvmUHMapin6GE
K5l1wPRbNW0dK2EdEiZ7eZLY6mZqWq+05VMG1bHzUtyeeiba+rhM+w7wN7y4lWYq
EK4wpy+lxW0okJCZXzseIA07d5vZ8GpRsQ/K95PMv7oYjfcgT+iowx0E3waXiBqX
FUcnbmY6b1N6sIR0cTuxbhNIoGCyU+IEQTbKFiPbJtrrtCjyyr0fksnqSNUpX/Hg
wHqJnoT4/WFbQQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:40:48 2025 by rpki-client