Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.mft
File:                     ndrXzlnL6NGaA0EfocbJug1CAqI.mft (raw, json)
Hash identifier:          BxGpRYCzdNkyrEDeZF0CVYP+LgDTtU8tbTqoZAWOorg=
Subject key identifier:   DA:99:44:EE:52:CA:FD:85:70:A2:3B:0E:C6:58:F1:C0:EB:1E:6D:A5
Authority key identifier: 9D:DA:D7:CE:59:CB:E8:D1:9A:03:41:1F:A1:C6:C9:BA:0D:42:02:A2
Certificate issuer:       /CN=9ddad7ce59cbe8d19a03411fa1c6c9ba0d4202a2
Certificate serial:       01988168D09C13DD937CE5DAA5B1B83F63ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ndrXzlnL6NGaA0EfocbJug1CAqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.mft
Manifest number:          098E
Signing time:             Wed 06 Aug 2025 22:03:06 +0000
Manifest this update:     Wed 06 Aug 2025 22:03:06 +0000
Manifest next update:     Thu 07 Aug 2025 22:03:06 +0000
Files and hashes:         1: ndrXzlnL6NGaA0EfocbJug1CAqI.crl (hash: xagrUJoWF4GFvTkemqGYov6T4SxVGT4czRkg+WYgSZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ndrXzlnL6NGaA0EfocbJug1CAqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:68:d0:9c:13:dd:93:7c:e5:da:a5:b1:b8:3f:63:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ddad7ce59cbe8d19a03411fa1c6c9ba0d4202a2
        Validity
            Not Before: Aug  6 22:03:06 2025 GMT
            Not After : Aug  7 22:03:06 2025 GMT
        Subject: CN=da9944ee52cafd8570a23b0ec658f1c0eb1e6da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ed:71:22:08:85:8f:3c:c1:51:09:98:41:54:
                    83:84:7d:6e:c0:f5:5e:c2:70:78:5d:83:e7:8b:57:
                    c7:ec:04:2d:4d:4a:fc:8c:d5:a5:db:bb:73:8e:a1:
                    e7:ae:8a:a4:56:ac:ad:f9:04:51:ae:b4:08:8f:9e:
                    7f:ef:05:48:96:00:69:63:d0:d9:2e:60:12:52:1b:
                    87:b9:7f:34:5f:b2:da:e1:09:a7:35:d8:d3:07:fc:
                    a8:a7:cc:be:51:b2:ea:9f:21:03:f8:97:22:ad:61:
                    8e:56:44:4c:88:0a:47:d0:5d:2b:30:78:3a:db:a8:
                    cc:70:a2:ed:d8:9a:ce:2e:19:5d:ca:c0:7c:85:79:
                    9d:c0:f9:35:62:7f:b9:de:d8:05:aa:92:b5:9f:fc:
                    4d:64:33:df:2b:38:96:43:db:6c:7d:f6:2e:a1:b5:
                    74:29:50:3e:d0:5c:6c:8c:d9:af:10:a9:65:1a:31:
                    b1:4b:28:a2:1d:92:b5:79:28:3a:f8:05:a6:f9:3e:
                    fe:1b:b2:c5:82:aa:f1:8d:6d:35:03:85:e5:d7:c7:
                    a1:b8:ae:08:eb:ff:43:7d:33:18:96:44:87:17:d8:
                    10:38:89:5b:ab:90:ba:79:ce:2d:78:72:70:9e:e2:
                    0c:62:36:51:4b:e8:8e:17:c3:8a:dd:17:fc:0c:e7:
                    0e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:99:44:EE:52:CA:FD:85:70:A2:3B:0E:C6:58:F1:C0:EB:1E:6D:A5
            X509v3 Authority Key Identifier:
                keyid:9D:DA:D7:CE:59:CB:E8:D1:9A:03:41:1F:A1:C6:C9:BA:0D:42:02:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndrXzlnL6NGaA0EfocbJug1CAqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ea:39:51:46:c7:48:b1:1a:d0:51:1d:4b:cc:26:12:3d:f9:
         19:7f:a3:08:2a:a3:1e:62:57:0b:72:a9:9b:43:0e:ea:dd:26:
         2f:c6:bf:5d:02:49:39:9b:35:8b:8e:e1:94:f3:bf:3c:32:7a:
         36:36:38:4e:77:ec:d1:f2:07:f6:52:08:d0:b4:82:87:3a:fc:
         4f:f5:f9:1a:f1:e6:51:9b:d7:53:5c:3f:e7:d0:fc:ec:1e:c7:
         7a:59:40:ca:a3:b3:ed:30:3c:47:44:4a:04:45:68:7d:60:7a:
         e7:d0:c9:c5:07:b5:df:39:b1:76:eb:06:a6:d8:99:5e:60:14:
         2c:01:23:70:3a:48:cd:29:1d:01:ef:dc:fe:ff:8b:a8:26:03:
         3d:51:37:53:4b:a8:54:1e:01:f9:01:f5:cf:45:bf:e0:ba:bd:
         84:1e:e2:51:e4:ed:50:a7:66:4e:7e:b4:cb:49:bc:79:15:1d:
         4f:09:77:12:95:54:9b:18:e8:e8:d4:3d:f0:f2:7a:86:45:f2:
         11:9d:49:9e:05:b9:f9:7a:85:ef:ff:d9:3d:d0:58:ca:8c:78:
         f3:37:44:27:45:7f:af:7f:74:6d:e9:b9:ff:68:dd:c5:eb:45:
         84:ef:60:9b:52:e5:fc:17:5e:de:83:b7:b6:21:4d:31:17:e5:
         18:54:a7:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBaNCcE92TfOXapbG4P2PtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZGFkN2NlNTljYmU4ZDE5YTAzNDExZmExYzZjOWJhMGQ0
MjAyYTIwHhcNMjUwODA2MjIwMzA2WhcNMjUwODA3MjIwMzA2WjAzMTEwLwYDVQQD
EyhkYTk5NDRlZTUyY2FmZDg1NzBhMjNiMGVjNjU4ZjFjMGViMWU2ZGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu1xIgiFjzzBUQmYQVSDhH1uwPVe
wnB4XYPni1fH7AQtTUr8jNWl27tzjqHnroqkVqyt+QRRrrQIj55/7wVIlgBpY9DZ
LmASUhuHuX80X7La4QmnNdjTB/yop8y+UbLqnyED+JcirWGOVkRMiApH0F0rMHg6
26jMcKLt2JrOLhldysB8hXmdwPk1Yn+53tgFqpK1n/xNZDPfKziWQ9tsffYuobV0
KVA+0FxsjNmvEKllGjGxSyiiHZK1eSg6+AWm+T7+G7LFgqrxjW01A4Xl18ehuK4I
6/9DfTMYlkSHF9gQOIlbq5C6ec4teHJwnuIMYjZRS+iOF8OK3Rf8DOcOWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqZRO5Syv2FcKI7DsZY8cDrHm2lMB8GA1UdIwQY
MBaAFJ3a185Zy+jRmgNBH6HGyboNQgKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmRyWHpsbkw2TkdhQTBFZm9jYkp1ZzFDQXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MDYzNWEtNjMwZC00ZjY0LWFjNDMt
Y2NhMzUyOGUyMGUyLzEvbmRyWHpsbkw2TkdhQTBFZm9jYkp1ZzFDQXFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MDYzNWEtNjMwZC00ZjY0LWFjNDMtY2NhMzUyOGUyMGUy
LzEvbmRyWHpsbkw2TkdhQTBFZm9jYkp1ZzFDQXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAguo5UUbH
SLEa0FEdS8wmEj35GX+jCCqjHmJXC3Kpm0MO6t0mL8a/XQJJOZs1i47hlPO/PDJ6
NjY4Tnfs0fIH9lII0LSChzr8T/X5GvHmUZvXU1w/59D87B7HellAyqOz7TA8R0RK
BEVofWB659DJxQe13zmxdusGptiZXmAULAEjcDpIzSkdAe/c/v+LqCYDPVE3U0uo
VB4B+QH1z0W/4Lq9hB7iUeTtUKdmTn60y0m8eRUdTwl3EpVUmxjo6NQ98PJ6hkXy
EZ1JngW5+XqF7//ZPdBYyox48zdEJ0V/r390bem5/2jdxetFhO9gm1Ll/Bde3oO3
tiFNMRflGFSnSw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:13:46 2025 by rpki-client