Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
File:                     crsdyZa54KP6ZjLPgHp8IFCUnEY.mft (raw, json)
Hash identifier:          R+2F0hC+GYt5NlExRWQHiNTRRjBhTnxLglyncW6ZO8U=
Subject key identifier:   D2:69:F7:51:14:4E:93:77:81:11:BB:7D:A6:B8:8A:13:13:16:81:FA
Authority key identifier: 72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46
Certificate issuer:       /CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46
Certificate serial:       019880C26AA6E8F19ED29F106337E81145B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
Manifest number:          090C
Signing time:             Wed 06 Aug 2025 19:01:21 +0000
Manifest this update:     Wed 06 Aug 2025 19:01:21 +0000
Manifest next update:     Thu 07 Aug 2025 19:01:21 +0000
Files and hashes:         1: crsdyZa54KP6ZjLPgHp8IFCUnEY.crl (hash: LyBckgPfxkBW3Tl4EYG2K0li9Ys0xWg4OBOys204ZAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:c2:6a:a6:e8:f1:9e:d2:9f:10:63:37:e8:11:45:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46
        Validity
            Not Before: Aug  6 19:01:21 2025 GMT
            Not After : Aug  7 19:01:21 2025 GMT
        Subject: CN=d269f751144e93778111bb7da6b88a13131681fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8a:46:7f:84:13:de:52:f8:d4:2b:c1:8b:02:
                    b4:21:26:90:5f:4b:58:19:dc:f4:10:30:f6:ac:65:
                    4f:4c:90:84:7b:42:5c:a4:5f:6f:fa:5f:f8:b8:8d:
                    96:d0:27:44:9e:18:8b:57:48:1b:b3:bc:1b:e7:61:
                    dd:0b:60:48:53:ee:d7:2b:ac:7e:91:0a:b6:7f:72:
                    ac:8b:33:f6:79:4e:c4:7d:e0:c7:bf:ac:6f:05:78:
                    5f:74:93:b3:87:7e:2f:96:93:2b:30:2d:99:d1:b4:
                    28:eb:c7:59:ce:49:a1:f2:07:34:88:4e:c5:3f:1f:
                    c1:6f:cd:ae:b1:05:6c:0e:6c:eb:c7:9a:e5:50:66:
                    e6:50:47:2d:c9:a9:4a:9f:00:9c:de:15:2b:43:92:
                    06:15:ba:39:04:db:e4:38:07:42:65:34:29:d1:d5:
                    58:64:de:68:9c:56:cd:65:6d:de:e7:4c:87:20:74:
                    8e:e9:70:8a:6e:c7:c7:fa:14:22:63:0d:2e:25:3e:
                    5c:f4:0e:55:b4:7d:a9:f1:7f:bd:ab:ab:22:8f:e5:
                    04:38:3a:ed:20:81:59:4f:75:7f:5c:62:af:69:fc:
                    bd:e2:ef:01:da:c7:5f:45:b6:1b:ea:91:e4:b8:f0:
                    d9:e4:21:02:97:ec:ea:ad:48:21:89:67:b3:85:f1:
                    a5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:69:F7:51:14:4E:93:77:81:11:BB:7D:A6:B8:8A:13:13:16:81:FA
            X509v3 Authority Key Identifier:
                keyid:72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b4:78:4a:8b:cd:3a:25:8a:45:ea:4d:16:71:49:64:ed:a9:
         f8:a7:b7:58:f3:fd:35:e6:fe:b4:88:ab:d2:cb:2c:15:b9:16:
         3c:60:c0:3f:1e:d2:3c:13:ef:4d:ca:25:88:81:b5:3d:38:61:
         d9:c5:d6:26:95:62:67:36:56:eb:b1:02:bd:2e:3c:44:88:8a:
         fa:26:38:78:d7:bb:49:6e:87:57:ef:e2:dc:fe:73:2a:1d:db:
         1e:a3:27:b2:2d:00:56:16:43:8e:8f:34:41:5d:eb:1c:08:cf:
         43:93:c0:d2:ce:fc:55:b6:9c:14:61:bc:a9:8f:0d:cf:50:18:
         ca:ce:b4:1e:a0:6e:15:22:06:ef:d1:44:79:b1:7b:48:54:b4:
         93:89:ee:c8:de:92:c4:e8:f6:f9:44:2a:d2:04:15:3f:5a:a7:
         a0:95:69:0f:1d:cb:46:49:dc:15:9f:73:ce:d7:52:89:0a:55:
         ee:16:81:e1:cb:bc:2e:20:79:e4:5c:ab:b7:92:c9:fc:48:2d:
         0a:a2:5f:a3:22:f3:8e:02:59:a0:21:29:c3:bb:b7:08:71:04:
         06:6a:38:6b:94:6c:20:4b:ad:3e:ea:f1:ce:9b:2a:57:c8:0e:
         de:70:73:f3:37:8d:ec:5e:86:21:0e:03:9e:94:41:10:a6:e1:
         a8:2d:b6:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAwmqm6PGe0p8QYzfoEUWxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYmIxZGM5OTZiOWUwYTNmYTY2MzJjZjgwN2E3YzIwNTA5
NDljNDYwHhcNMjUwODA2MTkwMTIxWhcNMjUwODA3MTkwMTIxWjAzMTEwLwYDVQQD
EyhkMjY5Zjc1MTE0NGU5Mzc3ODExMWJiN2RhNmI4OGExMzEzMTY4MWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuopGf4QT3lL41CvBiwK0ISaQX0tY
Gdz0EDD2rGVPTJCEe0JcpF9v+l/4uI2W0CdEnhiLV0gbs7wb52HdC2BIU+7XK6x+
kQq2f3KsizP2eU7EfeDHv6xvBXhfdJOzh34vlpMrMC2Z0bQo68dZzkmh8gc0iE7F
Px/Bb82usQVsDmzrx5rlUGbmUEctyalKnwCc3hUrQ5IGFbo5BNvkOAdCZTQp0dVY
ZN5onFbNZW3e50yHIHSO6XCKbsfH+hQiYw0uJT5c9A5VtH2p8X+9q6sij+UEODrt
IIFZT3V/XGKvafy94u8B2sdfRbYb6pHkuPDZ5CECl+zqrUghiWezhfGl3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJp91EUTpN3gRG7faa4ihMTFoH6MB8GA1UdIwQY
MBaAFHK7HcmWueCj+mYyz4B6fCBQlJxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JzZHlaYTU0S1A2WmpMUGdIcDhJRkNVbkVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kN2E1ZWItZDE4OC00YWEyLWJjYTUt
ZmE1OWRjMmE0NjNiLzEvY3JzZHlaYTU0S1A2WmpMUGdIcDhJRkNVbkVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9kN2E1ZWItZDE4OC00YWEyLWJjYTUtZmE1OWRjMmE0NjNi
LzEvY3JzZHlaYTU0S1A2WmpMUGdIcDhJRkNVbkVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbR4SovN
OiWKRepNFnFJZO2p+Ke3WPP9Neb+tIir0sssFbkWPGDAPx7SPBPvTcoliIG1PThh
2cXWJpViZzZW67ECvS48RIiK+iY4eNe7SW6HV+/i3P5zKh3bHqMnsi0AVhZDjo80
QV3rHAjPQ5PA0s78VbacFGG8qY8Nz1AYys60HqBuFSIG79FEebF7SFS0k4nuyN6S
xOj2+UQq0gQVP1qnoJVpDx3LRkncFZ9zztdSiQpV7haB4cu8LiB55Fyrt5LJ/Egt
CqJfoyLzjgJZoCEpw7u3CHEEBmo4a5RsIEutPurxzpsqV8gO3nBz8zeN7F6GIQ4D
npRBEKbhqC22rw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:16:08 2025 by rpki-client