Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
File:                     9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft (raw, json)
Hash identifier:          aUAsXU5tupBwCGbbJivVnE2mDxkzTeQpA1XSMjhOxD0=
Subject key identifier:   54:06:E9:96:9B:30:91:BC:41:8B:45:F1:7B:4C:66:F5:F8:93:F8:D8
Authority key identifier: F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
Certificate issuer:       /CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Certificate serial:       01988B7D665D1CB6D3754CBF045046C9ED51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
Manifest number:          0D04
Signing time:             Fri 08 Aug 2025 21:01:47 +0000
Manifest this update:     Fri 08 Aug 2025 21:01:47 +0000
Manifest next update:     Sat 09 Aug 2025 21:01:47 +0000
Files and hashes:         1: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl (hash: KzHNy0PY484bHcp/xeaMnUeA0lccF7xGsUpUVjhFfB8=)
                          2: lTwG7fexEhfG1KlVMWVQwuwbbtc.roa (hash: bfD7+ofvPCOaA8CmUpbLhJtSVYv9giSBukJUfQkg6wo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7d:66:5d:1c:b6:d3:75:4c:bf:04:50:46:c9:ed:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
        Validity
            Not Before: Aug  8 21:01:47 2025 GMT
            Not After : Aug  9 21:01:47 2025 GMT
        Subject: CN=5406e9969b3091bc418b45f17b4c66f5f893f8d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:f2:ee:b3:84:a0:b3:45:17:b5:65:b5:60:
                    72:da:cc:b9:58:91:13:34:67:d9:0a:d8:f0:56:49:
                    c9:c7:ee:72:8a:7e:18:3a:d6:db:54:e0:c3:18:e5:
                    a3:03:0c:4c:c5:bd:39:a1:0b:01:e3:1e:69:0a:7f:
                    43:0d:83:9c:11:3f:ea:2f:07:aa:a1:be:3f:ce:b0:
                    ec:e8:ff:1f:e4:8c:2c:71:24:44:86:cb:07:15:19:
                    33:d3:f1:61:ea:16:ed:d4:f9:cc:7b:bb:c7:51:77:
                    e7:2b:90:98:07:f4:ef:df:35:25:40:27:e0:57:54:
                    28:24:4a:7a:11:ce:10:4f:e4:5e:74:06:91:07:cd:
                    24:44:9e:da:48:06:24:f7:72:d6:b7:72:eb:79:17:
                    7f:2d:03:73:88:a1:46:87:32:34:f7:ec:47:07:62:
                    46:31:b0:da:a2:30:0e:fe:12:d5:d8:df:8d:0c:74:
                    db:c6:f3:5c:d1:09:57:ae:81:19:c8:30:ff:c7:61:
                    45:5a:db:c5:bd:58:e2:40:df:74:11:fe:6b:d8:f6:
                    cb:1e:82:e9:a9:e0:aa:1b:cc:47:f9:c4:aa:7d:ac:
                    80:59:5f:ed:e5:be:11:84:b4:bf:ac:d9:c6:64:7f:
                    f6:04:43:d9:81:28:dd:82:f4:f3:ec:8b:a8:7f:ba:
                    c7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:06:E9:96:9B:30:91:BC:41:8B:45:F1:7B:4C:66:F5:F8:93:F8:D8
            X509v3 Authority Key Identifier:
                keyid:F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:5a:d9:30:49:a9:6f:67:8b:cb:c3:7a:11:ba:f8:c4:21:44:
         a4:18:2d:44:12:6a:90:25:a1:4d:e2:be:1e:0d:ac:45:cd:6f:
         e4:3d:e7:54:36:46:a3:5c:02:65:8f:de:39:f7:c2:31:7c:83:
         b8:4e:e3:89:2f:44:e7:8f:c8:9d:73:5c:06:b0:6c:8b:34:74:
         30:48:e6:a1:b3:05:cd:a2:a7:57:ec:5a:28:28:df:0a:73:75:
         0f:cd:bb:da:e5:ba:e6:d1:d1:8e:02:7b:ca:4b:87:6a:13:87:
         b0:26:bf:7a:af:c8:1c:47:22:8d:da:a4:0b:84:e9:b2:bf:a3:
         e2:37:ff:35:49:10:e7:bd:32:49:8e:ce:6b:d9:51:cb:05:1a:
         df:b1:63:49:64:33:c8:bc:fd:60:13:90:58:84:b7:92:4a:c0:
         15:a8:49:1e:7a:db:8e:79:58:bc:78:49:13:61:55:8b:3f:08:
         37:73:07:5f:df:d2:45:71:22:f3:c9:ce:50:2d:1e:19:1a:2f:
         aa:a3:f7:91:37:4f:cf:ad:8e:30:ee:89:83:db:57:25:b5:16:
         11:72:2d:72:31:e3:69:20:5b:66:9f:7e:d0:00:11:38:6e:d3:
         c0:5c:fd:2e:d5:14:a5:d9:f3:30:08:33:7f:4f:fb:97:db:f2:
         a2:3e:e5:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLfWZdHLbTdUy/BFBGye1RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MWI5OTgzMWQ0NGIwYmY3YzAwYzUwOTc3ZjYwYjE4NDQz
NDljZjIwHhcNMjUwODA4MjEwMTQ3WhcNMjUwODA5MjEwMTQ3WjAzMTEwLwYDVQQD
Eyg1NDA2ZTk5NjliMzA5MWJjNDE4YjQ1ZjE3YjRjNjZmNWY4OTNmOGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE3y7rOEoLNFF7VltWBy2sy5WJET
NGfZCtjwVknJx+5yin4YOtbbVODDGOWjAwxMxb05oQsB4x5pCn9DDYOcET/qLweq
ob4/zrDs6P8f5IwscSREhssHFRkz0/Fh6hbt1PnMe7vHUXfnK5CYB/Tv3zUlQCfg
V1QoJEp6Ec4QT+RedAaRB80kRJ7aSAYk93LWt3LreRd/LQNziKFGhzI09+xHB2JG
MbDaojAO/hLV2N+NDHTbxvNc0QlXroEZyDD/x2FFWtvFvVjiQN90Ef5r2PbLHoLp
qeCqG8xH+cSqfayAWV/t5b4RhLS/rNnGZH/2BEPZgSjdgvTz7Iuof7rHpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQG6ZabMJG8QYtF8XtMZvX4k/jYMB8GA1UdIwQY
MBaAFPcbmYMdRLC/fADFCXf2CxhENJzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXh1Wmd4MUVzTDk4QU1VSmRfWUxHRVEwblBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC82ZTYxNzUtNjM1YS00Y2M2LTk0ZWQt
MGRjZjQ1YTVhZjNkLzEvOXh1Wmd4MUVzTDk4QU1VSmRfWUxHRVEwblBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC82ZTYxNzUtNjM1YS00Y2M2LTk0ZWQtMGRjZjQ1YTVhZjNk
LzEvOXh1Wmd4MUVzTDk4QU1VSmRfWUxHRVEwblBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1rZMEmp
b2eLy8N6Ebr4xCFEpBgtRBJqkCWhTeK+Hg2sRc1v5D3nVDZGo1wCZY/eOffCMXyD
uE7jiS9E54/InXNcBrBsizR0MEjmobMFzaKnV+xaKCjfCnN1D8272uW65tHRjgJ7
ykuHahOHsCa/eq/IHEcijdqkC4Tpsr+j4jf/NUkQ570ySY7Oa9lRywUa37FjSWQz
yLz9YBOQWIS3kkrAFahJHnrbjnlYvHhJE2FViz8IN3MHX9/SRXEi88nOUC0eGRov
qqP3kTdPz62OMO6Jg9tXJbUWEXItcjHjaSBbZp9+0AAROG7TwFz9LtUUpdnzMAgz
f0/7l9vyoj7liQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:03:10 2025 by rpki-client