Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
File:                     l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft (raw, json)
Hash identifier:          Eeu+YlQ381prMCzelcy9gSWqy+5UfzNb0ASdsqY4H/4=
Subject key identifier:   92:B3:77:D7:4D:82:28:58:D5:AD:95:69:3B:B4:4D:C1:89:4C:C7:B2
Authority key identifier: 97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
Certificate issuer:       /CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Certificate serial:       019874BE5EAEBAA374ACEE2A3BCF886D1671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
Manifest number:          0CF9
Signing time:             Mon 04 Aug 2025 11:01:29 +0000
Manifest this update:     Mon 04 Aug 2025 11:01:29 +0000
Manifest next update:     Tue 05 Aug 2025 11:01:29 +0000
Files and hashes:         1: l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl (hash: t6c71izzW0QhIVgN0lrTbFGG4h97SmGJc372RQkFhqQ=)
                          2: rAptMRvSUdwv73c1hrV9bfbr3Yk.roa (hash: M82hA2K7N0hc5dPJhXNevznbaSP5bAh4nu7+zgBVgYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:be:5e:ae:ba:a3:74:ac:ee:2a:3b:cf:88:6d:16:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9760fd5864826805cf3655eeeb2fb898f36d9821
        Validity
            Not Before: Aug  4 11:01:29 2025 GMT
            Not After : Aug  5 11:01:29 2025 GMT
        Subject: CN=92b377d74d822858d5ad95693bb44dc1894cc7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b2:c4:55:49:0f:ef:1c:a4:1c:65:8a:85:04:
                    a1:f1:a6:9a:6a:87:bf:e0:5d:b4:84:37:a1:fe:6f:
                    51:4f:11:8a:25:5c:2e:74:df:81:54:18:39:da:21:
                    a7:98:cf:d1:27:68:0a:c5:8e:75:4c:5d:35:f8:1d:
                    a2:e2:9e:d2:ca:ba:61:3f:52:07:f9:e1:68:58:aa:
                    c1:fa:df:fc:32:97:61:1e:46:9c:46:98:98:b9:02:
                    1a:bb:11:a3:7a:0e:60:3b:20:10:4e:e4:f0:b7:d3:
                    a8:d3:da:af:33:15:69:37:fc:14:fc:49:56:50:46:
                    10:2d:e4:02:54:c8:47:23:ef:c9:af:5a:49:42:27:
                    19:a1:60:f6:46:a3:ae:50:b9:99:37:d1:f2:dd:c3:
                    d8:8b:bd:c6:c5:f8:c7:87:9e:a9:5d:9e:e8:e9:14:
                    79:b0:92:b9:2f:57:30:8d:8b:e9:67:3f:db:d3:1b:
                    5a:42:8f:9e:61:48:bb:68:22:ea:51:08:3f:53:b8:
                    84:cb:ac:bb:9f:ea:7a:d5:00:50:a0:f7:2f:06:0d:
                    bd:76:63:27:e2:61:36:9d:32:fc:9c:92:59:99:0a:
                    03:2e:92:13:07:a3:aa:2e:8f:5c:2e:f3:c4:10:07:
                    6b:1d:d7:22:40:50:fc:c0:61:37:ae:ae:ab:9c:bc:
                    7f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B3:77:D7:4D:82:28:58:D5:AD:95:69:3B:B4:4D:C1:89:4C:C7:B2
            X509v3 Authority Key Identifier:
                keyid:97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:fc:76:c2:d8:9e:46:b0:bf:a9:ce:64:82:99:20:0c:64:77:
         cc:ac:99:fb:7f:3b:10:ea:e2:2c:ee:e0:83:b6:96:33:0b:ec:
         4d:77:a7:43:b2:61:9b:dd:93:98:d7:52:6a:85:ad:97:8d:b6:
         9e:0c:47:fb:34:4d:89:69:c0:9c:71:35:20:77:57:c6:ce:ed:
         9a:32:81:1e:f1:2b:ff:7d:8d:c4:3f:cc:a8:82:06:e3:73:00:
         62:83:0c:97:f8:9d:08:93:a1:12:6a:51:7b:d8:45:1d:35:4a:
         2e:0f:ca:88:9a:ae:a7:ff:5b:f1:8a:e2:09:69:3e:34:7d:a5:
         62:9b:e7:c8:07:e5:9b:b7:57:18:28:91:14:00:65:57:e0:2c:
         84:3e:1d:a9:99:df:83:83:8a:43:c2:74:7a:a8:f4:01:5b:b6:
         28:52:29:db:12:0b:af:24:c3:f2:af:b8:93:d6:e4:cd:ef:11:
         bf:db:7f:e3:01:fe:28:bd:c3:45:9e:45:d8:1c:ff:96:b5:87:
         56:58:b8:c5:2c:8a:5b:db:28:b1:bd:e0:51:30:9a:2d:b3:3d:
         5d:8d:cc:b5:0d:18:9f:9e:f1:88:a2:5a:35:15:bf:65:00:f6:
         a4:90:e3:87:36:65:4b:9c:4a:fc:67:cb:07:12:0e:23:62:8e:
         2f:e6:da:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0vl6uuqN0rO4qO8+IbRZxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NjBmZDU4NjQ4MjY4MDVjZjM2NTVlZWViMmZiODk4ZjM2
ZDk4MjEwHhcNMjUwODA0MTEwMTI5WhcNMjUwODA1MTEwMTI5WjAzMTEwLwYDVQQD
Eyg5MmIzNzdkNzRkODIyODU4ZDVhZDk1NjkzYmI0NGRjMTg5NGNjN2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrLEVUkP7xykHGWKhQSh8aaaaoe/
4F20hDeh/m9RTxGKJVwudN+BVBg52iGnmM/RJ2gKxY51TF01+B2i4p7SyrphP1IH
+eFoWKrB+t/8MpdhHkacRpiYuQIauxGjeg5gOyAQTuTwt9Oo09qvMxVpN/wU/ElW
UEYQLeQCVMhHI+/Jr1pJQicZoWD2RqOuULmZN9Hy3cPYi73GxfjHh56pXZ7o6RR5
sJK5L1cwjYvpZz/b0xtaQo+eYUi7aCLqUQg/U7iEy6y7n+p61QBQoPcvBg29dmMn
4mE2nTL8nJJZmQoDLpITB6OqLo9cLvPEEAdrHdciQFD8wGE3rq6rnLx/iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKzd9dNgihY1a2VaTu0TcGJTMeyMB8GA1UdIwQY
MBaAFJdg/VhkgmgFzzZV7usvuJjzbZghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDJEOVdHU0NhQVhQTmxYdTZ5LTRtUE50bUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hMjljOWEtY2E0ZC00MDAwLThmZjMt
ZDlhMTA0NDA0YWFmLzEvbDJEOVdHU0NhQVhQTmxYdTZ5LTRtUE50bUNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9hMjljOWEtY2E0ZC00MDAwLThmZjMtZDlhMTA0NDA0YWFm
LzEvbDJEOVdHU0NhQVhQTmxYdTZ5LTRtUE50bUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/x2wtie
RrC/qc5kgpkgDGR3zKyZ+387EOriLO7gg7aWMwvsTXenQ7Jhm92TmNdSaoWtl422
ngxH+zRNiWnAnHE1IHdXxs7tmjKBHvEr/32NxD/MqIIG43MAYoMMl/idCJOhEmpR
e9hFHTVKLg/KiJqup/9b8YriCWk+NH2lYpvnyAflm7dXGCiRFABlV+AshD4dqZnf
g4OKQ8J0eqj0AVu2KFIp2xILryTD8q+4k9bkze8Rv9t/4wH+KL3DRZ5F2Bz/lrWH
Vli4xSyKW9sosb3gUTCaLbM9XY3MtQ0Yn57xiKJaNRW/ZQD2pJDjhzZlS5xK/GfL
BxIOI2KOL+baEQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:57:24 2025 by rpki-client