Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft
File:                     82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft (raw, json)
Hash identifier:          a8m7XeM4u8T/dNt/XjhY0HBXYKCeghBnJwJl1o71TM8=
Subject key identifier:   0F:EB:EF:C0:9D:EB:B0:7B:3A:D2:05:00:1B:75:AA:A0:BC:E3:B2:FB
Authority key identifier: F3:6F:9C:BA:FF:65:3B:60:13:4B:46:AA:70:E7:91:17:09:8A:7C:64
Certificate issuer:       /CN=f36f9cbaff653b60134b46aa70e79117098a7c64
Certificate serial:       01976DAB22D6569D5E35A57706C4338B2003
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft
Manifest number:          1095
Signing time:             Sat 14 Jun 2025 09:00:21 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:21 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:21 +0000
Files and hashes:         1: 4Ocvr5gePs8rQXUxhPB4UFZ5TcY.roa (hash: FS134QCSv+f7Sa1190NHb4XIoYMRMPf9uXBwxQKSXX0=)
                          2: 82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl (hash: x5ETe9OSlv+Dv+7vWTTObEUNCL1tWTHoJihzH025Xsk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:22:d6:56:9d:5e:35:a5:77:06:c4:33:8b:20:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f36f9cbaff653b60134b46aa70e79117098a7c64
        Validity
            Not Before: Jun 14 09:00:21 2025 GMT
            Not After : Jun 15 09:00:21 2025 GMT
        Subject: CN=0febefc09debb07b3ad205001b75aaa0bce3b2fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:99:a4:d5:6e:76:67:f1:09:21:1d:41:3f:9c:
                    8c:42:c2:45:5b:43:db:45:81:f8:7b:7b:0f:95:78:
                    e6:bc:08:30:0e:75:40:2e:44:98:22:13:45:04:40:
                    e5:a6:eb:bb:76:de:2c:87:de:ff:8b:4b:23:a6:c9:
                    05:2b:07:8a:31:28:f0:fc:b8:6a:46:90:cb:2e:40:
                    7b:32:ca:cd:f9:d5:9d:7a:3d:9c:01:7f:a2:65:6c:
                    38:a8:1b:b4:2b:b5:cc:96:1a:89:b9:00:30:ce:b1:
                    21:b1:f5:5c:f1:f9:4f:43:b9:9a:9b:96:14:d9:77:
                    97:22:c2:71:df:6d:42:7f:65:5b:1d:3e:6d:18:11:
                    7a:60:d5:27:87:ad:b8:eb:13:6f:d6:fb:97:18:42:
                    3a:d4:76:ce:78:2e:17:10:b7:35:7a:81:0d:26:15:
                    c8:dd:65:09:6d:eb:eb:0a:8b:89:37:86:16:d6:a0:
                    d1:26:20:e3:1b:7b:73:20:6e:d8:92:03:99:b9:16:
                    49:4b:3b:54:6c:9a:9f:bb:1b:ff:bd:12:76:d0:50:
                    a7:bc:4e:d5:f4:d9:af:de:99:9f:e9:63:cf:28:5a:
                    78:07:7f:6e:7a:20:53:0c:62:0b:81:00:94:4e:2d:
                    a5:16:81:56:d5:9f:66:62:2f:5c:0d:a3:21:12:fa:
                    d1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EB:EF:C0:9D:EB:B0:7B:3A:D2:05:00:1B:75:AA:A0:BC:E3:B2:FB
            X509v3 Authority Key Identifier:
                keyid:F3:6F:9C:BA:FF:65:3B:60:13:4B:46:AA:70:E7:91:17:09:8A:7C:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:34:fb:fa:80:4b:81:c2:cf:a7:c1:b9:f5:41:2b:98:87:e3:
         2e:32:a3:b6:b8:39:88:ba:89:b8:6c:e7:33:8f:42:af:b0:84:
         bd:67:74:74:a5:85:d8:8e:e1:8a:44:50:e3:a1:f9:ee:a8:03:
         11:ca:61:fa:74:91:dd:c6:6b:8c:60:55:d3:52:32:e6:4d:67:
         bb:a4:52:cc:a0:c7:a2:30:0c:56:d0:8c:e9:f8:3e:de:97:c2:
         69:c3:21:00:e2:5c:1f:5e:ab:9c:fe:38:b3:b1:3a:8f:12:4c:
         58:e3:77:98:9a:5b:fa:02:6c:68:85:d0:97:ed:cb:a4:28:63:
         6b:d2:3e:5e:ff:5c:17:ad:c4:f3:81:5e:68:41:47:bf:f9:3e:
         20:ad:e8:df:3c:01:da:6a:1f:1e:67:37:88:99:75:15:d6:56:
         6d:59:a0:42:7d:ac:27:4c:9f:f7:38:c5:5f:fb:43:e7:66:52:
         e4:bd:9c:a6:ab:00:2b:de:02:3b:44:43:d0:7b:e7:e9:9f:a4:
         5a:5d:55:05:17:65:0c:ee:64:b2:d4:76:03:dc:80:06:32:d7:
         74:7f:69:c5:45:50:27:60:eb:50:d8:2d:33:28:ef:f3:fe:e2:
         db:81:0a:e5:ff:76:eb:01:1a:91:9c:42:24:65:38:d3:43:7d:
         74:48:37:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtqyLWVp1eNaV3BsQziyADMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNmY5Y2JhZmY2NTNiNjAxMzRiNDZhYTcwZTc5MTE3MDk4
YTdjNjQwHhcNMjUwNjE0MDkwMDIxWhcNMjUwNjE1MDkwMDIxWjAzMTEwLwYDVQQD
EygwZmViZWZjMDlkZWJiMDdiM2FkMjA1MDAxYjc1YWFhMGJjZTNiMmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpmk1W52Z/EJIR1BP5yMQsJFW0Pb
RYH4e3sPlXjmvAgwDnVALkSYIhNFBEDlpuu7dt4sh97/i0sjpskFKweKMSjw/Lhq
RpDLLkB7MsrN+dWdej2cAX+iZWw4qBu0K7XMlhqJuQAwzrEhsfVc8flPQ7mam5YU
2XeXIsJx321Cf2VbHT5tGBF6YNUnh6246xNv1vuXGEI61HbOeC4XELc1eoENJhXI
3WUJbevrCouJN4YW1qDRJiDjG3tzIG7YkgOZuRZJSztUbJqfuxv/vRJ20FCnvE7V
9Nmv3pmf6WPPKFp4B39ueiBTDGILgQCUTi2lFoFW1Z9mYi9cDaMhEvrRVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/r78Cd67B7OtIFABt1qqC847L7MB8GA1UdIwQY
MBaAFPNvnLr/ZTtgE0tGqnDnkRcJinxkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODItY3V2OWxPMkFUUzBhcWNPZVJGd21LZkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZGYzMjktMDljNS00YmI4LWFmNmMt
ZDk1YWI5OWZiMGM1LzEvODItY3V2OWxPMkFUUzBhcWNPZVJGd21LZkdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hZGYzMjktMDljNS00YmI4LWFmNmMtZDk1YWI5OWZiMGM1
LzEvODItY3V2OWxPMkFUUzBhcWNPZVJGd21LZkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDT7+oBL
gcLPp8G59UErmIfjLjKjtrg5iLqJuGznM49Cr7CEvWd0dKWF2I7hikRQ46H57qgD
Ecph+nSR3cZrjGBV01Iy5k1nu6RSzKDHojAMVtCM6fg+3pfCacMhAOJcH16rnP44
s7E6jxJMWON3mJpb+gJsaIXQl+3LpChja9I+Xv9cF63E84FeaEFHv/k+IK3o3zwB
2mofHmc3iJl1FdZWbVmgQn2sJ0yf9zjFX/tD52ZS5L2cpqsAK94CO0RD0Hvn6Z+k
Wl1VBRdlDO5kstR2A9yABjLXdH9pxUVQJ2DrUNgtMyjv8/7i24EK5f926wEakZxC
JGU400N9dEg3Ig==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:40:47 2025 by rpki-client