Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
File:                     V9minRgOgZpHgvtsbqFtOn0ykQA.mft (raw, json)
Hash identifier:          h4JANtmeu/xRC/+MjAZ+pGnEfV0W8YwWWHFzGAiDTmU=
Subject key identifier:   3A:E6:93:9B:BC:ED:EB:05:C2:F1:6C:A9:CF:E9:5B:64:D9:85:09:B7
Authority key identifier: 57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00
Certificate issuer:       /CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100
Certificate serial:       0198530DFE2B53C12918645205AAE437100F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
Manifest number:          081B
Signing time:             Mon 28 Jul 2025 22:01:22 +0000
Manifest this update:     Mon 28 Jul 2025 22:01:22 +0000
Manifest next update:     Tue 29 Jul 2025 22:01:22 +0000
Files and hashes:         1: V9minRgOgZpHgvtsbqFtOn0ykQA.crl (hash: x4F0aGFCDbUKBwbKC6PT9ITnl1+TWsX3QdPhFkvnVFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0d:fe:2b:53:c1:29:18:64:52:05:aa:e4:37:10:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100
        Validity
            Not Before: Jul 28 22:01:22 2025 GMT
            Not After : Jul 29 22:01:22 2025 GMT
        Subject: CN=3ae6939bbcedeb05c2f16ca9cfe95b64d98509b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d7:ca:01:8e:d8:ba:13:64:c1:8f:cc:b9:22:
                    30:b3:d9:8c:c0:f4:04:21:14:68:1e:c2:5f:d8:31:
                    73:92:7d:51:46:74:82:1d:b7:c7:ea:df:0c:b4:6a:
                    d9:80:79:10:87:ac:60:55:81:94:32:29:ce:4f:6c:
                    e9:e9:5c:49:e7:0b:b2:ae:5a:9a:9f:28:87:e8:23:
                    cc:79:60:e2:72:2c:54:fd:46:03:99:81:63:24:1d:
                    10:c1:62:a9:d3:1e:b1:2c:76:b0:77:18:d9:f3:5b:
                    22:fd:73:72:e3:d9:91:de:01:14:20:cf:dc:de:86:
                    e3:3a:58:5d:6d:2e:c0:72:e7:fa:88:6b:18:ab:68:
                    cf:bb:66:40:95:62:d3:44:a8:36:d5:48:9e:25:1b:
                    1c:2f:be:92:57:d5:31:33:53:d6:fa:c7:2d:d3:b0:
                    bf:89:f6:53:e8:66:0f:ab:48:52:d7:47:ae:fe:52:
                    70:d9:29:66:54:62:2b:76:c8:ec:bb:5c:e8:c1:85:
                    66:1c:82:6e:55:89:42:9f:0e:6e:66:61:77:a5:49:
                    17:4b:bf:64:55:2f:bc:87:62:09:e3:ad:3b:01:21:
                    5b:99:2c:ea:4e:9b:33:42:ee:66:13:b2:25:43:64:
                    de:26:7d:33:22:fd:59:d6:a3:73:57:d3:85:b4:17:
                    64:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E6:93:9B:BC:ED:EB:05:C2:F1:6C:A9:CF:E9:5B:64:D9:85:09:B7
            X509v3 Authority Key Identifier:
                keyid:57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:91:63:e9:73:d6:12:08:2a:2b:ff:da:be:ab:00:c1:64:66:
         be:45:42:ff:2f:99:4e:2e:b9:c6:56:04:55:63:34:3f:dc:c9:
         cd:2a:7d:de:bb:f5:5f:33:ad:04:7a:da:61:dd:2d:55:f5:50:
         05:6b:70:d4:90:8a:d8:31:c7:b4:ae:f1:c1:a1:81:1b:29:62:
         69:43:7e:dc:0e:75:0e:47:71:cc:c2:5e:94:f9:c8:26:c7:a6:
         51:6f:0d:00:3f:89:31:42:3a:9c:9c:6e:30:de:c4:39:fe:e2:
         3a:58:8f:c5:a3:59:5e:95:fa:25:7d:d4:33:84:96:21:9c:35:
         ca:92:02:e1:dc:ac:9c:82:41:d8:0c:b4:fb:63:72:3c:02:50:
         be:0c:f4:92:db:d7:d0:5d:ae:88:b0:12:3e:62:7e:01:3c:d7:
         64:9a:46:cc:6d:06:70:b1:a8:0d:63:4a:5f:4b:3e:34:f9:86:
         22:c6:09:ea:72:25:80:53:6a:5f:29:07:c1:70:e4:1f:99:46:
         f0:00:d8:68:df:19:9e:01:eb:ee:eb:15:91:07:9b:e9:20:f5:
         30:0d:c6:ea:96:ad:5d:3e:de:45:82:27:05:83:83:67:22:56:
         15:55:08:39:ad:9c:d6:44:7a:61:f1:a4:69:4c:15:13:ad:6d:
         d0:1e:7e:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDf4rU8EpGGRSBarkNxAPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZDlhMjlkMTgwZTgxOWE0NzgyZmI2YzZlYTE2ZDNhN2Qz
MjkxMDAwHhcNMjUwNzI4MjIwMTIyWhcNMjUwNzI5MjIwMTIyWjAzMTEwLwYDVQQD
EygzYWU2OTM5YmJjZWRlYjA1YzJmMTZjYTljZmU5NWI2NGQ5ODUwOWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9fKAY7YuhNkwY/MuSIws9mMwPQE
IRRoHsJf2DFzkn1RRnSCHbfH6t8MtGrZgHkQh6xgVYGUMinOT2zp6VxJ5wuyrlqa
nyiH6CPMeWDicixU/UYDmYFjJB0QwWKp0x6xLHawdxjZ81si/XNy49mR3gEUIM/c
3objOlhdbS7Acuf6iGsYq2jPu2ZAlWLTRKg21UieJRscL76SV9UxM1PW+sct07C/
ifZT6GYPq0hS10eu/lJw2SlmVGIrdsjsu1zowYVmHIJuVYlCnw5uZmF3pUkXS79k
VS+8h2IJ4607ASFbmSzqTpszQu5mE7IlQ2TeJn0zIv1Z1qNzV9OFtBdk+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrmk5u87esFwvFsqc/pW2TZhQm3MB8GA1UdIwQY
MBaAFFfZop0YDoGaR4L7bG6hbTp9MpEAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjltaW5SZ09nWnBIZ3Z0c2JxRnRPbjB5a1FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMWFiNTMtZWNkZC00ZjNmLWI2MDQt
MDE1Y2Y1NDdlNDQ3LzEvVjltaW5SZ09nWnBIZ3Z0c2JxRnRPbjB5a1FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9jMWFiNTMtZWNkZC00ZjNmLWI2MDQtMDE1Y2Y1NDdlNDQ3
LzEvVjltaW5SZ09nWnBIZ3Z0c2JxRnRPbjB5a1FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5Fj6XPW
EggqK//avqsAwWRmvkVC/y+ZTi65xlYEVWM0P9zJzSp93rv1XzOtBHraYd0tVfVQ
BWtw1JCK2DHHtK7xwaGBGyliaUN+3A51DkdxzMJelPnIJsemUW8NAD+JMUI6nJxu
MN7EOf7iOliPxaNZXpX6JX3UM4SWIZw1ypIC4dysnIJB2Ay0+2NyPAJQvgz0ktvX
0F2uiLASPmJ+ATzXZJpGzG0GcLGoDWNKX0s+NPmGIsYJ6nIlgFNqXykHwXDkH5lG
8ADYaN8ZngHr7usVkQeb6SD1MA3G6patXT7eRYInBYODZyJWFVUIOa2c1kR6YfGk
aUwVE61t0B5+xw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:41:29 2025 by rpki-client