Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
File:                     DWu1npe_Ox78NWnflWxF5HKEmGE.mft (raw, json)
Hash identifier:          NNX8sJ9YqZ3+hoKHHIonRq+OcPWTktWHDkNf/+d1ThA=
Subject key identifier:   88:43:FC:4C:6A:A6:77:C7:09:A3:89:DA:79:41:0C:6D:CF:CF:0E:9B
Authority key identifier: 0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61
Certificate issuer:       /CN=0d6bb59e97bf3b1efc3569df956c45e472849861
Certificate serial:       01984589501D8982320F714BBCAB6023AC6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
Manifest number:          090E
Signing time:             Sat 26 Jul 2025 07:01:23 +0000
Manifest this update:     Sat 26 Jul 2025 07:01:23 +0000
Manifest next update:     Sun 27 Jul 2025 07:01:23 +0000
Files and hashes:         1: DWu1npe_Ox78NWnflWxF5HKEmGE.crl (hash: Xlf5YFnEJLeahe2oN/r6HUUIkqYqwLqxUzHl+lU0d+Y=)
                          2: YHsr6f8s8uWfm3H2AkqO-6gTKlA.roa (hash: PDEXeDLtvF2svWu3SCyyV71qYzP5SqM0o8kxhwdjSR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:89:50:1d:89:82:32:0f:71:4b:bc:ab:60:23:ac:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d6bb59e97bf3b1efc3569df956c45e472849861
        Validity
            Not Before: Jul 26 07:01:23 2025 GMT
            Not After : Jul 27 07:01:23 2025 GMT
        Subject: CN=8843fc4c6aa677c709a389da79410c6dcfcf0e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2e:77:fd:84:fd:2e:fe:66:e6:be:b1:1a:e2:
                    33:dc:ae:75:a5:f0:5a:cc:32:67:ef:0c:e5:0c:f9:
                    8a:00:17:1b:6f:d5:a3:ca:3e:12:19:fc:bd:38:3c:
                    5a:d6:cd:5c:07:6f:b0:2b:aa:6f:7b:ee:0d:aa:bb:
                    9e:e1:cf:4a:06:42:fd:0c:23:07:dd:3b:5a:d3:be:
                    43:d6:4d:ed:f1:83:bf:4d:e2:1f:ef:f3:81:35:b0:
                    49:74:3f:41:3b:eb:f4:39:45:38:27:80:78:43:58:
                    d1:ca:f5:7b:25:6e:ec:00:aa:32:91:16:61:fc:a0:
                    77:ce:54:dc:99:16:f1:fd:d2:f1:dc:03:7f:46:f6:
                    a3:5a:cb:40:95:a0:a1:29:f6:4c:4f:0b:d5:c5:8d:
                    4c:8b:11:af:a3:dc:77:d2:ff:69:86:80:be:eb:7b:
                    ba:2a:ab:f3:cc:a3:04:61:65:89:23:93:d2:c4:91:
                    8f:fe:ba:8b:f5:dd:8e:ce:37:9c:db:61:97:b9:87:
                    22:7b:4b:2e:62:77:4f:81:48:b7:aa:4a:e7:4d:21:
                    35:5d:44:aa:50:c3:d4:86:26:63:3f:c5:6b:c8:88:
                    b0:aa:14:a3:69:af:8b:7b:d3:5a:5b:5f:00:7f:20:
                    cf:2b:3f:ab:9d:dc:3d:a5:2b:fc:eb:4d:cd:85:6b:
                    10:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:43:FC:4C:6A:A6:77:C7:09:A3:89:DA:79:41:0C:6D:CF:CF:0E:9B
            X509v3 Authority Key Identifier:
                keyid:0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c4:70:44:cf:e8:df:5a:fe:a7:78:c7:ab:3c:0f:7b:3b:e0:
         cc:22:93:2c:d3:de:98:c9:5f:cc:f2:76:65:e8:a1:e2:9c:6d:
         d2:a2:b1:c4:51:98:3a:c3:5a:e1:77:7f:b9:8c:91:a7:45:57:
         f3:09:5c:28:ef:19:d6:e8:e3:d2:fb:21:df:33:6a:93:f1:98:
         0f:da:af:06:7f:c7:c3:a2:96:0b:ff:07:f3:24:98:69:30:a3:
         13:44:36:f6:cf:07:a2:58:1b:2e:24:d7:c2:8a:51:33:4e:3c:
         2d:3f:9e:94:50:6d:7d:c7:82:25:87:47:99:4f:5e:ec:93:cc:
         ef:12:b0:8a:ba:72:5f:e6:84:e5:8e:a5:d9:04:c2:77:ff:55:
         0f:04:e8:d1:2a:cc:83:81:36:1d:b8:87:7c:48:3f:56:43:84:
         61:4b:a2:91:ac:6e:92:c5:2b:d2:48:f7:8c:ec:c2:50:d9:df:
         fa:4a:d8:7c:7d:37:d3:70:66:25:0a:74:ef:99:60:10:8b:96:
         83:1a:48:a3:86:c3:7c:db:c6:1a:c3:57:d0:38:8b:3c:0d:d9:
         db:3b:78:40:ec:85:ab:fe:17:00:37:31:d3:cd:8a:99:c3:22:
         a1:f6:bd:ed:75:1a:af:c7:7e:c1:aa:8e:5d:23:fd:04:26:f5:
         32:16:e6:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFiVAdiYIyD3FLvKtgI6xqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNmJiNTllOTdiZjNiMWVmYzM1NjlkZjk1NmM0NWU0NzI4
NDk4NjEwHhcNMjUwNzI2MDcwMTIzWhcNMjUwNzI3MDcwMTIzWjAzMTEwLwYDVQQD
Eyg4ODQzZmM0YzZhYTY3N2M3MDlhMzg5ZGE3OTQxMGM2ZGNmY2YwZTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC53/YT9Lv5m5r6xGuIz3K51pfBa
zDJn7wzlDPmKABcbb9Wjyj4SGfy9ODxa1s1cB2+wK6pve+4Nqrue4c9KBkL9DCMH
3Tta075D1k3t8YO/TeIf7/OBNbBJdD9BO+v0OUU4J4B4Q1jRyvV7JW7sAKoykRZh
/KB3zlTcmRbx/dLx3AN/RvajWstAlaChKfZMTwvVxY1MixGvo9x30v9phoC+63u6
KqvzzKMEYWWJI5PSxJGP/rqL9d2Ozjec22GXuYcie0suYndPgUi3qkrnTSE1XUSq
UMPUhiZjP8VryIiwqhSjaa+Le9NaW18AfyDPKz+rndw9pSv8603NhWsQtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhD/ExqpnfHCaOJ2nlBDG3Pzw6bMB8GA1UdIwQY
MBaAFA1rtZ6Xvzse/DVp35VsReRyhJhhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFd1MW5wZV9PeDc4TlduZmxXeEY1SEtFbUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZDNkZTQtNzZhNS00OTQxLWI2MjYt
ZTk1NGUxNmFiMjdkLzEvRFd1MW5wZV9PeDc4TlduZmxXeEY1SEtFbUdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZDNkZTQtNzZhNS00OTQxLWI2MjYtZTk1NGUxNmFiMjdk
LzEvRFd1MW5wZV9PeDc4TlduZmxXeEY1SEtFbUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMRwRM/o
31r+p3jHqzwPezvgzCKTLNPemMlfzPJ2Zeih4pxt0qKxxFGYOsNa4Xd/uYyRp0VX
8wlcKO8Z1ujj0vsh3zNqk/GYD9qvBn/Hw6KWC/8H8ySYaTCjE0Q29s8HolgbLiTX
wopRM048LT+elFBtfceCJYdHmU9e7JPM7xKwirpyX+aE5Y6l2QTCd/9VDwTo0SrM
g4E2HbiHfEg/VkOEYUuikaxuksUr0kj3jOzCUNnf+krYfH0303BmJQp075lgEIuW
gxpIo4bDfNvGGsNX0DiLPA3Z2zt4QOyFq/4XADcx082KmcMiofa97XUar8d+waqO
XSP9BCb1MhbmTg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:43:06 2025 by rpki-client