Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
File:                     V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft (raw, json)
Hash identifier:          WJl8ktiu0klLKwwGogr8oxOKmvd4lpIYesos4PDIAgo=
Subject key identifier:   B5:A3:DD:09:0E:7B:35:F5:0B:4E:88:31:FD:2B:D4:73:FF:77:F1:C2
Authority key identifier: 57:D0:11:B5:77:F9:0A:A7:E8:E0:CC:52:29:E1:F2:99:83:82:45:93
Certificate issuer:       /CN=57d011b577f90aa7e8e0cc5229e1f29983824593
Certificate serial:       019923D5FC46581F769B175FA6B9FB857CB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
Manifest number:          166F
Signing time:             Sun 07 Sep 2025 11:00:50 +0000
Manifest this update:     Sun 07 Sep 2025 11:00:50 +0000
Manifest next update:     Mon 08 Sep 2025 11:00:50 +0000
Files and hashes:         1: V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl (hash: +n83ctQNq4zPwejNbGVJR2GJ6+AsbJq8dnURXozBrog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:d5:fc:46:58:1f:76:9b:17:5f:a6:b9:fb:85:7c:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d011b577f90aa7e8e0cc5229e1f29983824593
        Validity
            Not Before: Sep  7 11:00:50 2025 GMT
            Not After : Sep  8 11:00:50 2025 GMT
        Subject: CN=b5a3dd090e7b35f50b4e8831fd2bd473ff77f1c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5f:49:0b:91:99:99:05:a5:e4:f6:49:7d:b2:
                    97:03:cf:dc:81:5b:fa:3d:f8:20:ba:ce:f3:4c:0c:
                    db:67:eb:23:bd:cd:7b:48:57:05:71:6a:e1:88:80:
                    ab:40:83:88:6b:4a:dc:fa:d1:ba:0e:1b:0f:09:f2:
                    e1:9f:c3:72:d7:6a:d0:a7:bf:f2:ae:50:8d:52:52:
                    6d:e3:0e:93:4d:29:de:05:c2:c6:10:7e:67:8c:0f:
                    2f:f9:f9:c3:fb:6a:32:ec:ff:13:6d:35:2a:9c:0f:
                    44:20:73:af:1d:52:92:f6:0b:a9:96:0a:ca:24:43:
                    47:f8:a9:38:1a:29:85:ea:73:c4:13:30:48:42:6b:
                    13:6a:11:05:c2:1f:bd:6d:cf:8b:8f:af:90:14:b8:
                    88:c0:7d:f6:41:27:23:df:5c:3a:4f:65:a2:e7:73:
                    da:e9:ce:f8:ca:c2:52:4c:2a:67:26:86:1d:b1:55:
                    81:cf:b5:0f:fa:f2:ec:56:ff:73:60:42:2a:fa:48:
                    ea:78:08:44:0f:67:7f:c1:77:87:8b:dd:b1:7f:7b:
                    91:2b:7e:bf:43:a0:d7:44:ea:c9:2c:55:19:b6:09:
                    4a:49:6f:e0:4b:10:df:cd:ff:e6:5a:e6:f5:af:f4:
                    a8:ec:8a:a8:dc:8c:e7:67:f9:3f:50:3f:1d:49:e2:
                    28:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A3:DD:09:0E:7B:35:F5:0B:4E:88:31:FD:2B:D4:73:FF:77:F1:C2
            X509v3 Authority Key Identifier:
                keyid:57:D0:11:B5:77:F9:0A:A7:E8:E0:CC:52:29:E1:F2:99:83:82:45:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:da:c6:b0:4f:22:77:24:fe:24:34:d9:ee:3e:9f:af:78:b0:
         78:57:cb:5a:31:bf:1e:e8:df:b9:9f:53:ea:0f:1d:85:9a:98:
         b5:61:dc:74:df:6d:52:36:c7:06:0f:8b:6f:7f:d5:f0:62:1d:
         30:13:5d:fe:3f:2f:4b:eb:2a:e6:44:83:59:52:5e:a6:fd:b2:
         50:1d:3f:8c:82:00:38:7a:f8:7f:b9:8a:5e:09:be:c5:a6:37:
         22:e7:65:62:46:19:91:57:61:3a:01:de:ad:6a:62:ef:4d:aa:
         ad:61:72:42:c3:a2:dd:94:70:de:ca:0c:62:1a:e6:a3:08:68:
         60:9c:2e:09:b9:85:52:af:23:1c:ee:f0:6f:a9:93:17:16:87:
         94:64:7b:d6:66:5b:e3:fe:67:39:3e:22:65:ff:0e:1a:ce:38:
         9b:ae:25:99:20:3a:f9:29:0c:9f:81:c9:04:83:f6:81:dc:58:
         be:bb:9a:80:f2:cc:a8:11:86:20:02:06:ae:12:2b:88:0f:07:
         7e:28:bc:71:89:63:75:12:0f:3d:1c:df:aa:01:d6:31:0a:4e:
         f4:5b:26:8a:7e:ee:e4:50:ee:32:97:39:99:f7:f2:92:44:d3:
         39:de:d4:04:02:6c:96:d5:1d:27:05:0a:b7:72:12:f5:3b:b6:
         bc:6e:3c:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkj1fxGWB92mxdfprn7hXyyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZDAxMWI1NzdmOTBhYTdlOGUwY2M1MjI5ZTFmMjk5ODM4
MjQ1OTMwHhcNMjUwOTA3MTEwMDUwWhcNMjUwOTA4MTEwMDUwWjAzMTEwLwYDVQQD
EyhiNWEzZGQwOTBlN2IzNWY1MGI0ZTg4MzFmZDJiZDQ3M2ZmNzdmMWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF9JC5GZmQWl5PZJfbKXA8/cgVv6
Pfggus7zTAzbZ+sjvc17SFcFcWrhiICrQIOIa0rc+tG6DhsPCfLhn8Ny12rQp7/y
rlCNUlJt4w6TTSneBcLGEH5njA8v+fnD+2oy7P8TbTUqnA9EIHOvHVKS9guplgrK
JENH+Kk4GimF6nPEEzBIQmsTahEFwh+9bc+Lj6+QFLiIwH32QScj31w6T2Wi53Pa
6c74ysJSTCpnJoYdsVWBz7UP+vLsVv9zYEIq+kjqeAhED2d/wXeHi92xf3uRK36/
Q6DXROrJLFUZtglKSW/gSxDfzf/mWub1r/So7Iqo3IznZ/k/UD8dSeIowQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWj3QkOezX1C06IMf0r1HP/d/HCMB8GA1UdIwQY
MBaAFFfQEbV3+Qqn6ODMUinh8pmDgkWTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjlBUnRYZjVDcWZvNE14U0tlSHltWU9DUlpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lN2U4ZmUtZWRlNi00OWU1LWEyZGMt
MGQxZGEzNzEzZmU5LzEvVjlBUnRYZjVDcWZvNE14U0tlSHltWU9DUlpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9lN2U4ZmUtZWRlNi00OWU1LWEyZGMtMGQxZGEzNzEzZmU5
LzEvVjlBUnRYZjVDcWZvNE14U0tlSHltWU9DUlpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVdrGsE8i
dyT+JDTZ7j6fr3iweFfLWjG/HujfuZ9T6g8dhZqYtWHcdN9tUjbHBg+Lb3/V8GId
MBNd/j8vS+sq5kSDWVJepv2yUB0/jIIAOHr4f7mKXgm+xaY3IudlYkYZkVdhOgHe
rWpi702qrWFyQsOi3ZRw3soMYhrmowhoYJwuCbmFUq8jHO7wb6mTFxaHlGR71mZb
4/5nOT4iZf8OGs44m64lmSA6+SkMn4HJBIP2gdxYvruagPLMqBGGIAIGrhIriA8H
fii8cYljdRIPPRzfqgHWMQpO9Fsmin7u5FDuMpc5mffykkTTOd7UBAJsltUdJwUK
t3IS9Tu2vG486g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:35 2025 by rpki-client