Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
File:                     9O9duhAKkrJETz5RLQGlksAZUcI.mft (raw, json)
Hash identifier:          qlEKsXItl34jY/VDVlOcx5xl7W7KGISNI3dHm+6dDT8=
Subject key identifier:   EE:1D:A6:22:FA:5C:4C:B7:A6:D9:8E:C3:11:C2:EB:8D:AF:DA:C7:A7
Authority key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
Certificate issuer:       /CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Certificate serial:       0197567F593564333BC27A27B9755FCCDA6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
Manifest number:          07ED
Signing time:             Mon 09 Jun 2025 21:01:15 +0000
Manifest this update:     Mon 09 Jun 2025 21:01:15 +0000
Manifest next update:     Tue 10 Jun 2025 21:01:15 +0000
Files and hashes:         1: 9O9duhAKkrJETz5RLQGlksAZUcI.crl (hash: B0X9FDrv9zOiTxWDb+tAEKflavBO97LwqJ3N5hVXXns=)
                          2: F3ciK8Cs1X2iYdLyOuYTwjS5F9g.roa (hash: A16wEC2Kp22nG7pwFt2VgBVywuDsF1+tAv3rCz+vfPk=)
                          3: RqMgMpdcD54HUHiiovgo2_7eo94.roa (hash: eRUbOt1afNalKvV81WeaR6eAgifd6J7LvG2r3czI9hc=)
                          4: gzBqFqX-GOiBCBUlEgTsEnHuXvM.roa (hash: d9Lvaxwm2cOVNLGx1WtIoyEgpf/MLPQzSYnTj875od0=)
                          5: wdTC4RawEs-5fFZUa4R_HIRxO2U.roa (hash: Rtc4DEopTsErPd8Vo2cqobz/fHQCAfYf819UnyzhAlA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:56:7f:59:35:64:33:3b:c2:7a:27:b9:75:5f:cc:da:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
        Validity
            Not Before: Jun  9 21:01:15 2025 GMT
            Not After : Jun 10 21:01:15 2025 GMT
        Subject: CN=ee1da622fa5c4cb7a6d98ec311c2eb8dafdac7a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:69:0b:34:b8:80:e3:74:28:f5:00:c5:94:81:
                    3b:bd:8a:2d:c8:12:6e:b8:16:b1:0c:2e:75:ad:49:
                    50:68:7c:15:88:43:e2:a5:ae:90:85:a1:72:9f:61:
                    f7:c0:aa:2b:34:a2:f1:9d:9a:77:98:fc:57:f7:83:
                    18:3d:7e:0c:93:b1:57:60:ca:c0:b2:f3:0c:bf:4a:
                    5a:35:c2:03:30:d1:ac:9c:e1:da:61:d5:32:e0:aa:
                    37:f1:ab:28:b8:c8:63:8b:61:d6:93:5c:a8:5e:2c:
                    5f:32:ef:80:9d:06:b2:1f:bf:c2:aa:1d:ff:dc:92:
                    11:a8:45:20:90:10:94:60:2b:22:c4:f3:5e:23:2a:
                    cb:37:cb:c7:d1:15:03:e9:ed:61:64:cb:23:ab:47:
                    8e:8a:f9:f7:66:85:de:46:15:75:55:c9:ed:01:cb:
                    c2:30:50:4f:84:36:f6:77:49:e9:b9:3c:20:c2:70:
                    7e:c7:40:8d:a6:1a:46:64:56:33:dd:1f:0e:44:e0:
                    2a:76:68:fb:6e:95:74:64:aa:7c:18:b4:1a:42:4e:
                    29:da:ac:c9:0c:1c:ee:1a:9a:cb:d8:44:ba:33:f9:
                    23:59:67:39:fb:b4:cc:84:ee:60:af:a4:23:60:24:
                    18:5c:df:a8:b5:85:de:ca:01:9b:89:31:02:e0:b8:
                    b4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1D:A6:22:FA:5C:4C:B7:A6:D9:8E:C3:11:C2:EB:8D:AF:DA:C7:A7
            X509v3 Authority Key Identifier:
                keyid:F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:a0:a0:dc:b6:22:32:09:b3:6f:5f:76:b4:8d:eb:5a:2d:a2:
         93:1d:73:12:9e:74:d5:3a:37:a4:02:25:58:04:d0:7f:03:86:
         c8:b1:e9:2b:ba:c2:a0:b2:c7:37:0c:59:7d:3e:3f:79:1b:9d:
         a4:60:b3:73:c1:4c:05:be:a4:11:0c:44:37:c5:2a:f5:cb:b8:
         a8:73:c1:74:87:b9:ba:6d:5c:12:f4:4a:82:5b:7d:1b:9e:51:
         87:56:e7:5d:5e:39:a5:d9:cd:f9:7f:44:75:f3:62:ea:9b:a5:
         f8:a8:f8:d5:87:a8:cd:5b:f4:ee:46:89:5a:f0:cf:6a:ba:f7:
         c8:da:b6:4e:b8:66:9c:52:f8:cd:13:a1:f9:9f:c2:ea:d6:93:
         5e:ff:de:8f:14:73:94:30:db:2c:80:0a:e5:bd:53:db:19:19:
         54:60:79:2c:ec:9c:c2:94:4d:53:1e:ce:9b:08:ba:77:43:82:
         ca:8e:81:20:e7:8c:d3:ee:24:ae:b4:ff:50:38:58:09:80:9d:
         cf:60:b0:f4:44:32:19:72:d2:35:75:5b:02:28:20:11:67:ee:
         f9:65:a9:29:1b:93:11:2f:fb:53:d4:98:c2:da:ba:4f:97:8c:
         b9:22:10:50:37:a0:bc:71:39:60:63:fe:82:16:7f:07:40:2b:
         dc:c2:70:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdWf1k1ZDM7wnonuXVfzNpuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZWY1ZGJhMTAwYTkyYjI0NDRmM2U1MTJkMDFhNTkyYzAx
OTUxYzIwHhcNMjUwNjA5MjEwMTE1WhcNMjUwNjEwMjEwMTE1WjAzMTEwLwYDVQQD
EyhlZTFkYTYyMmZhNWM0Y2I3YTZkOThlYzMxMWMyZWI4ZGFmZGFjN2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGkLNLiA43Qo9QDFlIE7vYotyBJu
uBaxDC51rUlQaHwViEPipa6QhaFyn2H3wKorNKLxnZp3mPxX94MYPX4Mk7FXYMrA
svMMv0paNcIDMNGsnOHaYdUy4Ko38asouMhji2HWk1yoXixfMu+AnQayH7/Cqh3/
3JIRqEUgkBCUYCsixPNeIyrLN8vH0RUD6e1hZMsjq0eOivn3ZoXeRhV1VcntAcvC
MFBPhDb2d0npuTwgwnB+x0CNphpGZFYz3R8OROAqdmj7bpV0ZKp8GLQaQk4p2qzJ
DBzuGprL2ES6M/kjWWc5+7TMhO5gr6QjYCQYXN+otYXeygGbiTEC4Li0YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4dpiL6XEy3ptmOwxHC642v2senMB8GA1UdIwQY
MBaAFPTvXboQCpKyRE8+US0BpZLAGVHCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iMzViZTEtNjY3My00ODExLWE3MDct
YWQwMjdlOTVjNWM3LzEvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9iMzViZTEtNjY3My00ODExLWE3MDctYWQwMjdlOTVjNWM3
LzEvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo6Cg3LYi
Mgmzb192tI3rWi2ikx1zEp501To3pAIlWATQfwOGyLHpK7rCoLLHNwxZfT4/eRud
pGCzc8FMBb6kEQxEN8Uq9cu4qHPBdIe5um1cEvRKglt9G55Rh1bnXV45pdnN+X9E
dfNi6pul+Kj41YeozVv07kaJWvDParr3yNq2TrhmnFL4zROh+Z/C6taTXv/ejxRz
lDDbLIAK5b1T2xkZVGB5LOycwpRNUx7Omwi6d0OCyo6BIOeM0+4krrT/UDhYCYCd
z2Cw9EQyGXLSNXVbAiggEWfu+WWpKRuTES/7U9SYwtq6T5eMuSIQUDegvHE5YGP+
ghZ/B0Ar3MJwdA==
-----END CERTIFICATE-----
Generated at Tue Jun 10 00:56:47 2025 by rpki-client