Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
File:                     A-7ifdtJC7lmnuug4RaUFkyi6Og.mft (raw, json)
Hash identifier:          wFdRcIjf1Yh2x0E/ydQcnCyj0E0rNQcagKRornKU8wY=
Subject key identifier:   79:02:BA:FB:7E:D2:AF:55:0A:01:DC:4A:15:F5:FB:6C:55:5D:B9:C5
Authority key identifier: 03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
Certificate issuer:       /CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Certificate serial:       019921E7761DB012B6925697DD01C6FB6C99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
Manifest number:          032D
Signing time:             Sun 07 Sep 2025 02:00:41 +0000
Manifest this update:     Sun 07 Sep 2025 02:00:41 +0000
Manifest next update:     Mon 08 Sep 2025 02:00:41 +0000
Files and hashes:         1: A-7ifdtJC7lmnuug4RaUFkyi6Og.crl (hash: 9bZaZlL5qGFrnVmy/6W2N7pgqMyh9dr4Ho5Ki077gEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 02:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:e7:76:1d:b0:12:b6:92:56:97:dd:01:c6:fb:6c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
        Validity
            Not Before: Sep  7 02:00:41 2025 GMT
            Not After : Sep  8 02:00:41 2025 GMT
        Subject: CN=7902bafb7ed2af550a01dc4a15f5fb6c555db9c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:36:f1:90:11:7c:52:ed:15:12:36:87:d5:55:
                    5c:5e:ae:eb:0c:14:6a:2a:c4:94:00:c1:48:6d:41:
                    e3:2b:91:9a:82:2a:b2:8e:e5:10:2d:c6:28:b9:b6:
                    a2:2a:63:4a:62:36:78:b5:b0:c6:06:11:76:f0:c6:
                    e1:8e:b3:86:fd:dc:4b:07:f8:9e:c5:ea:47:8c:0a:
                    e5:5f:5a:2c:71:4c:45:db:d5:d6:7c:a5:15:1b:3b:
                    a8:3b:99:55:61:ee:0a:3a:78:51:67:a7:d2:8d:b2:
                    39:90:09:24:93:17:5d:f3:bd:71:15:39:cc:45:a0:
                    0d:63:db:59:f9:9c:ba:43:2a:82:05:8a:b2:4c:18:
                    d3:30:13:dc:cb:bc:b4:5e:dd:58:c7:54:3a:91:92:
                    fc:fa:3b:e1:15:48:08:e9:2c:0c:ef:20:b5:c7:2f:
                    7a:b4:65:bc:61:d6:97:a9:a9:60:54:16:79:45:df:
                    54:8f:56:a1:f2:81:95:d6:3a:2e:a4:13:fc:46:ec:
                    d8:6b:5b:0a:ec:e4:68:b9:df:db:69:3c:27:db:44:
                    30:a8:3c:49:f1:17:eb:a5:f4:48:46:53:a0:fc:b3:
                    84:3e:b4:d6:6a:34:dc:42:93:17:bf:38:13:a1:02:
                    2e:3c:b6:69:74:15:a5:f1:b8:2c:fb:3d:44:2e:aa:
                    1b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:02:BA:FB:7E:D2:AF:55:0A:01:DC:4A:15:F5:FB:6C:55:5D:B9:C5
            X509v3 Authority Key Identifier:
                keyid:03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:5f:fa:40:f6:df:b0:e9:8f:75:13:3c:2d:9d:4b:33:58:a9:
         70:4c:6e:97:33:e0:5e:8a:1e:48:75:2f:0a:eb:4b:c5:a9:49:
         8e:bd:5f:08:a9:a3:1e:31:11:9b:a3:cc:ab:9b:47:5d:ea:0c:
         61:73:e2:c8:ae:18:69:2f:3f:63:c9:6d:1e:6e:95:ab:6c:0f:
         11:5e:21:a6:a6:af:63:d5:29:da:b5:8e:2a:ce:ce:22:dd:82:
         4c:f9:26:b3:95:0d:e8:b1:dc:5c:27:e7:67:8c:a9:d9:2e:1f:
         26:22:da:6d:a0:38:84:45:6e:2c:6d:9b:5c:2f:61:9e:d8:65:
         f7:a7:30:94:d7:da:7c:e4:96:60:20:0c:a2:65:2e:75:08:9d:
         8a:79:65:e4:2e:ad:f2:19:21:e6:62:08:c4:4f:05:d7:24:88:
         d2:ce:d8:51:0f:78:c9:e0:c9:1b:4e:79:06:f2:21:b1:f5:47:
         f9:1e:52:a1:b8:f0:7b:99:3c:cd:73:02:bb:35:8a:9c:51:47:
         e3:44:e4:39:c8:89:05:11:8c:79:55:4f:dc:41:a9:cc:d1:bc:
         61:0b:7b:8e:7b:d4:a2:e2:1b:ff:00:bd:4d:0e:78:fa:21:6d:
         fb:09:93:41:4f:9a:7c:44:60:87:1c:8c:66:65:cf:0e:13:9a:
         ff:69:9c:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh53YdsBK2klaX3QHG+2yZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZWVlMjdkZGI0OTBiYjk2NjllZWJhMGUxMTY5NDE2NGNh
MmU4ZTgwHhcNMjUwOTA3MDIwMDQxWhcNMjUwOTA4MDIwMDQxWjAzMTEwLwYDVQQD
Eyg3OTAyYmFmYjdlZDJhZjU1MGEwMWRjNGExNWY1ZmI2YzU1NWRiOWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TbxkBF8Uu0VEjaH1VVcXq7rDBRq
KsSUAMFIbUHjK5GagiqyjuUQLcYoubaiKmNKYjZ4tbDGBhF28MbhjrOG/dxLB/ie
xepHjArlX1oscUxF29XWfKUVGzuoO5lVYe4KOnhRZ6fSjbI5kAkkkxdd871xFTnM
RaANY9tZ+Zy6QyqCBYqyTBjTMBPcy7y0Xt1Yx1Q6kZL8+jvhFUgI6SwM7yC1xy96
tGW8YdaXqalgVBZ5Rd9Uj1ah8oGV1joupBP8RuzYa1sK7ORoud/baTwn20QwqDxJ
8RfrpfRIRlOg/LOEPrTWajTcQpMXvzgToQIuPLZpdBWl8bgs+z1ELqob5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkCuvt+0q9VCgHcShX1+2xVXbnFMB8GA1UdIwQY
MBaAFAPu4n3bSQu5Zp7roOEWlBZMoujoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQS03aWZkdEpDN2xtbnV1ZzRSYVVGa3lpNk9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9kNGQyMzEtYTlhNS00MDdiLWJhMjUt
OGQ4YzU5MmRhNDIwLzEvQS03aWZkdEpDN2xtbnV1ZzRSYVVGa3lpNk9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9kNGQyMzEtYTlhNS00MDdiLWJhMjUtOGQ4YzU5MmRhNDIw
LzEvQS03aWZkdEpDN2xtbnV1ZzRSYVVGa3lpNk9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcF/6QPbf
sOmPdRM8LZ1LM1ipcExulzPgXooeSHUvCutLxalJjr1fCKmjHjERm6PMq5tHXeoM
YXPiyK4YaS8/Y8ltHm6Vq2wPEV4hpqavY9Up2rWOKs7OIt2CTPkms5UN6LHcXCfn
Z4yp2S4fJiLabaA4hEVuLG2bXC9hnthl96cwlNfafOSWYCAMomUudQidinll5C6t
8hkh5mIIxE8F1ySI0s7YUQ94yeDJG055BvIhsfVH+R5Sobjwe5k8zXMCuzWKnFFH
40TkOciJBRGMeVVP3EGpzNG8YQt7jnvUouIb/wC9TQ54+iFt+wmTQU+afERghxyM
ZmXPDhOa/2mc+A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:51 2025 by rpki-client