Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
File:                     9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft (raw, json)
Hash identifier:          351IcB/jNk2tb1k8W9SBmE+ZQr94i+YqSC1rftNxQgk=
Subject key identifier:   CF:41:F5:98:9D:43:36:D7:5B:90:A8:75:1D:87:20:35:F9:CC:A4:C2
Authority key identifier: F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
Certificate issuer:       /CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Certificate serial:       01974C699359D0355BA7919D3B22F3293669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
Manifest number:          1567
Signing time:             Sat 07 Jun 2025 22:01:16 +0000
Manifest this update:     Sat 07 Jun 2025 22:01:16 +0000
Manifest next update:     Sun 08 Jun 2025 22:01:16 +0000
Files and hashes:         1: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl (hash: 342uv8CiTC6gbed3MmcF0JYPgKQ6611YfB1ipSboV38=)
                          2: SJe0yiKrFFgre-LwlA373na16-M.roa (hash: W+lZ86QtGfH27JSeGBvOgaus0tZU6nh0IODmn6TYevo=)
                          3: rXYQihXZcHzDYDPfOCw2uf0QxOs.roa (hash: mgxpGPq3j8kcIVwK/lsmtpT+En8AA3E9GG8LueVY7g4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 22:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:93:59:d0:35:5b:a7:91:9d:3b:22:f3:29:36:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7e679e58e4b8bf63e95002b54be471d634b9506
        Validity
            Not Before: Jun  7 22:01:16 2025 GMT
            Not After : Jun  8 22:01:16 2025 GMT
        Subject: CN=cf41f5989d4336d75b90a8751d872035f9cca4c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4a:a7:5c:14:97:c4:2a:45:1a:0f:24:a2:e6:
                    a7:7d:a2:a8:eb:5d:77:de:61:b0:1a:9f:63:de:39:
                    20:34:84:7d:d1:9f:83:04:da:8f:4c:3c:b9:b1:c2:
                    77:d7:65:60:4c:51:2d:56:57:e9:c2:a8:f0:9f:12:
                    f4:10:25:b7:b4:9e:03:7a:43:b1:55:8b:be:a7:13:
                    c0:6f:47:27:b2:05:2c:2a:79:00:09:67:eb:5c:f2:
                    15:14:b4:84:75:af:17:dd:84:dd:38:bb:59:de:31:
                    f0:89:d7:76:16:6e:11:c0:f9:34:74:be:f2:a4:7c:
                    76:cd:97:2a:0b:7f:ec:02:47:de:49:dc:e8:a6:f5:
                    40:ba:d4:3e:bd:5a:95:6d:64:cb:08:b0:1e:f6:82:
                    95:2b:8b:10:87:75:52:55:72:9b:72:32:ce:58:8a:
                    24:49:ea:44:29:da:68:f0:7c:13:a2:ac:1e:84:f8:
                    64:91:48:c4:bc:98:ae:18:9a:46:87:73:c5:91:6e:
                    da:db:d0:18:96:21:b1:c9:8c:65:b0:77:e3:a9:85:
                    f8:c3:c4:f3:16:b1:e9:4a:1d:09:0b:6d:53:73:c5:
                    31:d2:c7:f1:07:32:fc:4e:69:e4:f2:ac:e8:ee:95:
                    95:d1:d3:6a:1c:b6:2c:e5:16:6b:0d:75:15:44:58:
                    13:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:41:F5:98:9D:43:36:D7:5B:90:A8:75:1D:87:20:35:F9:CC:A4:C2
            X509v3 Authority Key Identifier:
                keyid:F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:7f:22:75:77:b1:e8:33:de:fd:ae:a9:71:5d:45:16:a9:25:
         59:f7:06:91:70:f5:5e:b4:d4:9e:dc:e4:a6:fb:b0:cb:3c:60:
         21:bc:7d:0b:48:b3:14:3f:5e:73:94:b0:d5:44:d1:cd:83:4b:
         b3:c6:f5:c9:53:ab:34:b4:c7:eb:3f:4d:3c:fe:4d:3e:6d:5d:
         f5:d0:21:44:3c:11:77:8b:46:9e:d8:bd:94:3f:42:58:8a:2b:
         83:63:d1:88:15:d1:87:57:1a:c3:82:d3:b6:36:86:75:0d:6b:
         ef:05:84:f7:6f:46:9c:3b:e3:29:3d:c4:4c:38:a1:db:af:b3:
         81:19:6b:f1:61:2b:27:e1:12:f0:32:5a:69:94:29:20:f2:bb:
         57:9e:4e:24:14:92:0e:95:12:0a:ad:99:7c:70:2c:e8:c9:62:
         3c:04:e6:aa:e1:23:1f:90:a9:29:8e:21:c6:3d:ab:a7:c8:8d:
         8b:ff:20:c5:84:ac:3b:d1:cb:65:5e:c8:cd:de:a9:74:e1:4a:
         cc:c3:94:c9:34:24:47:8f:df:56:d9:95:26:b8:23:94:05:5a:
         d2:c6:7c:32:c9:5f:b6:77:df:42:60:da:f1:8d:10:27:c2:24:
         b4:52:9f:3f:6a:88:27:ed:2c:00:eb:53:3e:75:c0:ba:b4:8e:
         5a:e5:fb:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMaZNZ0DVbp5GdOyLzKTZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZTY3OWU1OGU0YjhiZjYzZTk1MDAyYjU0YmU0NzFkNjM0
Yjk1MDYwHhcNMjUwNjA3MjIwMTE2WhcNMjUwNjA4MjIwMTE2WjAzMTEwLwYDVQQD
EyhjZjQxZjU5ODlkNDMzNmQ3NWI5MGE4NzUxZDg3MjAzNWY5Y2NhNGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokqnXBSXxCpFGg8kouanfaKo6113
3mGwGp9j3jkgNIR90Z+DBNqPTDy5scJ312VgTFEtVlfpwqjwnxL0ECW3tJ4DekOx
VYu+pxPAb0cnsgUsKnkACWfrXPIVFLSEda8X3YTdOLtZ3jHwidd2Fm4RwPk0dL7y
pHx2zZcqC3/sAkfeSdzopvVAutQ+vVqVbWTLCLAe9oKVK4sQh3VSVXKbcjLOWIok
SepEKdpo8HwToqwehPhkkUjEvJiuGJpGh3PFkW7a29AYliGxyYxlsHfjqYX4w8Tz
FrHpSh0JC21Tc8Ux0sfxBzL8Tmnk8qzo7pWV0dNqHLYs5RZrDXUVRFgTWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9B9ZidQzbXW5CodR2HIDX5zKTCMB8GA1UdIwQY
MBaAFPfmeeWOS4v2PpUAK1S+Rx1jS5UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOS1aNTVZNUxpX1ktbFFBclZMNUhIV05MbFFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC80ZmM3ODctZTY4MS00ZTE2LWIxZWMt
YTFjNWQ3ZWI0YmQ3LzEvOS1aNTVZNUxpX1ktbFFBclZMNUhIV05MbFFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC80ZmM3ODctZTY4MS00ZTE2LWIxZWMtYTFjNWQ3ZWI0YmQ3
LzEvOS1aNTVZNUxpX1ktbFFBclZMNUhIV05MbFFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO38idXex
6DPe/a6pcV1FFqklWfcGkXD1XrTUntzkpvuwyzxgIbx9C0izFD9ec5Sw1UTRzYNL
s8b1yVOrNLTH6z9NPP5NPm1d9dAhRDwRd4tGnti9lD9CWIorg2PRiBXRh1caw4LT
tjaGdQ1r7wWE929GnDvjKT3ETDih26+zgRlr8WErJ+ES8DJaaZQpIPK7V55OJBSS
DpUSCq2ZfHAs6MliPATmquEjH5CpKY4hxj2rp8iNi/8gxYSsO9HLZV7Izd6pdOFK
zMOUyTQkR4/fVtmVJrgjlAVa0sZ8MslftnffQmDa8Y0QJ8IktFKfP2qIJ+0sAOtT
PnXAurSOWuX7Ow==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:16:34 2025 by rpki-client