Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft
File:                     dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft (raw, json)
Hash identifier:          Drn56Odh3DJCREmT6LzuA9c4rVsSrElTm8wnCyiUqCE=
Subject key identifier:   88:C3:0E:08:37:85:50:F8:9E:A7:84:66:90:91:26:B0:1F:C6:53:A0
Authority key identifier: 76:9C:74:45:F5:67:91:2C:E8:28:A5:F7:87:EC:94:4A:08:DB:FD:E3
Certificate issuer:       /CN=769c7445f567912ce828a5f787ec944a08dbfde3
Certificate serial:       0199239F6B6DAA68C2B79A6511C79F54449B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dpx0RfVnkSzoKKX3h-yUSgjb_eM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft
Manifest number:          1252
Signing time:             Sun 07 Sep 2025 10:01:14 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:14 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:14 +0000
Files and hashes:         1: dpx0RfVnkSzoKKX3h-yUSgjb_eM.crl (hash: u2+hzMqxsf1eXh7X9GxysvN6CTzyU31gmJyKW67YYRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dpx0RfVnkSzoKKX3h-yUSgjb_eM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:6b:6d:aa:68:c2:b7:9a:65:11:c7:9f:54:44:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=769c7445f567912ce828a5f787ec944a08dbfde3
        Validity
            Not Before: Sep  7 10:01:14 2025 GMT
            Not After : Sep  8 10:01:14 2025 GMT
        Subject: CN=88c30e08378550f89ea78466909126b01fc653a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ce:7b:de:e3:d1:25:20:b6:e1:f3:15:e5:26:
                    5e:7f:86:f7:7e:64:b1:08:42:3b:93:fc:19:0a:cf:
                    7f:d2:e7:80:98:48:82:ab:9b:78:57:d3:25:8b:81:
                    79:80:95:18:2f:df:17:73:42:54:65:68:40:48:19:
                    7f:f5:51:a2:67:46:88:a1:cb:f7:9e:b8:90:1a:f3:
                    1b:83:83:cc:77:4a:c3:05:8e:a9:69:b1:b5:63:4e:
                    88:31:34:28:03:1b:59:18:ac:e4:f3:99:bd:a8:83:
                    a7:c3:0a:7d:e3:aa:04:d5:fd:d3:5b:57:1f:c0:f1:
                    c7:06:be:db:1d:e2:67:e0:92:86:fc:97:4f:fe:71:
                    f9:ae:0f:2a:01:a4:72:70:bf:54:3e:02:89:62:95:
                    08:11:9e:f7:da:1e:dc:cf:c0:d7:ec:b5:9f:b6:6b:
                    cb:31:0c:79:4f:5c:fc:e0:27:bb:a3:10:70:4e:5f:
                    4b:6f:5a:2d:d5:c6:6b:c3:11:a5:29:0b:12:d6:9c:
                    bb:27:a4:fa:0b:7e:a5:7b:12:0e:f6:7f:75:89:4b:
                    fc:15:19:54:cd:a8:47:22:d5:8c:15:37:1c:0f:6b:
                    b2:af:24:b6:82:32:79:5f:45:3c:d2:fb:87:2c:c7:
                    34:fb:12:07:6e:86:71:55:a9:ad:f7:a0:2c:bc:3c:
                    bd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C3:0E:08:37:85:50:F8:9E:A7:84:66:90:91:26:B0:1F:C6:53:A0
            X509v3 Authority Key Identifier:
                keyid:76:9C:74:45:F5:67:91:2C:E8:28:A5:F7:87:EC:94:4A:08:DB:FD:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpx0RfVnkSzoKKX3h-yUSgjb_eM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ed:da:65:9c:08:e3:8e:ce:0f:43:34:d1:3f:a9:7a:fd:74:
         90:60:31:ed:ff:d9:1a:75:c8:90:93:d8:76:f8:73:df:9f:93:
         9b:49:f2:01:1d:35:03:26:71:72:7e:b3:fa:df:06:7a:c5:06:
         95:60:37:64:e0:c9:47:5c:18:dd:4e:33:4f:7f:06:82:39:9f:
         66:28:d8:f5:16:40:16:38:01:f8:66:f8:e5:ad:be:95:52:b0:
         f4:72:2a:a5:8d:6d:c3:8b:67:7f:e7:73:99:c6:41:ac:34:50:
         6e:b7:8e:19:c0:c8:e7:70:62:8e:64:a2:a4:04:af:f5:5d:28:
         37:f4:18:18:12:c8:22:32:80:fa:92:c2:66:da:73:d4:b6:89:
         94:84:6d:4c:ff:61:8b:a8:e7:31:ce:fc:d6:bb:95:64:42:74:
         48:c7:f9:63:19:ec:4e:be:1d:8c:9d:30:f4:97:c0:88:b3:39:
         ee:51:59:be:9b:34:85:5f:53:6f:0f:6d:b0:e1:9e:c4:33:61:
         79:6d:42:d0:a0:46:16:cc:b0:a1:05:4a:28:d0:ad:fb:be:05:
         a8:43:f8:e7:a8:01:19:61:7e:31:c7:99:eb:ec:65:98:8a:bc:
         cb:0f:ad:e1:36:d3:e6:d3:2b:89:d8:51:84:ab:28:40:99:57:
         65:03:54:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn2ttqmjCt5plEcefVESbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2OWM3NDQ1ZjU2NzkxMmNlODI4YTVmNzg3ZWM5NDRhMDhk
YmZkZTMwHhcNMjUwOTA3MTAwMTE0WhcNMjUwOTA4MTAwMTE0WjAzMTEwLwYDVQQD
Eyg4OGMzMGUwODM3ODU1MGY4OWVhNzg0NjY5MDkxMjZiMDFmYzY1M2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0s573uPRJSC24fMV5SZef4b3fmSx
CEI7k/wZCs9/0ueAmEiCq5t4V9Mli4F5gJUYL98Xc0JUZWhASBl/9VGiZ0aIocv3
nriQGvMbg4PMd0rDBY6pabG1Y06IMTQoAxtZGKzk85m9qIOnwwp946oE1f3TW1cf
wPHHBr7bHeJn4JKG/JdP/nH5rg8qAaRycL9UPgKJYpUIEZ732h7cz8DX7LWftmvL
MQx5T1z84Ce7oxBwTl9Lb1ot1cZrwxGlKQsS1py7J6T6C36lexIO9n91iUv8FRlU
zahHItWMFTccD2uyryS2gjJ5X0U80vuHLMc0+xIHboZxVamt96AsvDy98wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjDDgg3hVD4nqeEZpCRJrAfxlOgMB8GA1UdIwQY
MBaAFHacdEX1Z5Es6Cil94fslEoI2/3jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHB4MFJmVm5rU3pvS0tYM2gteVVTZ2piX2VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8wYjk3NzMtZjlkOC00ZDg3LTg3NzIt
NzAwOGJjOTdjN2IxLzEvZHB4MFJmVm5rU3pvS0tYM2gteVVTZ2piX2VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8wYjk3NzMtZjlkOC00ZDg3LTg3NzItNzAwOGJjOTdjN2Ix
LzEvZHB4MFJmVm5rU3pvS0tYM2gteVVTZ2piX2VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYu3aZZwI
447OD0M00T+pev10kGAx7f/ZGnXIkJPYdvhz35+Tm0nyAR01AyZxcn6z+t8GesUG
lWA3ZODJR1wY3U4zT38GgjmfZijY9RZAFjgB+Gb45a2+lVKw9HIqpY1tw4tnf+dz
mcZBrDRQbreOGcDI53BijmSipASv9V0oN/QYGBLIIjKA+pLCZtpz1LaJlIRtTP9h
i6jnMc781ruVZEJ0SMf5YxnsTr4djJ0w9JfAiLM57lFZvps0hV9Tbw9tsOGexDNh
eW1C0KBGFsywoQVKKNCt+74FqEP456gBGWF+MceZ6+xlmIq8yw+t4TbT5tMridhR
hKsoQJlXZQNUeQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:48:37 2025 by rpki-client