Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.mft
File:                     9_SQLSQLJdfrd_TwLiTyM_RKmhM.mft (raw, json)
Hash identifier:          4i8DTawHsjI0yBPHQqWn7GhgDpiLBNTxcZEIPHa9YA4=
Subject key identifier:   05:AD:7F:D7:FB:04:6B:4F:B6:63:51:E8:F0:6F:9E:C9:3B:31:B1:29
Authority key identifier: F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13
Certificate issuer:       /CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13
Certificate serial:       019D390A23938AB8DE9745A111A290B22777
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.mft
Manifest number:          1492
Signing time:             Sun 29 Mar 2026 10:00:58 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:58 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:58 +0000
Files and hashes:         1: 1-3_UXlI7lgTO61EleA3c64pzy4Q.roa (hash: Uoifnsww6M0WWvrx79PWy9RRcFo0DQK8iBmjEiwNy+w=)
                          2: 9_SQLSQLJdfrd_TwLiTyM_RKmhM.crl (hash: K7tMikUgqLZvuQnZfEyvAI7DYOArEejvt/J+yFnHtLo=)
                          3: btwX4uOLhpX8PdO9FjiDp3A4nDw.roa (hash: T8izFyz3wpewzhPofNbdL4jbwtjSxm9WFWHn9isN/w8=)
                          4: gFTfnJYc2V1LVsfRNUUiK-FUI9U.roa (hash: m8is5BMhC18gH/bsyYfQI/5z05HbQux2gKkK/YneuSc=)
                          5: xHgaXte9HqMrsf8WuO3SOUGon4k.roa (hash: BLSOqyIwGSV17AMpLrGkfpwd4bhMWIYoasF0mEgmUds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 10:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:23:93:8a:b8:de:97:45:a1:11:a2:90:b2:27:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13
        Validity
            Not Before: Mar 29 10:00:58 2026 GMT
            Not After : Mar 30 10:00:58 2026 GMT
        Subject: CN=05ad7fd7fb046b4fb66351e8f06f9ec93b31b129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:57:e7:70:07:9d:3a:35:64:dc:f2:1f:1d:2d:
                    44:31:58:6d:d8:cc:34:e2:34:3a:b2:5f:4d:3a:6d:
                    91:78:22:84:0b:61:e4:c8:d1:38:e3:35:c1:0e:dd:
                    6c:69:1d:ed:5f:d7:ae:b8:ce:29:fe:d7:a8:34:cf:
                    06:49:8d:35:04:61:05:87:d8:05:37:a4:ea:88:54:
                    8a:a4:52:ec:a6:70:63:cc:58:de:94:27:a3:2a:3f:
                    36:cd:18:c1:21:2d:94:c5:a4:b4:55:39:11:40:a3:
                    71:78:e4:d0:42:1d:f1:f4:53:f0:b3:cb:c1:02:e4:
                    87:4a:1e:a5:d5:ea:16:0f:5f:a0:a4:73:6b:63:df:
                    a7:1e:e6:90:af:2d:e1:cf:66:4e:fa:1d:d5:08:18:
                    ee:ea:5d:26:62:34:f0:28:64:60:37:68:61:1a:7d:
                    3a:3f:97:1b:f2:ab:fa:0b:93:e8:61:52:3b:d7:99:
                    f3:54:e5:42:45:88:ce:a6:c2:15:31:3b:03:3e:22:
                    22:ee:5e:ae:8f:84:92:16:df:95:86:1f:4d:ed:d9:
                    0b:9b:85:1f:88:35:15:d8:23:66:11:11:00:c2:38:
                    ee:d3:11:93:dd:3e:76:bd:47:64:91:92:de:0e:67:
                    da:f6:9d:13:50:6f:50:c2:1d:2f:10:20:ba:22:0d:
                    64:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AD:7F:D7:FB:04:6B:4F:B6:63:51:E8:F0:6F:9E:C9:3B:31:B1:29
            X509v3 Authority Key Identifier:
                keyid:F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:77:33:5b:42:b1:e6:45:6d:f9:6c:89:8c:fb:20:77:f6:14:
         78:cc:d3:50:bd:2f:3d:ba:48:e8:e9:07:20:a2:f8:02:24:d4:
         ac:cf:63:e3:43:91:18:55:8f:69:d1:22:35:2a:c5:9e:db:da:
         ec:39:a7:1b:5d:75:80:41:03:45:36:72:34:e3:08:b1:a8:6b:
         c0:05:62:05:51:dc:da:87:ad:27:76:35:90:df:ae:12:74:ed:
         79:c8:68:f9:0a:d2:16:ed:b4:98:e2:a5:1e:2d:81:45:37:0a:
         ad:04:62:40:01:48:a9:de:64:09:ab:67:de:87:2f:4e:d8:a8:
         64:6e:ec:8d:d7:59:0d:ab:54:d4:45:15:16:dc:ae:90:28:5a:
         99:63:5b:ec:7f:31:c5:a2:c6:98:c0:f0:a3:44:a9:96:50:5e:
         87:ab:b1:8d:48:50:49:1f:e7:09:b4:da:e6:42:05:d9:a6:90:
         2d:3b:e3:f8:e9:a9:35:3b:37:73:3f:30:3f:28:04:de:bb:45:
         91:9f:3b:b6:97:b7:43:5d:71:ac:ea:9a:2d:ba:6d:d0:82:1c:
         b9:98:17:d0:ce:6b:09:b0:c2:31:eb:1b:ec:af:da:c4:64:3f:
         1b:52:09:0f:92:c7:a8:eb:77:72:4f:af:6c:0e:41:7a:93:be:
         7a:a0:7d:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CiOTirjel0WhEaKQsid3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZjQ5MDJkMjQwYjI1ZDdlYjc3ZjRmMDJlMjRmMjMzZjQ0
YTlhMTMwHhcNMjYwMzI5MTAwMDU4WhcNMjYwMzMwMTAwMDU4WjAzMTEwLwYDVQQD
EygwNWFkN2ZkN2ZiMDQ2YjRmYjY2MzUxZThmMDZmOWVjOTNiMzFiMTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VfncAedOjVk3PIfHS1EMVht2Mw0
4jQ6sl9NOm2ReCKEC2HkyNE44zXBDt1saR3tX9euuM4p/teoNM8GSY01BGEFh9gF
N6TqiFSKpFLspnBjzFjelCejKj82zRjBIS2UxaS0VTkRQKNxeOTQQh3x9FPws8vB
AuSHSh6l1eoWD1+gpHNrY9+nHuaQry3hz2ZO+h3VCBju6l0mYjTwKGRgN2hhGn06
P5cb8qv6C5PoYVI715nzVOVCRYjOpsIVMTsDPiIi7l6uj4SSFt+Vhh9N7dkLm4Uf
iDUV2CNmEREAwjju0xGT3T52vUdkkZLeDmfa9p0TUG9Qwh0vECC6Ig1kyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWtf9f7BGtPtmNR6PBvnsk7MbEpMB8GA1UdIwQY
MBaAFPf0kC0kCyXX63f08C4k8jP0SpoTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOV9TUUxTUUxKZGZyZF9Ud0xpVHlNX1JLbWhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9jNmE0ZmUtYTc2MC00YzRjLTgxYjAt
NTNhYjg4YzVmMmM3LzEvOV9TUUxTUUxKZGZyZF9Ud0xpVHlNX1JLbWhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9jNmE0ZmUtYTc2MC00YzRjLTgxYjAtNTNhYjg4YzVmMmM3
LzEvOV9TUUxTUUxKZGZyZF9Ud0xpVHlNX1JLbWhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXczW0Kx
5kVt+WyJjPsgd/YUeMzTUL0vPbpI6OkHIKL4AiTUrM9j40ORGFWPadEiNSrFntva
7DmnG111gEEDRTZyNOMIsahrwAViBVHc2oetJ3Y1kN+uEnTtecho+QrSFu20mOKl
Hi2BRTcKrQRiQAFIqd5kCatn3ocvTtioZG7sjddZDatU1EUVFtyukChamWNb7H8x
xaLGmMDwo0SpllBeh6uxjUhQSR/nCbTa5kIF2aaQLTvj+OmpNTs3cz8wPygE3rtF
kZ87tpe3Q11xrOqaLbpt0IIcuZgX0M5rCbDCMesb7K/axGQ/G1IJD5LHqOt3ck+v
bA5BepO+eqB99w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:48:25 2026 by rpki-client