Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
File:                     t09j_Q3Bl-Uq0nInbEDT7kux15k.mft (raw, json)
Hash identifier:          56W1Vc9LCqI/yeRD6URD9RgJEKYAfhFy7xS4uKMfXqM=
Subject key identifier:   2C:9F:72:1C:BE:A2:50:4C:5A:EA:A3:C3:A6:29:8B:07:73:EC:53:B0
Authority key identifier: B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99
Certificate issuer:       /CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
Certificate serial:       0197488C7C7B10372081319BE5F02967B3D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
Manifest number:          131F
Signing time:             Sat 07 Jun 2025 04:00:55 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:55 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:55 +0000
Files and hashes:         1: CTtxM-1YJnI7s2CeXEI8bJGchw8.roa (hash: m3vS1eOhVy8HVysz20rw/64QS2NyFhJNMyCoI4Eqes4=)
                          2: t09j_Q3Bl-Uq0nInbEDT7kux15k.crl (hash: ZaMhlk7mCRBKze48AoRrou4ATIvw/+p5libIN2ZpbnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:7c:7b:10:37:20:81:31:9b:e5:f0:29:67:b3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
        Validity
            Not Before: Jun  7 04:00:55 2025 GMT
            Not After : Jun  8 04:00:55 2025 GMT
        Subject: CN=2c9f721cbea2504c5aeaa3c3a6298b0773ec53b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:81:3e:9f:e8:42:ad:a4:57:3c:c5:52:55:20:
                    ce:51:9f:53:56:c8:be:ce:1a:28:2b:a0:34:1b:c3:
                    96:2f:7d:4d:b6:2a:13:94:ec:6d:1e:4e:a1:90:47:
                    82:5a:06:89:7b:47:8e:ab:b4:56:96:26:77:b8:42:
                    54:a1:07:6e:d5:e9:8e:2b:47:8c:1a:c2:a2:d3:b4:
                    86:69:c0:7f:98:91:11:45:94:c7:82:7a:da:06:2f:
                    5d:e8:72:21:71:3c:6c:d6:87:70:38:6b:b6:03:14:
                    47:f7:14:2c:00:5e:82:6f:7c:92:84:a1:8d:a4:a9:
                    53:6f:ca:2c:fd:ed:5c:32:a8:e0:2c:fa:cb:d5:f0:
                    47:0e:af:2f:16:8e:ac:4f:8b:00:90:3f:e0:c7:4d:
                    8c:5f:ba:05:50:8f:24:b6:7c:df:19:35:04:3a:99:
                    f2:9d:36:ae:4d:02:7d:d7:71:e2:64:2a:ec:d9:01:
                    2c:97:3e:e4:06:d3:21:48:c0:7d:9f:70:56:c3:fc:
                    8c:7d:88:73:cf:b6:ba:ae:64:58:95:55:75:57:0f:
                    6a:f1:46:32:a2:30:1c:9b:85:81:70:6d:77:8a:bb:
                    62:ba:7e:d3:9a:50:ea:b1:71:fa:9a:6e:1c:54:b9:
                    37:5f:31:8f:03:f5:aa:14:04:43:8c:5e:4d:f7:a3:
                    01:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9F:72:1C:BE:A2:50:4C:5A:EA:A3:C3:A6:29:8B:07:73:EC:53:B0
            X509v3 Authority Key Identifier:
                keyid:B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:53:fa:18:e0:7d:79:66:fb:7b:87:ae:30:3b:f1:b9:32:00:
         e5:71:69:d2:2d:f2:24:81:b2:5e:a8:ab:c7:40:a1:4e:f0:de:
         20:64:04:3d:77:a5:88:5c:ff:10:0a:62:2d:39:85:a3:91:fd:
         d8:d7:a3:85:b8:d0:cb:48:79:6f:00:e7:25:ec:f9:01:04:3b:
         f2:45:43:59:f5:32:9b:31:a8:72:7b:7c:0c:f7:15:38:be:8f:
         6e:6d:5b:50:7d:01:a5:00:ed:49:e3:cb:d6:af:83:bb:eb:e4:
         29:09:42:2c:9a:4e:89:52:97:33:b7:23:7e:e4:1a:f4:49:80:
         53:84:68:cf:7c:46:a5:a7:46:3d:3d:c7:fe:52:b4:dd:5c:6e:
         bc:00:0b:6b:41:2b:37:91:69:95:85:08:cb:ae:9a:1f:b8:69:
         ef:a7:d2:5c:08:72:fc:c3:7b:e4:24:d6:01:ee:10:93:04:e1:
         3c:ad:dc:f7:cd:7c:0d:4d:73:2e:6a:4a:55:ad:0e:12:a2:1b:
         66:68:7b:31:f0:82:c6:39:8d:b6:ec:6a:27:10:73:c4:3d:0b:
         82:87:c3:f6:82:5d:bc:eb:33:7d:25:cf:29:95:30:df:15:4b:
         5d:da:ab:66:1e:1f:e7:db:b8:c9:08:a6:d0:5e:42:a1:9a:e6:
         6e:ab:6a:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjHx7EDcggTGb5fApZ7PWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NGY2M2ZkMGRjMTk3ZTUyYWQyNzIyNzZjNDBkM2VlNGJi
MWQ3OTkwHhcNMjUwNjA3MDQwMDU1WhcNMjUwNjA4MDQwMDU1WjAzMTEwLwYDVQQD
EygyYzlmNzIxY2JlYTI1MDRjNWFlYWEzYzNhNjI5OGIwNzczZWM1M2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYE+n+hCraRXPMVSVSDOUZ9TVsi+
zhooK6A0G8OWL31NtioTlOxtHk6hkEeCWgaJe0eOq7RWliZ3uEJUoQdu1emOK0eM
GsKi07SGacB/mJERRZTHgnraBi9d6HIhcTxs1odwOGu2AxRH9xQsAF6Cb3yShKGN
pKlTb8os/e1cMqjgLPrL1fBHDq8vFo6sT4sAkD/gx02MX7oFUI8ktnzfGTUEOpny
nTauTQJ913HiZCrs2QEslz7kBtMhSMB9n3BWw/yMfYhzz7a6rmRYlVV1Vw9q8UYy
ojAcm4WBcG13irtiun7TmlDqsXH6mm4cVLk3XzGPA/WqFARDjF5N96MB5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyfchy+olBMWuqjw6Ypiwdz7FOwMB8GA1UdIwQY
MBaAFLdPY/0NwZflKtJyJ2xA0+5LsdeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDA5al9RM0JsLVVxMG5JbmJFRFQ3a3V4MTVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85ODExNzYtNGQxMC00ODU5LWJhMGYt
MWQyMmIwMmI5YjFiLzEvdDA5al9RM0JsLVVxMG5JbmJFRFQ3a3V4MTVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS85ODExNzYtNGQxMC00ODU5LWJhMGYtMWQyMmIwMmI5YjFi
LzEvdDA5al9RM0JsLVVxMG5JbmJFRFQ3a3V4MTVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAklP6GOB9
eWb7e4euMDvxuTIA5XFp0i3yJIGyXqirx0ChTvDeIGQEPXeliFz/EApiLTmFo5H9
2NejhbjQy0h5bwDnJez5AQQ78kVDWfUymzGocnt8DPcVOL6Pbm1bUH0BpQDtSePL
1q+Du+vkKQlCLJpOiVKXM7cjfuQa9EmAU4Roz3xGpadGPT3H/lK03VxuvAALa0Er
N5FplYUIy66aH7hp76fSXAhy/MN75CTWAe4QkwThPK3c9818DU1zLmpKVa0OEqIb
Zmh7MfCCxjmNtuxqJxBzxD0LgofD9oJdvOszfSXPKZUw3xVLXdqrZh4f59u4yQim
0F5CoZrmbqtqiA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 08:14:08 2025 by rpki-client