Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
File:                     rTaQk6MtG34Ou-MkRRxY10iuzUI.mft (raw, json)
Hash identifier:          g6ZRmDm/3kh1KHnXP7VyfcMgTy8X1NY2WXy5W+JLlAc=
Subject key identifier:   4E:9B:83:51:A8:D4:EE:C2:8E:18:3B:31:1F:CD:46:15:C2:E0:3C:8E
Authority key identifier: AD:36:90:93:A3:2D:1B:7E:0E:BB:E3:24:45:1C:58:D7:48:AE:CD:42
Certificate issuer:       /CN=ad369093a32d1b7e0ebbe324451c58d748aecd42
Certificate serial:       0199228C727B74BD2AFE4C8249C6F7018421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
Manifest number:          0587
Signing time:             Sun 07 Sep 2025 05:00:53 +0000
Manifest this update:     Sun 07 Sep 2025 05:00:53 +0000
Manifest next update:     Mon 08 Sep 2025 05:00:53 +0000
Files and hashes:         1: rTaQk6MtG34Ou-MkRRxY10iuzUI.crl (hash: zTYQ22jnXK1FK6qxPd8VEh0Get/SI0kZ1jQrbAaA9nQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:72:7b:74:bd:2a:fe:4c:82:49:c6:f7:01:84:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad369093a32d1b7e0ebbe324451c58d748aecd42
        Validity
            Not Before: Sep  7 05:00:53 2025 GMT
            Not After : Sep  8 05:00:53 2025 GMT
        Subject: CN=4e9b8351a8d4eec28e183b311fcd4615c2e03c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7d:86:b2:21:9d:0f:04:67:56:df:b5:da:cc:
                    87:2b:70:e6:02:44:cd:3a:5b:a6:4e:29:4f:93:54:
                    5b:ef:a3:fc:36:2e:61:0f:33:61:87:25:2c:64:8e:
                    90:71:5e:89:10:d8:cc:d7:57:84:eb:1a:81:96:3e:
                    89:7b:5b:2d:a2:48:5f:c8:50:fc:3c:37:11:ae:f7:
                    c5:b0:cf:0e:2f:5d:d5:2c:c6:9e:05:a3:03:09:17:
                    e1:a0:fb:52:45:05:1b:75:ae:1a:04:ba:10:d2:23:
                    94:46:ab:b9:29:57:eb:94:18:03:d2:fd:89:37:fe:
                    00:52:cd:59:db:9b:24:22:ed:4a:05:93:f8:2e:5f:
                    38:7e:61:98:51:44:71:68:d6:8a:20:a1:89:3f:f3:
                    c8:d8:0b:38:f0:79:ba:b3:5a:15:ba:50:c4:fc:72:
                    cf:58:12:2f:6b:24:c0:05:f7:c6:dd:a5:90:07:b2:
                    6a:25:0d:93:c1:30:90:8c:85:ea:a3:f9:d7:0c:01:
                    ee:7d:65:10:d6:02:b1:82:44:b1:d2:6a:52:c9:ed:
                    49:bd:22:cf:34:d8:e7:df:e8:03:f1:27:e8:e3:fd:
                    77:a1:d8:75:1b:0d:1b:d9:65:d8:fb:4d:fb:36:43:
                    76:cd:10:61:eb:68:59:32:05:6e:94:86:f9:be:99:
                    e1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9B:83:51:A8:D4:EE:C2:8E:18:3B:31:1F:CD:46:15:C2:E0:3C:8E
            X509v3 Authority Key Identifier:
                keyid:AD:36:90:93:A3:2D:1B:7E:0E:BB:E3:24:45:1C:58:D7:48:AE:CD:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:06:07:44:75:33:f7:ff:d9:f2:cb:3d:5a:6a:d0:6e:15:06:
         15:0f:d4:94:be:b8:c3:2c:56:6a:e1:37:02:bd:5d:0f:27:9d:
         1c:c8:ce:bd:97:9a:9f:e3:94:ed:48:7c:14:f7:99:31:60:f6:
         3d:4f:de:99:5d:01:98:f5:ce:1a:97:bf:c2:1b:20:b1:a9:02:
         9f:03:fd:52:94:df:6b:cb:cb:e1:c5:d5:61:6a:bf:db:d6:db:
         3c:20:c8:ff:87:f3:ae:e2:ef:7d:78:80:5b:9b:7d:1a:29:5f:
         05:b6:ce:1a:e5:8a:9f:4e:64:34:3b:36:75:79:7f:a6:15:9f:
         0f:4e:09:95:2a:87:22:0c:ca:d3:b6:00:48:96:f7:3c:7e:b1:
         ea:c4:d3:98:f3:7e:6a:8f:df:e2:81:6e:64:12:2a:a2:81:82:
         67:2a:b8:81:1a:a7:32:b1:c5:7b:1b:38:c3:f7:dd:08:16:0e:
         80:e2:05:40:f7:1c:ce:60:a1:07:ec:ea:d5:26:5f:34:46:37:
         f0:b2:7b:56:af:69:c9:30:24:39:cd:1f:4c:e1:a1:f6:bf:79:
         6b:38:57:da:cb:cd:30:93:44:13:f5:9e:03:09:7b:11:19:d7:
         22:82:14:9f:c7:7a:b6:d8:0a:f9:0a:c4:71:cb:2d:d7:75:4e:
         b0:99:4e:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijHJ7dL0q/kyCScb3AYQhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMzY5MDkzYTMyZDFiN2UwZWJiZTMyNDQ1MWM1OGQ3NDhh
ZWNkNDIwHhcNMjUwOTA3MDUwMDUzWhcNMjUwOTA4MDUwMDUzWjAzMTEwLwYDVQQD
Eyg0ZTliODM1MWE4ZDRlZWMyOGUxODNiMzExZmNkNDYxNWMyZTAzYzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH2GsiGdDwRnVt+12syHK3DmAkTN
OlumTilPk1Rb76P8Ni5hDzNhhyUsZI6QcV6JENjM11eE6xqBlj6Je1stokhfyFD8
PDcRrvfFsM8OL13VLMaeBaMDCRfhoPtSRQUbda4aBLoQ0iOURqu5KVfrlBgD0v2J
N/4AUs1Z25skIu1KBZP4Ll84fmGYUURxaNaKIKGJP/PI2As48Hm6s1oVulDE/HLP
WBIvayTABffG3aWQB7JqJQ2TwTCQjIXqo/nXDAHufWUQ1gKxgkSx0mpSye1JvSLP
NNjn3+gD8Sfo4/13odh1Gw0b2WXY+037NkN2zRBh62hZMgVulIb5vpnhgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6bg1Go1O7Cjhg7MR/NRhXC4DyOMB8GA1UdIwQY
MBaAFK02kJOjLRt+DrvjJEUcWNdIrs1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclRhUWs2TXRHMzRPdS1Na1JSeFkxMGl1elVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8zYjIyMmUtYTRiMy00ZmJlLTgzOWYt
MzYzYTU1OGUxOWJlLzEvclRhUWs2TXRHMzRPdS1Na1JSeFkxMGl1elVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8zYjIyMmUtYTRiMy00ZmJlLTgzOWYtMzYzYTU1OGUxOWJl
LzEvclRhUWs2TXRHMzRPdS1Na1JSeFkxMGl1elVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmwYHRHUz
9//Z8ss9WmrQbhUGFQ/UlL64wyxWauE3Ar1dDyedHMjOvZean+OU7Uh8FPeZMWD2
PU/emV0BmPXOGpe/whsgsakCnwP9UpTfa8vL4cXVYWq/29bbPCDI/4fzruLvfXiA
W5t9GilfBbbOGuWKn05kNDs2dXl/phWfD04JlSqHIgzK07YASJb3PH6x6sTTmPN+
ao/f4oFuZBIqooGCZyq4gRqnMrHFexs4w/fdCBYOgOIFQPcczmChB+zq1SZfNEY3
8LJ7Vq9pyTAkOc0fTOGh9r95azhX2svNMJNEE/WeAwl7ERnXIoIUn8d6ttgK+QrE
ccst13VOsJlOzA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:53 2025 by rpki-client