Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
File:                     C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft (raw, json)
Hash identifier:          A3XX8K5A405YqPf8lfFERlAAL9bh2AVPNhHXJ/J5P18=
Subject key identifier:   3D:AB:C4:3E:3E:90:72:E5:E5:B1:A6:E4:48:94:6E:57:1D:55:05:AA
Authority key identifier: 0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA
Certificate issuer:       /CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
Certificate serial:       01974B8DA058D99726867AD57122CC47FE87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
Manifest number:          01A0
Signing time:             Sat 07 Jun 2025 18:01:01 +0000
Manifest this update:     Sat 07 Jun 2025 18:01:01 +0000
Manifest next update:     Sun 08 Jun 2025 18:01:01 +0000
Files and hashes:         1: C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl (hash: tYiJhimAe4GH2nGUNQgczfSjv5Zntpqj7xJyE5QOcqg=)
                          2: wD9ir4CCy4E7zOefD7Z-y5RvpRY.roa (hash: 7sn9k3wlZ/27RuueZ6o2qKtcwJI5H5fdnvFFf1ud6xU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:a0:58:d9:97:26:86:7a:d5:71:22:cc:47:fe:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
        Validity
            Not Before: Jun  7 18:01:01 2025 GMT
            Not After : Jun  8 18:01:01 2025 GMT
        Subject: CN=3dabc43e3e9072e5e5b1a6e448946e571d5505aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:62:4e:46:40:33:dc:3f:90:25:e7:ad:0a:3c:
                    2e:5b:fc:d1:34:ae:08:19:7c:07:26:1c:e7:04:cd:
                    4f:5f:55:50:95:02:a2:17:b7:51:6f:61:85:b5:97:
                    d9:5a:7d:dc:08:56:6b:9e:2e:97:05:fe:fa:2e:f6:
                    39:cb:21:a8:b7:dc:9d:d3:ef:7e:f1:28:e4:66:80:
                    a1:3a:1d:e1:a0:35:d5:08:69:e0:dc:76:3b:61:58:
                    53:2d:29:d8:eb:7e:9c:20:d9:01:f1:81:f5:84:11:
                    92:8e:df:67:4e:e2:49:f5:8e:81:4c:c6:41:83:79:
                    b3:68:d4:fb:61:01:50:76:14:00:a3:24:91:6b:6f:
                    84:2e:1b:f0:fb:a4:f9:c6:62:7d:73:b9:6b:8e:95:
                    93:fa:63:49:6d:46:6c:27:ae:8e:89:8c:a6:50:5e:
                    f7:b7:de:9e:65:41:ac:ba:27:7e:db:59:e2:d6:39:
                    1b:9a:cb:38:66:72:53:43:03:95:69:31:d3:6a:d9:
                    e2:7e:7f:4a:1a:39:30:32:59:81:ed:61:6e:8e:59:
                    e7:8b:72:62:3d:69:3b:a2:a4:8a:66:26:8b:93:98:
                    ff:a5:67:d5:32:35:e4:16:6d:6f:01:1a:2f:8d:13:
                    db:db:fa:d3:a7:f3:bc:71:3e:ec:31:1e:fc:7f:dd:
                    3e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AB:C4:3E:3E:90:72:E5:E5:B1:A6:E4:48:94:6E:57:1D:55:05:AA
            X509v3 Authority Key Identifier:
                keyid:0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d6:89:9d:08:e8:bf:da:bc:06:eb:cb:55:68:d6:cd:89:4c:
         f8:c8:6d:42:42:0d:bf:4a:c8:68:31:41:47:4c:8b:76:49:f7:
         a0:9d:30:42:15:c1:fe:82:7f:da:40:5f:66:46:56:64:45:46:
         fd:75:9e:fe:c1:9c:8b:c9:9d:c3:4d:a0:25:96:bb:1e:ed:d9:
         b7:a2:61:4b:36:20:52:ad:36:8f:21:a5:ba:b3:f6:d3:7c:44:
         89:9e:f9:ee:e4:1f:71:df:ef:ba:b7:16:3c:2e:aa:07:ab:bb:
         9d:c2:5a:b5:c4:e9:87:d9:5e:77:53:f9:5e:d8:f6:fb:11:e5:
         20:25:d0:4f:11:98:e1:c9:09:1e:d9:d6:4d:d2:a8:86:a0:45:
         c2:bf:66:31:e6:26:40:b4:01:27:58:5a:bc:4f:ff:2a:4a:93:
         50:7b:e6:7a:5e:c6:46:c5:61:82:93:fb:08:c4:86:7c:b7:a3:
         c0:96:63:cc:57:fa:4b:3f:de:ed:52:86:4f:a9:13:59:f9:29:
         64:e1:7a:c7:26:56:e6:24:30:f8:6c:8b:5d:6f:d1:59:07:db:
         2c:51:2c:e2:50:bb:0d:28:8a:74:1c:c4:42:dd:39:bb:cb:54:
         38:48:ad:e4:e1:64:72:21:f4:d6:88:15:4c:eb:3c:63:82:47:
         a5:fc:94:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjaBY2ZcmhnrVcSLMR/6HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZDY0ZmU3ZjQzODc4MmVjOGFmYTllZWY1NDg3YjVkYjgw
ZTRkZWEwHhcNMjUwNjA3MTgwMTAxWhcNMjUwNjA4MTgwMTAxWjAzMTEwLwYDVQQD
EygzZGFiYzQzZTNlOTA3MmU1ZTViMWE2ZTQ0ODk0NmU1NzFkNTUwNWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2JORkAz3D+QJeetCjwuW/zRNK4I
GXwHJhznBM1PX1VQlQKiF7dRb2GFtZfZWn3cCFZrni6XBf76LvY5yyGot9yd0+9+
8SjkZoChOh3hoDXVCGng3HY7YVhTLSnY636cINkB8YH1hBGSjt9nTuJJ9Y6BTMZB
g3mzaNT7YQFQdhQAoySRa2+ELhvw+6T5xmJ9c7lrjpWT+mNJbUZsJ66OiYymUF73
t96eZUGsuid+21ni1jkbmss4ZnJTQwOVaTHTatnifn9KGjkwMlmB7WFujlnni3Ji
PWk7oqSKZiaLk5j/pWfVMjXkFm1vARovjRPb2/rTp/O8cT7sMR78f90+SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2rxD4+kHLl5bGm5EiUblcdVQWqMB8GA1UdIwQY
MBaAFAvWT+f0OHguyK+p7vVIe124Dk3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzlaUDVfUTRlQzdJcjZudTlVaDdYYmdPVGVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kMjBjMGUtNjM4NS00YWI3LWI1ZmYt
ZDE1YmRiODg2YzZkLzEvQzlaUDVfUTRlQzdJcjZudTlVaDdYYmdPVGVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9kMjBjMGUtNjM4NS00YWI3LWI1ZmYtZDE1YmRiODg2YzZk
LzEvQzlaUDVfUTRlQzdJcjZudTlVaDdYYmdPVGVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9aJnQjo
v9q8BuvLVWjWzYlM+MhtQkINv0rIaDFBR0yLdkn3oJ0wQhXB/oJ/2kBfZkZWZEVG
/XWe/sGci8mdw02gJZa7Hu3Zt6JhSzYgUq02jyGlurP203xEiZ757uQfcd/vurcW
PC6qB6u7ncJatcTph9led1P5Xtj2+xHlICXQTxGY4ckJHtnWTdKohqBFwr9mMeYm
QLQBJ1havE//KkqTUHvmel7GRsVhgpP7CMSGfLejwJZjzFf6Sz/e7VKGT6kTWfkp
ZOF6xyZW5iQw+GyLXW/RWQfbLFEs4lC7DSiKdBzEQt05u8tUOEit5OFkciH01ogV
TOs8Y4JHpfyUZg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:29:44 2025 by rpki-client