Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
File:                     9wC7WRwCd4gZrqH1uPZEFns9fC4.mft (raw, json)
Hash identifier:          0EaIY3E80ilvP54NjxWWcpNoGR8ahARtGOZ8zqcLxwQ=
Subject key identifier:   A6:1E:74:A4:46:AB:4A:C9:99:9B:C2:87:1F:04:CB:18:ED:69:54:75
Authority key identifier: F7:00:BB:59:1C:02:77:88:19:AE:A1:F5:B8:F6:44:16:7B:3D:7C:2E
Certificate issuer:       /CN=f700bb591c02778819aea1f5b8f644167b3d7c2e
Certificate serial:       019752D90ED3AA28F0C11401F607A1A5C631
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
Manifest number:          0E81
Signing time:             Mon 09 Jun 2025 04:00:46 +0000
Manifest this update:     Mon 09 Jun 2025 04:00:46 +0000
Manifest next update:     Tue 10 Jun 2025 04:00:46 +0000
Files and hashes:         1: 9wC7WRwCd4gZrqH1uPZEFns9fC4.crl (hash: ZlSqZ7+7MoCWiDrvLWTvR2IDrQn3W7+IueeXmQhmMrA=)
                          2: K4Gb3AwaGq3gzkyO-1MyxTIk3gg.roa (hash: DCLfidqg0r72HrTsNGYvW13eljCKxYuCqdsXQsy2ahc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 04:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:d9:0e:d3:aa:28:f0:c1:14:01:f6:07:a1:a5:c6:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f700bb591c02778819aea1f5b8f644167b3d7c2e
        Validity
            Not Before: Jun  9 04:00:46 2025 GMT
            Not After : Jun 10 04:00:46 2025 GMT
        Subject: CN=a61e74a446ab4ac9999bc2871f04cb18ed695475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6f:41:1f:28:11:8f:cb:cb:58:bd:6d:c6:0a:
                    b9:09:a3:58:80:2e:18:19:92:de:db:63:2b:1d:c1:
                    28:5d:77:00:92:0a:39:e9:53:3d:d4:7b:77:36:25:
                    3b:47:68:b2:a3:e8:5c:7e:62:d3:2b:62:9e:82:69:
                    ac:04:63:2a:4e:c8:81:c9:5f:67:be:cd:5d:4c:7d:
                    c3:b3:85:02:5e:ae:1c:52:cf:c0:e4:43:cb:7d:a0:
                    ff:8c:3d:c8:7f:1f:95:36:91:36:6b:cd:07:5c:19:
                    27:29:32:21:14:db:e6:7d:81:be:8d:29:45:9c:f3:
                    f8:3e:37:3b:75:5e:22:07:92:40:5d:f4:21:86:aa:
                    b8:5c:1a:74:05:4e:b9:cd:18:31:d5:56:63:3e:2d:
                    a3:13:43:e1:21:1a:52:57:9f:2b:e4:1d:86:18:44:
                    c2:11:7e:bb:43:7a:3c:23:54:86:0c:d0:9b:84:69:
                    43:e4:1b:bd:af:f9:73:4a:4d:bc:51:8f:0a:0c:24:
                    34:c7:3f:e7:a7:b5:24:91:45:c6:ff:78:55:20:ce:
                    c6:49:ee:a7:21:cc:cc:7a:52:fa:d8:94:4b:38:d0:
                    18:11:ce:e7:69:dc:76:a9:28:f9:52:df:83:90:fc:
                    af:62:f5:25:cd:64:2d:dd:73:ec:4c:f5:cd:ac:8f:
                    ee:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1E:74:A4:46:AB:4A:C9:99:9B:C2:87:1F:04:CB:18:ED:69:54:75
            X509v3 Authority Key Identifier:
                keyid:F7:00:BB:59:1C:02:77:88:19:AE:A1:F5:B8:F6:44:16:7B:3D:7C:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b3:76:ef:bf:ab:fb:34:9f:68:ae:12:55:59:9f:77:5a:95:
         3c:f7:c6:dc:6a:35:7a:07:94:71:d0:e4:91:22:24:70:88:a5:
         97:b1:4d:69:07:82:a6:76:3f:1f:0d:e6:5b:0e:29:3d:8e:ed:
         11:cb:18:c4:db:6d:8b:a2:4b:8d:b6:62:3c:92:f5:22:8b:f9:
         00:10:a8:de:8a:ef:ab:15:5f:42:98:08:29:c3:ee:40:39:ae:
         8a:dd:34:fe:be:c0:ae:e0:72:b5:40:2d:de:06:73:6e:85:f2:
         88:1e:69:45:50:77:2b:a9:d5:59:78:cd:5e:dc:ef:4c:98:bd:
         d3:59:6f:7b:a3:09:b6:1f:1c:44:ae:71:af:11:82:6b:83:4b:
         01:1d:52:5c:0d:55:49:fe:4d:c4:ba:c1:0c:9c:be:d9:fe:d1:
         8b:91:a2:d9:f8:ad:c5:dc:43:34:39:8f:53:f6:83:10:cc:fd:
         f8:86:38:3d:93:d2:26:7f:a7:9f:de:61:d3:1f:73:19:25:20:
         a6:6b:85:b3:af:30:b6:25:82:32:ff:43:59:47:66:96:6a:04:
         fd:ea:7b:af:fa:97:58:50:36:36:61:17:22:e0:bf:9a:d6:98:
         98:82:55:78:88:2a:bb:d6:3c:34:bf:96:5b:ed:23:9c:a4:9b:
         4a:5b:b2:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdS2Q7TqijwwRQB9gehpcYxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MDBiYjU5MWMwMjc3ODgxOWFlYTFmNWI4ZjY0NDE2N2Iz
ZDdjMmUwHhcNMjUwNjA5MDQwMDQ2WhcNMjUwNjEwMDQwMDQ2WjAzMTEwLwYDVQQD
EyhhNjFlNzRhNDQ2YWI0YWM5OTk5YmMyODcxZjA0Y2IxOGVkNjk1NDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1G9BHygRj8vLWL1txgq5CaNYgC4Y
GZLe22MrHcEoXXcAkgo56VM91Ht3NiU7R2iyo+hcfmLTK2KegmmsBGMqTsiByV9n
vs1dTH3Ds4UCXq4cUs/A5EPLfaD/jD3Ifx+VNpE2a80HXBknKTIhFNvmfYG+jSlF
nPP4Pjc7dV4iB5JAXfQhhqq4XBp0BU65zRgx1VZjPi2jE0PhIRpSV58r5B2GGETC
EX67Q3o8I1SGDNCbhGlD5Bu9r/lzSk28UY8KDCQ0xz/np7UkkUXG/3hVIM7GSe6n
IczMelL62JRLONAYEc7nadx2qSj5Ut+DkPyvYvUlzWQt3XPsTPXNrI/uiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYedKRGq0rJmZvChx8EyxjtaVR1MB8GA1UdIwQY
MBaAFPcAu1kcAneIGa6h9bj2RBZ7PXwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXdDN1dSd0NkNGdacnFIMXVQWkVGbnM5ZkM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wNWY3YzUtYjIxYi00MzVlLThlYmMt
ODJhNjgxMThjNzUyLzEvOXdDN1dSd0NkNGdacnFIMXVQWkVGbnM5ZkM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8wNWY3YzUtYjIxYi00MzVlLThlYmMtODJhNjgxMThjNzUy
LzEvOXdDN1dSd0NkNGdacnFIMXVQWkVGbnM5ZkM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlLN277+r
+zSfaK4SVVmfd1qVPPfG3Go1egeUcdDkkSIkcIill7FNaQeCpnY/Hw3mWw4pPY7t
EcsYxNtti6JLjbZiPJL1Iov5ABCo3orvqxVfQpgIKcPuQDmuit00/r7AruBytUAt
3gZzboXyiB5pRVB3K6nVWXjNXtzvTJi901lve6MJth8cRK5xrxGCa4NLAR1SXA1V
Sf5NxLrBDJy+2f7Ri5Gi2fitxdxDNDmPU/aDEMz9+IY4PZPSJn+nn95h0x9zGSUg
pmuFs68wtiWCMv9DWUdmlmoE/ep7r/qXWFA2NmEXIuC/mtaYmIJVeIgqu9Y8NL+W
W+0jnKSbSluyYg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 13:40:50 2025 by rpki-client