Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
File:                     1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft (raw, json)
Hash identifier:          mjajb5HTti57+tzLRVn74ckJaDUX0CIXYmXTOXDs3Zw=
Subject key identifier:   0A:F8:92:ED:61:9F:F9:F1:A3:F9:D9:FE:9D:F7:01:CF:02:8F:FC:08
Authority key identifier: D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17
Certificate issuer:       /CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417
Certificate serial:       0199161B80B5314BDC948BB2EE2A7C2C96C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
Manifest number:          0B4F
Signing time:             Thu 04 Sep 2025 19:02:04 +0000
Manifest this update:     Thu 04 Sep 2025 19:02:04 +0000
Manifest next update:     Fri 05 Sep 2025 19:02:04 +0000
Files and hashes:         1: 1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl (hash: wn9mIFIuEB04vBTdSUxknIm0gckNeD2W8ovp+m1uq/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 19:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:1b:80:b5:31:4b:dc:94:8b:b2:ee:2a:7c:2c:96:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417
        Validity
            Not Before: Sep  4 19:02:04 2025 GMT
            Not After : Sep  5 19:02:04 2025 GMT
        Subject: CN=0af892ed619ff9f1a3f9d9fe9df701cf028ffc08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c3:a6:2f:c1:fb:e6:13:09:ca:ee:27:d5:ec:
                    85:8e:60:88:e5:1a:17:1d:6c:d7:0c:c9:11:94:38:
                    8b:14:9a:0f:5c:0f:ba:ae:55:4d:09:92:6f:b9:59:
                    9a:e6:17:dd:cd:22:f5:a2:54:bc:b5:69:61:3e:54:
                    14:8f:f8:31:ae:4d:e6:cc:91:b5:cb:aa:f5:a7:53:
                    83:40:f0:60:87:f2:6c:03:5b:34:6e:af:4e:13:03:
                    37:01:41:55:7b:e6:fe:e3:13:1b:37:1f:ae:86:90:
                    c4:e3:20:b0:4a:b8:db:d3:09:80:29:f0:8c:79:38:
                    1b:c1:34:7e:26:ca:e5:e8:90:97:cc:7c:c2:61:8e:
                    1c:ea:c0:b4:1c:7f:7a:91:a8:b9:c7:b7:43:fc:90:
                    e1:79:8d:a1:86:ee:e2:36:a0:1d:d1:ac:31:82:e3:
                    85:b6:db:c1:fd:82:4d:d9:dd:a3:32:b3:bc:79:d5:
                    cc:78:b6:23:23:1c:83:aa:a4:9d:ba:ac:ef:04:68:
                    09:e3:01:21:b9:a8:35:5c:5a:86:9d:b4:1b:ec:e1:
                    66:ef:f7:22:ca:52:a4:5a:e6:e2:89:66:ad:73:82:
                    fb:b9:b8:1d:3a:33:ca:13:29:58:4d:fe:4a:c8:1d:
                    2a:b8:04:02:d7:40:46:19:cf:42:3e:f4:42:8b:4d:
                    d0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F8:92:ED:61:9F:F9:F1:A3:F9:D9:FE:9D:F7:01:CF:02:8F:FC:08
            X509v3 Authority Key Identifier:
                keyid:D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a0:d2:9e:1a:20:99:64:0d:9b:df:81:7f:2b:1a:19:a6:97:
         26:6f:1f:ca:ea:57:06:bf:6b:c7:8b:15:39:8a:80:9a:6f:2b:
         71:54:7c:2c:a0:c1:f8:0c:82:ff:eb:1d:da:49:fc:d1:96:4a:
         88:e8:61:57:7c:ea:dc:ed:1d:8d:f7:0d:9a:d3:1b:9b:ce:8d:
         8b:a0:5b:e8:1f:54:37:04:5a:08:a8:d3:c2:67:e6:1d:ab:48:
         da:26:43:c6:cf:9c:4d:ef:fb:a8:1e:2c:82:54:12:c6:76:a5:
         02:7d:1f:61:7f:4e:f1:d1:49:b1:b6:e3:66:37:3b:3e:60:8c:
         d0:f0:7e:35:0e:45:4a:ce:39:68:9a:e2:fc:ff:6e:60:5e:3b:
         d0:ae:26:11:b2:f3:60:eb:16:eb:99:fc:14:cf:7d:f7:6e:4e:
         3e:5c:9b:42:a1:37:8f:c8:09:6f:59:9b:44:42:88:98:81:7a:
         99:56:52:93:9d:95:e6:44:21:75:fd:60:1c:1b:4f:e0:32:43:
         29:33:43:64:19:f2:ab:30:4a:8d:a9:69:05:c4:a2:54:a1:8c:
         3e:db:83:f5:e7:88:2a:ca:09:5f:0f:49:b9:b1:79:af:ae:f3:
         a1:6a:4e:07:55:ad:74:c8:b0:58:a2:5a:f2:4f:e7:1a:38:9d:
         00:bc:a7:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkWG4C1MUvclIuy7ip8LJbBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MTViM2JkN2IwNGY0YzA2YjJhYWZlZTk2MzRlY2RjMTU3
MmY0MTcwHhcNMjUwOTA0MTkwMjA0WhcNMjUwOTA1MTkwMjA0WjAzMTEwLwYDVQQD
EygwYWY4OTJlZDYxOWZmOWYxYTNmOWQ5ZmU5ZGY3MDFjZjAyOGZmYzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sOmL8H75hMJyu4n1eyFjmCI5RoX
HWzXDMkRlDiLFJoPXA+6rlVNCZJvuVma5hfdzSL1olS8tWlhPlQUj/gxrk3mzJG1
y6r1p1ODQPBgh/JsA1s0bq9OEwM3AUFVe+b+4xMbNx+uhpDE4yCwSrjb0wmAKfCM
eTgbwTR+Jsrl6JCXzHzCYY4c6sC0HH96kai5x7dD/JDheY2hhu7iNqAd0awxguOF
ttvB/YJN2d2jMrO8edXMeLYjIxyDqqSduqzvBGgJ4wEhuag1XFqGnbQb7OFm7/ci
ylKkWubiiWatc4L7ubgdOjPKEylYTf5KyB0quAQC10BGGc9CPvRCi03QLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAr4ku1hn/nxo/nZ/p33Ac8Cj/wIMB8GA1UdIwQY
MBaAFNYVs717BPTAayqv7pY07NwVcvQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWhXenZYc0U5TUJyS3FfdWxqVHMzQlZ5OUJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xOGRlMzUtYjkzMS00YTZjLWJhYmQt
OGQ2NjUxMTQ4NTYwLzEvMWhXenZYc0U5TUJyS3FfdWxqVHMzQlZ5OUJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xOGRlMzUtYjkzMS00YTZjLWJhYmQtOGQ2NjUxMTQ4NTYw
LzEvMWhXenZYc0U5TUJyS3FfdWxqVHMzQlZ5OUJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6DSnhog
mWQNm9+BfysaGaaXJm8fyupXBr9rx4sVOYqAmm8rcVR8LKDB+AyC/+sd2kn80ZZK
iOhhV3zq3O0djfcNmtMbm86Ni6Bb6B9UNwRaCKjTwmfmHatI2iZDxs+cTe/7qB4s
glQSxnalAn0fYX9O8dFJsbbjZjc7PmCM0PB+NQ5FSs45aJri/P9uYF470K4mEbLz
YOsW65n8FM99925OPlybQqE3j8gJb1mbREKImIF6mVZSk52V5kQhdf1gHBtP4DJD
KTNDZBnyqzBKjalpBcSiVKGMPtuD9eeIKsoJXw9JubF5r67zoWpOB1WtdMiwWKJa
8k/nGjidALyn8w==
-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:09 2025 by rpki-client