Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft
File:                     92O3x0pHzua9mbvGKu-DalYCtTE.mft (raw, json)
Hash identifier:          +FhMoiN9but62vPPReVE7WGz4MdN0+XqDepySRRhJb8=
Subject key identifier:   7D:03:9A:AA:D0:BD:21:18:7B:F1:60:87:63:89:F7:A4:B6:F8:84:B6
Authority key identifier: F7:63:B7:C7:4A:47:CE:E6:BD:99:BB:C6:2A:EF:83:6A:56:02:B5:31
Certificate issuer:       /CN=f763b7c74a47cee6bd99bbc62aef836a5602b531
Certificate serial:       019750EA5396097E31F3EDD9A8DE500852B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92O3x0pHzua9mbvGKu-DalYCtTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft
Manifest number:          0503
Signing time:             Sun 08 Jun 2025 19:00:23 +0000
Manifest this update:     Sun 08 Jun 2025 19:00:23 +0000
Manifest next update:     Mon 09 Jun 2025 19:00:23 +0000
Files and hashes:         1: 92O3x0pHzua9mbvGKu-DalYCtTE.crl (hash: JxCMtXnI2543xL8Bg0y1H1ymwp6Xa+D6YLb0tjCwbqc=)
                          2: wN1wFK2nod8Oc7XWg-Kjf2cevZI.roa (hash: S+MrRK13xZ8FD9NbutVvWutfcwGFlY+gNxR94qjOH3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/92O3x0pHzua9mbvGKu-DalYCtTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 19:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:ea:53:96:09:7e:31:f3:ed:d9:a8:de:50:08:52:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f763b7c74a47cee6bd99bbc62aef836a5602b531
        Validity
            Not Before: Jun  8 19:00:23 2025 GMT
            Not After : Jun  9 19:00:23 2025 GMT
        Subject: CN=7d039aaad0bd21187bf160876389f7a4b6f884b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ac:ca:2e:bf:4d:9f:b6:3f:8d:36:7c:79:b2:
                    f1:30:2c:23:7d:a9:a8:a1:a5:a4:55:d8:f7:95:58:
                    8c:e3:03:ac:8a:1e:97:91:fa:fc:b1:ba:b5:2b:57:
                    54:15:d8:1d:0b:5c:77:84:9b:8e:b5:47:6f:e1:2b:
                    0a:1c:02:38:42:58:83:99:8b:19:ee:3a:ab:bd:c0:
                    bd:d0:e5:b2:c7:e5:96:af:ae:fe:ed:1a:a0:51:f9:
                    d5:a6:fd:5d:b9:6d:a5:1e:3f:31:b6:4b:f7:13:01:
                    35:7e:7b:e5:d9:19:8b:da:99:bd:13:38:d1:62:fd:
                    b2:ce:9c:1f:09:cb:33:dc:9b:08:24:ed:ef:d9:28:
                    a9:ee:9e:62:59:b8:f9:ab:73:12:1a:d2:eb:82:50:
                    9a:fc:fb:5d:28:20:c0:ff:04:7a:13:67:37:72:38:
                    0c:a2:00:6a:e4:0e:60:a1:65:f3:b1:c8:8f:fc:a0:
                    1b:59:f8:47:2a:07:02:5f:f7:7b:e4:24:10:27:34:
                    71:99:b4:32:ad:2e:87:28:39:1b:76:08:44:dd:bc:
                    c9:59:8a:8c:62:0a:81:54:60:d6:e6:86:b8:d2:ac:
                    24:0b:2b:0d:47:93:78:e3:18:54:08:d0:77:64:1b:
                    aa:d4:a9:14:e8:a3:ff:ec:20:29:37:3c:0b:23:0f:
                    83:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:03:9A:AA:D0:BD:21:18:7B:F1:60:87:63:89:F7:A4:B6:F8:84:B6
            X509v3 Authority Key Identifier:
                keyid:F7:63:B7:C7:4A:47:CE:E6:BD:99:BB:C6:2A:EF:83:6A:56:02:B5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92O3x0pHzua9mbvGKu-DalYCtTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d6:7e:e6:46:2f:cc:cb:cc:1e:88:6f:e2:fc:7a:08:64:cb:
         8b:ce:ea:f9:63:46:b3:78:80:8b:2f:57:9f:98:d5:77:a6:a6:
         1e:0d:d5:dc:03:15:d4:10:51:b9:d1:2d:1e:45:6a:dd:2b:b3:
         05:8a:10:7e:ca:2a:d7:ce:40:cf:ef:81:5b:c2:f2:15:b7:c8:
         a6:40:6c:85:3f:e8:f5:b4:14:2d:de:5a:83:04:ae:66:19:17:
         19:63:f2:f4:f4:d5:e2:c3:3e:22:28:4f:e4:ed:2b:b3:86:66:
         a6:1c:8b:1a:8e:41:f1:7b:e8:a8:7f:ad:fd:35:b6:a7:13:65:
         35:38:fc:43:72:14:36:20:18:67:e4:c1:d1:5a:0f:e3:0b:fa:
         fc:ad:80:c0:7f:5c:e4:b1:02:21:7a:6b:7b:e7:5a:28:58:37:
         dc:16:12:19:5f:d7:c5:96:d6:ab:1b:22:46:70:68:fd:4d:fa:
         40:78:00:87:b7:1f:a4:5f:58:7a:06:68:54:c5:4d:e4:18:c5:
         d0:54:8f:f1:83:d0:8b:05:78:1a:dd:12:d1:ac:32:0b:8c:39:
         99:3e:0a:6f:95:c4:c8:5b:b0:af:ba:39:c4:e9:37:25:a3:8d:
         d8:1c:1a:a5:4d:49:0d:f0:c7:da:0c:03:10:7a:6e:58:03:e6:
         8a:47:59:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQ6lOWCX4x8+3ZqN5QCFK4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NjNiN2M3NGE0N2NlZTZiZDk5YmJjNjJhZWY4MzZhNTYw
MmI1MzEwHhcNMjUwNjA4MTkwMDIzWhcNMjUwNjA5MTkwMDIzWjAzMTEwLwYDVQQD
Eyg3ZDAzOWFhYWQwYmQyMTE4N2JmMTYwODc2Mzg5ZjdhNGI2Zjg4NGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6zKLr9Nn7Y/jTZ8ebLxMCwjfamo
oaWkVdj3lViM4wOsih6Xkfr8sbq1K1dUFdgdC1x3hJuOtUdv4SsKHAI4QliDmYsZ
7jqrvcC90OWyx+WWr67+7RqgUfnVpv1duW2lHj8xtkv3EwE1fnvl2RmL2pm9EzjR
Yv2yzpwfCcsz3JsIJO3v2Sip7p5iWbj5q3MSGtLrglCa/PtdKCDA/wR6E2c3cjgM
ogBq5A5goWXzsciP/KAbWfhHKgcCX/d75CQQJzRxmbQyrS6HKDkbdghE3bzJWYqM
YgqBVGDW5oa40qwkCysNR5N44xhUCNB3ZBuq1KkU6KP/7CApNzwLIw+DrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0DmqrQvSEYe/Fgh2OJ96S2+IS2MB8GA1UdIwQY
MBaAFPdjt8dKR87mvZm7xirvg2pWArUxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTJPM3gwcEh6dWE5bWJ2R0t1LURhbFlDdFRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yYzNlZWUtMjE4OS00NDY5LTgxNmIt
OTliODczZTVlNzRhLzEvOTJPM3gwcEh6dWE5bWJ2R0t1LURhbFlDdFRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8yYzNlZWUtMjE4OS00NDY5LTgxNmItOTliODczZTVlNzRh
LzEvOTJPM3gwcEh6dWE5bWJ2R0t1LURhbFlDdFRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtZ+5kYv
zMvMHohv4vx6CGTLi87q+WNGs3iAiy9Xn5jVd6amHg3V3AMV1BBRudEtHkVq3Suz
BYoQfsoq185Az++BW8LyFbfIpkBshT/o9bQULd5agwSuZhkXGWPy9PTV4sM+IihP
5O0rs4ZmphyLGo5B8XvoqH+t/TW2pxNlNTj8Q3IUNiAYZ+TB0VoP4wv6/K2AwH9c
5LECIXpre+daKFg33BYSGV/XxZbWqxsiRnBo/U36QHgAh7cfpF9YegZoVMVN5BjF
0FSP8YPQiwV4Gt0S0awyC4w5mT4Kb5XEyFuwr7o5xOk3JaON2BwapU1JDfDH2gwD
EHpuWAPmikdZrA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 04:56:44 2025 by rpki-client