Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft
File:                     n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft (raw, json)
Hash identifier:          aBJ9YY1jNz3BRyhOzKz3kxJYmjaFxJ+mmdTRb8AzMzU=
Subject key identifier:   02:9A:B1:E8:C4:3F:09:FB:20:2F:A7:11:79:95:67:D7:5D:F1:CA:7D
Authority key identifier: 9F:FE:26:F7:D2:02:9C:F1:93:31:37:01:EA:C3:FC:9B:DB:B8:94:D4
Certificate issuer:       /CN=9ffe26f7d2029cf193313701eac3fc9bdbb894d4
Certificate serial:       019745F93FC56D12256ECE205853C2E1BAE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft
Manifest number:          0312
Signing time:             Fri 06 Jun 2025 16:00:52 +0000
Manifest this update:     Fri 06 Jun 2025 16:00:52 +0000
Manifest next update:     Sat 07 Jun 2025 16:00:52 +0000
Files and hashes:         1: n_4m99ICnPGTMTcB6sP8m9u4lNQ.crl (hash: Zwul2ARcUredkZPf+PYX/gL5Mj18t4+X55itLbGID7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:f9:3f:c5:6d:12:25:6e:ce:20:58:53:c2:e1:ba:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ffe26f7d2029cf193313701eac3fc9bdbb894d4
        Validity
            Not Before: Jun  6 16:00:52 2025 GMT
            Not After : Jun  7 16:00:52 2025 GMT
        Subject: CN=029ab1e8c43f09fb202fa711799567d75df1ca7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:3b:c7:a2:4d:a4:71:9d:0d:6e:45:3a:53:
                    91:70:07:6f:28:61:fb:5d:bc:14:84:2d:de:32:c4:
                    56:cf:c3:29:45:05:6b:d1:33:1b:78:03:a7:41:cd:
                    a3:65:0d:c5:90:67:0e:ff:08:1c:25:c7:a3:77:4a:
                    8c:61:12:bb:bc:99:2b:e5:d1:e5:a8:21:9b:06:43:
                    3e:d3:8c:ad:95:14:ee:22:50:26:e8:6a:5f:ae:40:
                    52:c8:fa:e6:78:e5:1f:d5:9c:d2:41:10:75:02:3f:
                    2c:af:7a:2e:24:6a:1c:96:9e:ea:6d:cb:7b:f1:cc:
                    5b:80:bc:54:2e:2b:64:c2:0f:ac:f3:36:57:51:1f:
                    24:35:8d:24:c0:1a:c1:cf:13:53:0c:a2:26:04:37:
                    41:5c:a4:68:f3:65:71:5b:90:dd:5b:97:40:55:80:
                    03:fd:4f:10:8f:5c:0b:af:cf:99:b3:b2:72:4e:11:
                    10:49:d3:02:24:9e:41:4d:1d:b6:c7:d7:65:d3:81:
                    22:83:33:18:31:80:d2:b8:95:5c:ab:9d:b9:69:a5:
                    ee:59:c9:fd:81:2a:9a:2f:41:97:d0:9f:75:f2:8f:
                    0a:45:af:d2:a2:d2:3e:ab:44:b9:6e:b3:97:7e:48:
                    bf:c4:4a:c8:c5:11:10:db:14:9e:d9:11:25:1d:85:
                    f5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9A:B1:E8:C4:3F:09:FB:20:2F:A7:11:79:95:67:D7:5D:F1:CA:7D
            X509v3 Authority Key Identifier:
                keyid:9F:FE:26:F7:D2:02:9C:F1:93:31:37:01:EA:C3:FC:9B:DB:B8:94:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:b6:9d:2a:f2:f9:7f:0e:03:49:e2:f3:70:f0:14:59:cc:8e:
         e8:fd:ff:67:55:a3:b9:56:cf:16:15:55:04:a3:a1:16:90:5f:
         c2:1c:65:60:e0:15:6a:57:41:60:af:8f:c9:f6:26:43:d1:8c:
         c8:36:51:2e:8a:d4:8b:dc:90:fc:1b:02:7e:70:93:f1:a8:07:
         c1:53:5a:37:c2:29:d3:2a:f6:42:26:39:0d:a6:d3:4a:44:a6:
         db:59:86:5c:f4:f2:33:f9:38:4d:e7:7d:c5:ab:4c:4d:fd:93:
         f6:b1:1f:c6:c9:c7:8f:7d:0f:4d:11:05:08:83:ef:67:28:ab:
         31:20:32:27:6d:d7:7e:67:65:9a:c5:e6:5e:e2:99:63:6b:27:
         b4:88:00:1f:48:2f:dc:08:eb:4e:49:60:46:b3:ef:5c:c9:be:
         15:d8:6a:bf:de:23:09:a9:58:09:84:fe:14:9d:b1:cf:dd:30:
         d2:b2:92:20:cf:0d:19:86:c7:6f:4a:3f:4e:13:43:f4:6f:f5:
         9b:d8:d0:c7:b3:d6:b5:32:f5:61:81:1e:99:9e:76:5b:4f:32:
         28:98:3d:1d:44:e3:aa:76:aa:c6:bb:ce:26:5e:20:6b:d7:8f:
         b0:05:81:2d:7f:8a:5a:5c:36:dd:89:d4:49:0c:76:b1:94:68:
         de:46:a9:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdF+T/FbRIlbs4gWFPC4brmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZmUyNmY3ZDIwMjljZjE5MzMxMzcwMWVhYzNmYzliZGJi
ODk0ZDQwHhcNMjUwNjA2MTYwMDUyWhcNMjUwNjA3MTYwMDUyWjAzMTEwLwYDVQQD
EygwMjlhYjFlOGM0M2YwOWZiMjAyZmE3MTE3OTk1NjdkNzVkZjFjYTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtko7x6JNpHGdDW5FOlORcAdvKGH7
XbwUhC3eMsRWz8MpRQVr0TMbeAOnQc2jZQ3FkGcO/wgcJcejd0qMYRK7vJkr5dHl
qCGbBkM+04ytlRTuIlAm6GpfrkBSyPrmeOUf1ZzSQRB1Aj8sr3ouJGoclp7qbct7
8cxbgLxULitkwg+s8zZXUR8kNY0kwBrBzxNTDKImBDdBXKRo82VxW5DdW5dAVYAD
/U8Qj1wLr8+Zs7JyThEQSdMCJJ5BTR22x9dl04EigzMYMYDSuJVcq525aaXuWcn9
gSqaL0GX0J918o8KRa/SotI+q0S5brOXfki/xErIxREQ2xSe2RElHYX1xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKasejEPwn7IC+nEXmVZ9dd8cp9MB8GA1UdIwQY
MBaAFJ/+JvfSApzxkzE3AerD/JvbuJTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl80bTk5SUNuUEdUTVRjQjZzUDhtOXU0bE5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8wNTljMmEtZTkzNC00ZTUyLTg3ODkt
MmFjYWMyM2U3NTlkLzEvbl80bTk5SUNuUEdUTVRjQjZzUDhtOXU0bE5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8wNTljMmEtZTkzNC00ZTUyLTg3ODktMmFjYWMyM2U3NTlk
LzEvbl80bTk5SUNuUEdUTVRjQjZzUDhtOXU0bE5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibadKvL5
fw4DSeLzcPAUWcyO6P3/Z1WjuVbPFhVVBKOhFpBfwhxlYOAValdBYK+PyfYmQ9GM
yDZRLorUi9yQ/BsCfnCT8agHwVNaN8Ip0yr2QiY5DabTSkSm21mGXPTyM/k4Ted9
xatMTf2T9rEfxsnHj30PTREFCIPvZyirMSAyJ23XfmdlmsXmXuKZY2sntIgAH0gv
3AjrTklgRrPvXMm+Fdhqv94jCalYCYT+FJ2xz90w0rKSIM8NGYbHb0o/ThND9G/1
m9jQx7PWtTL1YYEemZ52W08yKJg9HUTjqnaqxrvOJl4ga9ePsAWBLX+KWlw23YnU
SQx2sZRo3kapVA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:32:55 2025 by rpki-client