Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
File:                     J9TWlrrbEJTKoV176Gw5pxLg7hI.mft (raw, json)
Hash identifier:          NqEm+DGk2jSiVbRHU4tL5qHHnFo8Z5Jqw1ogT+svoh4=
Subject key identifier:   09:6E:E3:95:C6:69:15:8D:97:7B:CE:A2:34:76:D8:B9:13:5E:A7:1D
Authority key identifier: 27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
Certificate issuer:       /CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Certificate serial:       01974B568F6D8A1C69239978BECF9D7AE984
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
Manifest number:          150C
Signing time:             Sat 07 Jun 2025 17:00:53 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:53 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:53 +0000
Files and hashes:         1: J9TWlrrbEJTKoV176Gw5pxLg7hI.crl (hash: SaZWTnYGgSz8ould0xMDtomwph/mirsdoeplJf3jbgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:8f:6d:8a:1c:69:23:99:78:be:cf:9d:7a:e9:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d4d696badb1094caa15d7be86c39a712e0ee12
        Validity
            Not Before: Jun  7 17:00:53 2025 GMT
            Not After : Jun  8 17:00:53 2025 GMT
        Subject: CN=096ee395c669158d977bcea23476d8b9135ea71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:85:a0:74:86:c3:2c:a0:aa:ca:2a:8e:2a:3d:
                    ba:20:6f:52:28:fb:40:99:96:67:5f:6f:2f:00:9e:
                    f2:9c:0a:f5:2a:32:dc:af:8e:0c:db:cf:12:0d:06:
                    cb:e4:00:ba:b0:27:c1:fe:e9:ee:25:f7:34:34:02:
                    3b:93:65:7d:a0:06:3e:51:37:2a:63:90:df:cd:68:
                    5e:7d:6b:e7:fd:da:a2:f4:69:d8:59:7e:f0:fe:a1:
                    10:52:85:cf:e9:14:f1:c5:80:0f:43:0d:ed:ad:b5:
                    b0:e7:c4:42:b6:44:d7:8f:95:fb:50:51:f1:67:e0:
                    62:fd:ff:95:95:48:f4:9f:e7:f7:53:09:34:07:d1:
                    61:4a:32:9b:ef:95:06:45:e9:65:25:9f:7a:9b:f9:
                    2a:b7:a6:ee:28:10:97:cb:21:0e:04:d1:76:00:4c:
                    b8:3d:44:1e:48:bd:07:5f:ee:52:d2:0b:27:c4:92:
                    2d:e4:bb:06:fa:1d:a5:55:82:19:d9:02:9f:29:57:
                    d0:ed:82:44:8f:d2:d0:a8:e0:f9:13:b6:46:56:e8:
                    b4:cd:fb:93:6b:c9:76:a7:e6:82:fe:d5:92:cc:71:
                    fd:0e:34:cc:51:d9:2f:a3:02:09:37:e0:2c:b2:0c:
                    c5:cb:1f:04:5e:14:d3:05:f2:1d:b3:31:a9:51:bd:
                    5c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6E:E3:95:C6:69:15:8D:97:7B:CE:A2:34:76:D8:B9:13:5E:A7:1D
            X509v3 Authority Key Identifier:
                keyid:27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:2d:6b:cf:cd:ed:98:92:de:2a:07:cb:23:c4:35:d4:5c:bc:
         8d:20:4c:7c:b2:e8:7b:bf:c6:b8:9b:78:bf:4a:da:da:44:c6:
         26:91:bc:b7:ca:4a:ec:8d:30:20:76:f9:f6:31:b5:7d:65:f5:
         03:e4:2b:d6:f7:89:2e:64:e0:64:81:8f:41:30:a0:73:cc:8b:
         0f:d8:4e:7c:3d:8e:11:b0:8e:cc:79:21:ef:e8:53:d2:c9:ca:
         75:8e:20:27:b6:60:08:6e:0a:c4:a5:ea:71:8c:a3:b7:e6:f1:
         56:69:79:37:6a:16:d7:0b:d2:a2:ad:62:90:bf:a9:9c:e6:50:
         bc:9a:17:e7:db:af:97:18:9d:5c:dd:56:2e:a3:69:64:04:e6:
         f9:99:aa:82:96:cc:cb:5f:fe:92:7d:4b:4f:3d:b2:d6:c2:a5:
         fe:61:91:6e:0f:c7:57:8b:00:8e:00:2a:f5:64:54:78:72:b1:
         0d:da:5a:1d:40:26:fc:9d:b7:9c:a4:3b:c2:10:b5:d1:0e:7d:
         a0:33:12:c0:fa:1f:fa:04:47:66:98:1f:c4:72:70:65:c6:a6:
         42:c0:96:e9:fc:43:f4:24:d3:71:bb:e6:4c:d6:5f:46:ba:f3:
         15:91:49:01:eb:0b:7f:e1:6c:df:02:12:90:86:99:6c:e6:e0:
         f2:72:7c:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLVo9tihxpI5l4vs+deumEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDRkNjk2YmFkYjEwOTRjYWExNWQ3YmU4NmMzOWE3MTJl
MGVlMTIwHhcNMjUwNjA3MTcwMDUzWhcNMjUwNjA4MTcwMDUzWjAzMTEwLwYDVQQD
EygwOTZlZTM5NWM2NjkxNThkOTc3YmNlYTIzNDc2ZDhiOTEzNWVhNzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIWgdIbDLKCqyiqOKj26IG9SKPtA
mZZnX28vAJ7ynAr1KjLcr44M288SDQbL5AC6sCfB/unuJfc0NAI7k2V9oAY+UTcq
Y5DfzWhefWvn/dqi9GnYWX7w/qEQUoXP6RTxxYAPQw3trbWw58RCtkTXj5X7UFHx
Z+Bi/f+VlUj0n+f3Uwk0B9FhSjKb75UGRellJZ96m/kqt6buKBCXyyEOBNF2AEy4
PUQeSL0HX+5S0gsnxJIt5LsG+h2lVYIZ2QKfKVfQ7YJEj9LQqOD5E7ZGVui0zfuT
a8l2p+aC/tWSzHH9DjTMUdkvowIJN+AssgzFyx8EXhTTBfIdszGpUb1cNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlu45XGaRWNl3vOojR22LkTXqcdMB8GA1UdIwQY
MBaAFCfU1pa62xCUyqFde+hsOacS4O4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjlUV2xycmJFSlRLb1YxNzZHdzVweExnN2hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kMGNlZDgtZjFiNS00Y2Y1LWI0NGQt
ZThhNGVjZTkzYTM1LzEvSjlUV2xycmJFSlRLb1YxNzZHdzVweExnN2hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9kMGNlZDgtZjFiNS00Y2Y1LWI0NGQtZThhNGVjZTkzYTM1
LzEvSjlUV2xycmJFSlRLb1YxNzZHdzVweExnN2hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKC1rz83t
mJLeKgfLI8Q11Fy8jSBMfLLoe7/GuJt4v0ra2kTGJpG8t8pK7I0wIHb59jG1fWX1
A+Qr1veJLmTgZIGPQTCgc8yLD9hOfD2OEbCOzHkh7+hT0snKdY4gJ7ZgCG4KxKXq
cYyjt+bxVml5N2oW1wvSoq1ikL+pnOZQvJoX59uvlxidXN1WLqNpZATm+ZmqgpbM
y1/+kn1LTz2y1sKl/mGRbg/HV4sAjgAq9WRUeHKxDdpaHUAm/J23nKQ7whC10Q59
oDMSwPof+gRHZpgfxHJwZcamQsCW6fxD9CTTcbvmTNZfRrrzFZFJAesLf+Fs3wIS
kIaZbObg8nJ8sg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:00:30 2025 by rpki-client