Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
File:                     PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft (raw, json)
Hash identifier:          9/hKqrih2K1BEDvs0Wv0APd9qydC5VphnTIvfsBfHfc=
Subject key identifier:   80:9E:F6:55:D4:B9:B1:B6:6D:4E:23:06:EE:4F:73:96:27:C5:11:53
Authority key identifier: 3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84
Certificate issuer:       /CN=3f24a4322e88312c81f469ac9ffa730df14b3384
Certificate serial:       0199187748FB2A2B7D470FD6181912C5B935
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
Manifest number:          1669
Signing time:             Fri 05 Sep 2025 06:01:34 +0000
Manifest this update:     Fri 05 Sep 2025 06:01:34 +0000
Manifest next update:     Sat 06 Sep 2025 06:01:34 +0000
Files and hashes:         1: PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl (hash: 7gxXvQglH8bU65QAkBCrzuEnSJKMcEaRokIfnhWNKW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:18:77:48:fb:2a:2b:7d:47:0f:d6:18:19:12:c5:b9:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f24a4322e88312c81f469ac9ffa730df14b3384
        Validity
            Not Before: Sep  5 06:01:34 2025 GMT
            Not After : Sep  6 06:01:34 2025 GMT
        Subject: CN=809ef655d4b9b1b66d4e2306ee4f739627c51153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1e:29:41:39:be:9e:20:98:ce:d4:bb:e0:db:
                    6a:e7:fe:d4:c0:8a:d2:42:cc:09:e6:65:5d:e7:a0:
                    ea:d9:3d:62:76:63:03:d1:50:4e:4e:a1:bc:f2:90:
                    9b:9b:f2:da:c8:e8:bd:29:f8:89:c1:2e:bb:73:16:
                    66:3a:61:ff:88:7f:fe:59:de:19:d4:b8:fb:ca:dc:
                    63:a5:e9:59:d2:7c:8d:d4:81:d0:39:96:2f:56:5c:
                    85:23:cc:3d:41:fd:02:b0:47:65:70:f6:d9:d5:16:
                    8d:8d:16:e5:6c:55:b2:ec:8b:5e:af:73:24:d0:42:
                    da:2b:e5:51:d1:8e:20:d5:a7:db:62:91:e9:2e:a2:
                    db:6a:58:64:f2:d4:31:07:79:29:2c:be:50:cf:1b:
                    4c:da:4f:84:6e:96:94:67:7e:ef:56:66:96:8d:39:
                    5c:1b:56:94:f9:c2:bd:83:da:0a:9e:8e:05:43:df:
                    b2:69:ce:38:e3:6d:f4:a9:7c:87:dc:20:c8:fc:a8:
                    8d:4f:d2:a8:d9:a5:bd:d2:05:2e:43:5f:da:1e:6f:
                    54:58:68:db:d6:2c:58:d3:11:23:90:50:97:9d:9a:
                    49:7b:83:49:4b:6e:45:51:2c:5d:a1:22:4f:9b:06:
                    b6:09:04:a1:97:01:6a:17:a7:96:53:ed:62:32:9e:
                    e5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9E:F6:55:D4:B9:B1:B6:6D:4E:23:06:EE:4F:73:96:27:C5:11:53
            X509v3 Authority Key Identifier:
                keyid:3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:f2:aa:2c:ea:87:d9:95:db:3c:fc:63:a9:82:b5:07:89:f6:
         1b:db:f1:a4:1c:47:bd:5e:0a:0b:31:cf:39:18:51:4b:73:a3:
         06:a6:7d:e6:25:6e:3d:40:6b:48:90:7e:1a:ae:1f:15:ac:67:
         70:ac:f9:3d:5b:ba:fb:7a:b4:0f:7f:a3:8b:75:b5:dd:52:1f:
         72:77:64:b2:8a:99:56:68:c7:37:4b:6b:0d:90:57:89:3a:2b:
         85:73:46:f1:09:50:43:4e:41:70:c3:ca:a6:e9:73:8e:6a:f8:
         cc:b2:d7:cd:6e:fc:47:09:be:42:fe:a7:08:07:e8:de:0d:3c:
         4f:04:a0:91:e0:cb:39:2e:52:0c:8a:d8:21:11:ed:cb:41:60:
         27:78:21:99:1c:80:76:fa:25:e1:b8:6c:35:65:e9:b1:f3:6e:
         8d:6c:6c:b7:1a:6b:4f:e4:e5:88:53:d4:cc:c4:8f:89:4d:8e:
         c3:79:9e:9d:d0:8b:4e:e4:00:29:74:74:cd:20:2a:84:62:44:
         a9:bf:bb:90:6a:f3:5b:dd:4a:0a:ad:c0:73:2b:a1:2b:10:54:
         4f:ed:8d:19:52:88:6e:92:aa:a3:a6:f4:ea:6c:24:28:b8:25:
         6e:89:e6:f2:34:32:a8:3a:8a:b3:8e:90:ae:57:88:2c:ca:cf:
         5e:f4:d7:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkYd0j7Kit9Rw/WGBkSxbk1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMjRhNDMyMmU4ODMxMmM4MWY0NjlhYzlmZmE3MzBkZjE0
YjMzODQwHhcNMjUwOTA1MDYwMTM0WhcNMjUwOTA2MDYwMTM0WjAzMTEwLwYDVQQD
Eyg4MDllZjY1NWQ0YjliMWI2NmQ0ZTIzMDZlZTRmNzM5NjI3YzUxMTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB4pQTm+niCYztS74Ntq5/7UwIrS
QswJ5mVd56Dq2T1idmMD0VBOTqG88pCbm/LayOi9KfiJwS67cxZmOmH/iH/+Wd4Z
1Lj7ytxjpelZ0nyN1IHQOZYvVlyFI8w9Qf0CsEdlcPbZ1RaNjRblbFWy7Iter3Mk
0ELaK+VR0Y4g1afbYpHpLqLbalhk8tQxB3kpLL5QzxtM2k+EbpaUZ37vVmaWjTlc
G1aU+cK9g9oKno4FQ9+yac444230qXyH3CDI/KiNT9Ko2aW90gUuQ1/aHm9UWGjb
1ixY0xEjkFCXnZpJe4NJS25FUSxdoSJPmwa2CQShlwFqF6eWU+1iMp7lOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICe9lXUubG2bU4jBu5Pc5YnxRFTMB8GA1UdIwQY
MBaAFD8kpDIuiDEsgfRprJ/6cw3xSzOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHlTa01pNklNU3lCOUdtc25fcHpEZkZMTTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kMGZhOTktYzExMC00NjA5LThiMDkt
ODkyYjViODJkNjY0LzEvUHlTa01pNklNU3lCOUdtc25fcHpEZkZMTTRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9kMGZhOTktYzExMC00NjA5LThiMDktODkyYjViODJkNjY0
LzEvUHlTa01pNklNU3lCOUdtc25fcHpEZkZMTTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/KqLOqH
2ZXbPPxjqYK1B4n2G9vxpBxHvV4KCzHPORhRS3OjBqZ95iVuPUBrSJB+Gq4fFaxn
cKz5PVu6+3q0D3+ji3W13VIfcndksoqZVmjHN0trDZBXiTorhXNG8QlQQ05BcMPK
pulzjmr4zLLXzW78Rwm+Qv6nCAfo3g08TwSgkeDLOS5SDIrYIRHty0FgJ3ghmRyA
dvol4bhsNWXpsfNujWxstxprT+TliFPUzMSPiU2Ow3mendCLTuQAKXR0zSAqhGJE
qb+7kGrzW91KCq3AcyuhKxBUT+2NGVKIbpKqo6b06mwkKLglbonm8jQyqDqKs46Q
rleILMrPXvTXUQ==
-----END CERTIFICATE-----
Generated at Fri Sep 5 09:49:30 2025 by rpki-client