Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
File:                     1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft (raw, json)
Hash identifier:          gkV9y/xvtKfeLv3S5NlVXGv2E5G3SuKm3j33hYS/XJs=
Subject key identifier:   44:15:1B:72:69:C8:E7:25:AA:0C:B0:5D:4C:D9:32:69:A0:2D:F5:C9
Authority key identifier: D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
Certificate issuer:       /CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Certificate serial:       019921B195AD9C38E48D763C012C042A4AE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
Manifest number:          0BA1
Signing time:             Sun 07 Sep 2025 01:01:50 +0000
Manifest this update:     Sun 07 Sep 2025 01:01:50 +0000
Manifest next update:     Mon 08 Sep 2025 01:01:50 +0000
Files and hashes:         1: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl (hash: CZbqvcQZUU6NmAV5MvRUtTocz0LeN4R9DQ4B7CM1cAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b1:95:ad:9c:38:e4:8d:76:3c:01:2c:04:2a:4a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
        Validity
            Not Before: Sep  7 01:01:50 2025 GMT
            Not After : Sep  8 01:01:50 2025 GMT
        Subject: CN=44151b7269c8e725aa0cb05d4cd93269a02df5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:74:f1:3c:88:77:ec:01:ff:08:a0:66:77:27:
                    2b:0a:02:68:ff:95:04:88:56:b1:d2:f3:f3:81:fe:
                    5c:8a:0f:dd:bb:69:5f:5e:18:62:27:51:16:ac:ab:
                    cc:3c:be:82:08:ff:b8:f8:3f:14:cc:7e:c8:a7:a3:
                    07:56:cc:53:22:2f:ce:34:60:f9:36:9b:95:4f:35:
                    1c:06:11:86:32:32:e3:1f:26:2e:4c:3c:84:38:79:
                    d4:d7:11:ac:d5:ed:88:ec:31:76:c0:45:1e:f3:d0:
                    2b:4e:d6:19:ef:4f:58:ac:ca:b0:29:39:dd:77:1c:
                    ed:b5:97:53:84:4b:20:ab:f9:05:b3:cc:9e:ba:46:
                    5e:43:e8:41:98:5f:72:5f:39:22:ec:6c:0f:4e:8a:
                    e8:03:ec:87:dc:36:dd:a8:70:4f:bc:98:ad:48:d5:
                    a2:a8:5b:d7:a0:37:74:a0:20:55:41:c0:61:7b:bd:
                    c9:bf:24:97:14:49:31:bb:ff:2c:70:89:28:14:ff:
                    c6:5f:9e:4c:e3:87:99:fd:9f:cb:10:3b:23:ae:b0:
                    0a:72:39:22:66:a5:dd:64:3a:28:fc:c5:ef:4c:52:
                    f0:cd:46:82:b9:1d:a3:59:49:ca:69:4d:33:f0:9a:
                    4b:27:5b:4a:68:cc:ea:98:34:37:0b:5c:bf:03:e6:
                    97:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:15:1B:72:69:C8:E7:25:AA:0C:B0:5D:4C:D9:32:69:A0:2D:F5:C9
            X509v3 Authority Key Identifier:
                keyid:D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:40:59:3a:a4:05:6e:52:68:17:38:20:43:8b:6d:13:85:26:
         65:1d:de:83:1e:b0:ad:c5:21:07:19:ee:d7:6d:c1:99:3b:11:
         91:5b:12:39:78:6e:85:3e:c3:51:f3:60:19:cd:9c:61:59:b8:
         09:3a:07:49:cd:45:93:3e:19:47:f3:58:4f:ed:80:cc:72:c9:
         04:b0:ff:39:95:d4:19:84:14:e2:55:d5:18:18:3a:e6:d7:07:
         75:20:89:aa:7e:b9:17:28:27:7a:9f:55:a5:8f:4f:98:b0:c5:
         80:a8:0d:5e:28:42:41:94:73:d2:3c:12:b3:31:71:63:2b:58:
         5e:31:5a:84:ee:4d:5d:37:dd:a8:57:96:a7:7e:d7:db:13:e4:
         bd:60:e5:29:66:5f:cb:1f:4d:6d:e1:c2:f4:51:48:07:7f:78:
         0b:b3:d5:15:61:ab:e5:e2:f5:34:8a:24:2e:58:b3:cf:3d:3a:
         61:3d:b2:74:db:43:ed:1f:96:6e:e5:1d:10:9e:63:25:8b:28:
         d7:f8:fa:9d:58:76:01:1a:a2:15:3c:df:6d:03:3d:ce:de:28:
         0f:a8:34:43:32:8e:f5:a9:f6:68:33:18:5f:48:17:8e:34:bb:
         0f:2f:77:ea:f9:55:1d:e6:d8:58:24:bb:38:60:2b:b9:8d:b4:
         e8:d0:b4:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsZWtnDjkjXY8ASwEKkriMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MTg3YTBhYmIzZWVlNDExMDMzOGI3ZDhmM2Y3ZTdlMTI1
YmU2YzQwHhcNMjUwOTA3MDEwMTUwWhcNMjUwOTA4MDEwMTUwWjAzMTEwLwYDVQQD
Eyg0NDE1MWI3MjY5YzhlNzI1YWEwY2IwNWQ0Y2Q5MzI2OWEwMmRmNWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHTxPIh37AH/CKBmdycrCgJo/5UE
iFax0vPzgf5cig/du2lfXhhiJ1EWrKvMPL6CCP+4+D8UzH7Ip6MHVsxTIi/ONGD5
NpuVTzUcBhGGMjLjHyYuTDyEOHnU1xGs1e2I7DF2wEUe89ArTtYZ709YrMqwKTnd
dxzttZdThEsgq/kFs8yeukZeQ+hBmF9yXzki7GwPToroA+yH3DbdqHBPvJitSNWi
qFvXoDd0oCBVQcBhe73JvySXFEkxu/8scIkoFP/GX55M44eZ/Z/LEDsjrrAKcjki
ZqXdZDoo/MXvTFLwzUaCuR2jWUnKaU0z8JpLJ1tKaMzqmDQ3C1y/A+aXTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQVG3JpyOclqgywXUzZMmmgLfXJMB8GA1UdIwQY
MBaAFNcYegq7Pu5BEDOLfY8/fn4SW+bEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXhoNkNycy03a0VRTTR0OWp6OS1maEpiNXNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hMTdlZmYtYTg5ZC00YTNiLWE0NjEt
YzgwMzkxZWFjOWU2LzEvMXhoNkNycy03a0VRTTR0OWp6OS1maEpiNXNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9hMTdlZmYtYTg5ZC00YTNiLWE0NjEtYzgwMzkxZWFjOWU2
LzEvMXhoNkNycy03a0VRTTR0OWp6OS1maEpiNXNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0BZOqQF
blJoFzggQ4ttE4UmZR3egx6wrcUhBxnu123BmTsRkVsSOXhuhT7DUfNgGc2cYVm4
CToHSc1Fkz4ZR/NYT+2AzHLJBLD/OZXUGYQU4lXVGBg65tcHdSCJqn65Fygnep9V
pY9PmLDFgKgNXihCQZRz0jwSszFxYytYXjFahO5NXTfdqFeWp37X2xPkvWDlKWZf
yx9NbeHC9FFIB394C7PVFWGr5eL1NIokLlizzz06YT2ydNtD7R+WbuUdEJ5jJYso
1/j6nVh2ARqiFTzfbQM9zt4oD6g0QzKO9an2aDMYX0gXjjS7Dy936vlVHebYWCS7
OGAruY206NC0vw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:35 2025 by rpki-client