Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
File:                     yVcXmb2ok6GGC0phbFYnivXsksU.mft (raw, json)
Hash identifier:          k312+SloY3zj1cpfhzO7pGp9bmp4bfX3pzY52pdYm3g=
Subject key identifier:   45:15:1A:8C:C4:D3:78:FF:19:9E:43:45:F8:D2:BA:51:B2:5F:65:EB
Authority key identifier: C9:57:17:99:BD:A8:93:A1:86:0B:4A:61:6C:56:27:8A:F5:EC:92:C5
Certificate issuer:       /CN=c9571799bda893a1860b4a616c56278af5ec92c5
Certificate serial:       019922FAB3B6932C94568E3B2F73BD19CEE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
Manifest number:          0B76
Signing time:             Sun 07 Sep 2025 07:01:19 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:19 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:19 +0000
Files and hashes:         1: yVcXmb2ok6GGC0phbFYnivXsksU.crl (hash: rGtDKbF8qm+JM1jsEjwUC/OnRzbeSbUaz+0EOtOq6Ws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:b3:b6:93:2c:94:56:8e:3b:2f:73:bd:19:ce:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9571799bda893a1860b4a616c56278af5ec92c5
        Validity
            Not Before: Sep  7 07:01:19 2025 GMT
            Not After : Sep  8 07:01:19 2025 GMT
        Subject: CN=45151a8cc4d378ff199e4345f8d2ba51b25f65eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:39:ad:5a:d0:45:37:4e:21:ac:44:db:e8:d4:
                    d5:17:b6:c3:20:39:79:06:88:93:fc:a8:23:35:63:
                    9d:47:c2:29:c8:85:b3:92:38:6d:98:3d:89:44:36:
                    0b:7f:c3:e1:b3:06:42:55:82:f2:a5:37:43:6a:a6:
                    7b:d4:ec:40:72:c3:51:50:c8:ca:18:39:0d:e8:c8:
                    3a:5a:04:0d:cf:d9:06:65:9f:53:e9:dc:a2:f1:c7:
                    a1:61:46:60:57:c9:3d:fe:5a:5f:12:37:56:ca:d5:
                    9b:84:42:be:7c:c8:36:a5:1c:56:65:43:ed:b4:da:
                    c7:78:1d:4c:a5:1b:74:0b:a2:bb:7f:cc:9d:0e:68:
                    4b:d6:01:a6:e8:6f:5f:07:f6:5d:48:a5:22:f5:89:
                    c8:d9:3d:05:7a:5e:9a:29:ee:00:49:d2:f0:f6:65:
                    21:d2:dc:9a:ec:9b:27:fe:94:60:07:93:a8:ae:02:
                    09:08:e3:8a:43:42:2b:d4:f3:3b:a5:1f:42:95:42:
                    b4:fb:d5:30:63:40:68:7a:a7:e3:3b:3b:54:2b:86:
                    d7:b9:83:c0:ca:d7:2b:37:2e:0a:22:ee:44:b3:c4:
                    a2:fd:a9:52:6d:33:b6:71:25:e6:11:b1:46:64:fd:
                    57:0e:eb:4f:1f:af:f1:94:be:9c:66:ff:45:ba:0d:
                    3d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:15:1A:8C:C4:D3:78:FF:19:9E:43:45:F8:D2:BA:51:B2:5F:65:EB
            X509v3 Authority Key Identifier:
                keyid:C9:57:17:99:BD:A8:93:A1:86:0B:4A:61:6C:56:27:8A:F5:EC:92:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:96:c7:f0:0c:43:6a:fb:a2:58:82:3a:48:1b:64:ff:53:83:
         e8:51:d0:cc:3c:e0:91:54:f6:48:dc:79:dd:75:51:01:d2:7d:
         32:92:70:fe:91:12:10:76:42:21:2b:05:27:f7:5f:54:0c:9f:
         11:0d:85:8e:f0:a9:13:91:aa:d8:12:da:78:09:ad:a7:54:e8:
         d5:ba:9f:be:76:0f:6e:fc:5e:01:a9:29:cd:32:a6:a9:96:44:
         74:3e:a9:97:fb:90:6f:9a:a8:01:3e:6a:a6:40:72:dd:27:6f:
         c7:98:cb:41:38:9c:08:82:07:12:70:28:35:16:bf:d6:7c:3b:
         f3:02:47:e0:76:1d:9b:6c:36:3e:b7:a2:70:5e:c7:2e:8c:0e:
         ba:22:71:b0:3e:ce:5a:c9:b3:b8:df:06:a3:e6:81:db:d4:03:
         ab:a7:51:af:58:e8:d4:d1:34:f8:33:61:20:db:13:95:63:3c:
         49:26:93:09:74:7a:15:5f:82:e9:8a:1b:09:b6:20:9f:fb:e2:
         78:ec:90:7c:c0:34:ac:5f:0e:62:a7:8a:3b:38:c8:2c:b5:ba:
         d8:67:d4:e3:f7:f0:fe:23:3f:4c:f4:73:1e:f4:02:b5:30:53:
         a7:45:9a:db:b7:e9:2c:ad:85:dd:83:fc:2a:e8:f1:4e:70:8e:
         0d:79:93:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+rO2kyyUVo47L3O9Gc7jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NTcxNzk5YmRhODkzYTE4NjBiNGE2MTZjNTYyNzhhZjVl
YzkyYzUwHhcNMjUwOTA3MDcwMTE5WhcNMjUwOTA4MDcwMTE5WjAzMTEwLwYDVQQD
Eyg0NTE1MWE4Y2M0ZDM3OGZmMTk5ZTQzNDVmOGQyYmE1MWIyNWY2NWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTmtWtBFN04hrETb6NTVF7bDIDl5
BoiT/KgjNWOdR8IpyIWzkjhtmD2JRDYLf8PhswZCVYLypTdDaqZ71OxAcsNRUMjK
GDkN6Mg6WgQNz9kGZZ9T6dyi8cehYUZgV8k9/lpfEjdWytWbhEK+fMg2pRxWZUPt
tNrHeB1MpRt0C6K7f8ydDmhL1gGm6G9fB/ZdSKUi9YnI2T0Fel6aKe4ASdLw9mUh
0tya7Jsn/pRgB5OorgIJCOOKQ0Ir1PM7pR9ClUK0+9UwY0BoeqfjOztUK4bXuYPA
ytcrNy4KIu5Es8Si/alSbTO2cSXmEbFGZP1XDutPH6/xlL6cZv9Fug09XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUVGozE03j/GZ5DRfjSulGyX2XrMB8GA1UdIwQY
MBaAFMlXF5m9qJOhhgtKYWxWJ4r17JLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVZjWG1iMm9rNkdHQzBwaGJGWW5pdlhza3NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wOGVmODctY2Y1NS00YjVkLTk4MjEt
MDM3NDZkN2JkMjk0LzEveVZjWG1iMm9rNkdHQzBwaGJGWW5pdlhza3NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wOGVmODctY2Y1NS00YjVkLTk4MjEtMDM3NDZkN2JkMjk0
LzEveVZjWG1iMm9rNkdHQzBwaGJGWW5pdlhza3NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZbH8AxD
avuiWII6SBtk/1OD6FHQzDzgkVT2SNx53XVRAdJ9MpJw/pESEHZCISsFJ/dfVAyf
EQ2FjvCpE5Gq2BLaeAmtp1To1bqfvnYPbvxeAakpzTKmqZZEdD6pl/uQb5qoAT5q
pkBy3Sdvx5jLQTicCIIHEnAoNRa/1nw78wJH4HYdm2w2PreicF7HLowOuiJxsD7O
WsmzuN8Go+aB29QDq6dRr1jo1NE0+DNhINsTlWM8SSaTCXR6FV+C6YobCbYgn/vi
eOyQfMA0rF8OYqeKOzjILLW62GfU4/fw/iM/TPRzHvQCtTBTp0Wa27fpLK2F3YP8
KujxTnCODXmTGw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:38:05 2025 by rpki-client