Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
File:                     1i15SeaYRB2-mrxWCcSerKc8l5Y.mft (raw, json)
Hash identifier:          9QRRiK44XFykV1AnSW9J7Bl/xmUBEAWbV1RftIiouwQ=
Subject key identifier:   9A:72:C6:DC:E0:52:44:DE:56:14:F3:DE:7D:6F:C2:60:CC:B1:70:E3
Authority key identifier: D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
Certificate issuer:       /CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Certificate serial:       019921B15711330A58698A5BCC6106E8E1DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
Manifest number:          0FDD
Signing time:             Sun 07 Sep 2025 01:01:34 +0000
Manifest this update:     Sun 07 Sep 2025 01:01:34 +0000
Manifest next update:     Mon 08 Sep 2025 01:01:34 +0000
Files and hashes:         1: 1i15SeaYRB2-mrxWCcSerKc8l5Y.crl (hash: eICSiOAP3icP39ZcIJWUUnAiDCtsjhNJ4H/eX+zhcW0=)
                          2: d6njcJAvU5XAKbAJO-1stP-sI3c.roa (hash: Qb51F1ZjPbC9UkzfA0CmXmJOGj7X7JIQuEBdAlbn5BM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b1:57:11:33:0a:58:69:8a:5b:cc:61:06:e8:e1:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62d7949e698441dbe9abc5609c49eaca73c9796
        Validity
            Not Before: Sep  7 01:01:34 2025 GMT
            Not After : Sep  8 01:01:34 2025 GMT
        Subject: CN=9a72c6dce05244de5614f3de7d6fc260ccb170e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:75:ea:e0:ce:a1:d3:db:85:e8:aa:67:e2:5f:
                    1f:98:f7:5e:87:01:e1:28:de:14:89:91:fb:15:e7:
                    ca:8f:a6:6b:02:a9:d6:cb:50:bb:cf:e0:13:4c:13:
                    58:27:07:bd:04:bc:1f:fd:39:e0:7e:4c:d9:a7:ba:
                    32:20:75:03:9b:f0:fd:71:80:cb:c7:04:89:73:42:
                    f3:e2:7b:85:e0:7f:a8:68:f3:dc:06:7f:4b:b1:0f:
                    cc:d8:06:ba:88:28:51:98:64:09:c7:62:66:90:7b:
                    de:66:bf:02:33:12:8e:ac:04:49:76:2b:62:3a:26:
                    8b:b0:6d:bb:e1:c6:44:49:b1:af:be:8a:bb:5b:ef:
                    b1:ec:aa:16:e1:0a:d8:97:1c:79:12:da:c1:a0:b4:
                    2c:d7:9b:d8:b7:e7:de:6b:f9:2a:f5:23:a9:e8:59:
                    06:04:a4:9a:ea:2a:28:a4:11:ff:c7:d5:77:a5:5b:
                    02:b6:70:07:ea:ef:3b:b5:5b:35:91:70:b3:2b:97:
                    ae:0f:73:59:3f:0b:d3:28:87:7f:01:6b:56:86:f5:
                    29:ad:0d:af:98:98:08:b2:72:9e:c2:1b:95:0a:6e:
                    e8:57:01:6a:c8:65:6b:d9:bc:01:55:34:d8:21:e4:
                    01:28:d5:89:2c:88:0c:df:6d:ed:e0:4b:93:6b:0a:
                    88:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:72:C6:DC:E0:52:44:DE:56:14:F3:DE:7D:6F:C2:60:CC:B1:70:E3
            X509v3 Authority Key Identifier:
                keyid:D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:09:91:b2:a1:27:81:ee:b1:6b:c3:ed:d5:cf:33:ec:e5:37:
         7c:b1:69:0c:b5:6b:8d:ea:bc:ed:71:ff:fc:cc:1d:d0:7b:d2:
         d2:21:51:ef:2f:63:bf:0c:44:5d:9f:1b:1e:55:ae:c5:42:66:
         d1:cc:06:c1:8e:e0:0c:99:68:0d:62:b7:f4:e9:6e:6b:bf:2b:
         c0:c8:98:4a:ae:fe:10:7d:41:90:46:7a:a7:8a:3d:10:97:53:
         97:c7:d2:3a:29:a6:6b:97:c7:6d:4c:8a:d6:92:2e:9d:ce:92:
         6e:ee:bc:ee:ad:a8:b2:87:fe:2f:91:90:ed:67:a7:82:84:46:
         15:d4:41:0f:f2:89:36:44:42:e4:2c:80:be:7e:4c:4c:04:3a:
         0c:4b:eb:c1:96:e5:c9:62:8d:7f:12:b0:9c:1c:a1:cc:ad:54:
         14:4c:c2:02:a2:7f:8b:d1:7c:0a:32:ac:40:06:79:77:5d:8e:
         3c:74:32:28:35:16:1e:5c:75:0b:54:47:3d:d8:44:43:86:6d:
         dd:4e:d2:3e:1d:ea:ef:e4:39:3c:57:d6:6b:2f:17:1b:84:d1:
         21:38:77:f3:31:19:77:00:29:ec:7e:72:bd:fa:af:5c:2e:f0:
         51:6d:12:d8:fe:50:51:fb:4d:0c:bf:f4:c5:1d:dd:30:d5:07:
         74:40:81:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsVcRMwpYaYpbzGEG6OHeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MmQ3OTQ5ZTY5ODQ0MWRiZTlhYmM1NjA5YzQ5ZWFjYTcz
Yzk3OTYwHhcNMjUwOTA3MDEwMTM0WhcNMjUwOTA4MDEwMTM0WjAzMTEwLwYDVQQD
Eyg5YTcyYzZkY2UwNTI0NGRlNTYxNGYzZGU3ZDZmYzI2MGNjYjE3MGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHXq4M6h09uF6Kpn4l8fmPdehwHh
KN4UiZH7FefKj6ZrAqnWy1C7z+ATTBNYJwe9BLwf/TngfkzZp7oyIHUDm/D9cYDL
xwSJc0Lz4nuF4H+oaPPcBn9LsQ/M2Aa6iChRmGQJx2JmkHveZr8CMxKOrARJditi
OiaLsG274cZESbGvvoq7W++x7KoW4QrYlxx5EtrBoLQs15vYt+fea/kq9SOp6FkG
BKSa6ioopBH/x9V3pVsCtnAH6u87tVs1kXCzK5euD3NZPwvTKId/AWtWhvUprQ2v
mJgIsnKewhuVCm7oVwFqyGVr2bwBVTTYIeQBKNWJLIgM323t4EuTawqItQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpyxtzgUkTeVhTz3n1vwmDMsXDjMB8GA1UdIwQY
MBaAFNYteUnmmEQdvpq8VgnEnqynPJeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWkxNVNlYVlSQjItbXJ4V0NjU2VyS2M4bDVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hYzA5MjMtN2ViMS00YTVmLTkxMDUt
MTViMjFhOWI0MzI1LzEvMWkxNVNlYVlSQjItbXJ4V0NjU2VyS2M4bDVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hYzA5MjMtN2ViMS00YTVmLTkxMDUtMTViMjFhOWI0MzI1
LzEvMWkxNVNlYVlSQjItbXJ4V0NjU2VyS2M4bDVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQmRsqEn
ge6xa8Pt1c8z7OU3fLFpDLVrjeq87XH//Mwd0HvS0iFR7y9jvwxEXZ8bHlWuxUJm
0cwGwY7gDJloDWK39Olua78rwMiYSq7+EH1BkEZ6p4o9EJdTl8fSOimma5fHbUyK
1pIunc6Sbu687q2osof+L5GQ7WengoRGFdRBD/KJNkRC5CyAvn5MTAQ6DEvrwZbl
yWKNfxKwnByhzK1UFEzCAqJ/i9F8CjKsQAZ5d12OPHQyKDUWHlx1C1RHPdhEQ4Zt
3U7SPh3q7+Q5PFfWay8XG4TRITh38zEZdwAp7H5yvfqvXC7wUW0S2P5QUftNDL/0
xR3dMNUHdECBlA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:28 2025 by rpki-client