Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft
File:                     X6FRijy1wnSeMNn_Icg3iJHOgSU.mft (raw, json)
Hash identifier:          OkEs2GuKX+Nf85qnqZx1i9YUPu6oDCXTQ1d7Wgz4vQA=
Subject key identifier:   42:02:43:59:EA:55:8C:6E:B4:B2:D8:7C:90:3D:48:C3:19:F6:B0:22
Authority key identifier: 5F:A1:51:8A:3C:B5:C2:74:9E:30:D9:FF:21:C8:37:88:91:CE:81:25
Certificate issuer:       /CN=5fa1518a3cb5c2749e30d9ff21c8378891ce8125
Certificate serial:       01991808DF0294285A117C7FEF990B5CBF9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X6FRijy1wnSeMNn_Icg3iJHOgSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft
Manifest number:          08DC
Signing time:             Fri 05 Sep 2025 04:00:58 +0000
Manifest this update:     Fri 05 Sep 2025 04:00:58 +0000
Manifest next update:     Sat 06 Sep 2025 04:00:58 +0000
Files and hashes:         1: X6FRijy1wnSeMNn_Icg3iJHOgSU.crl (hash: 0bNkZXExnQOYR9wyN1rq0LYWdKklLY3UVlotE/Qb9mU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X6FRijy1wnSeMNn_Icg3iJHOgSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:18:08:df:02:94:28:5a:11:7c:7f:ef:99:0b:5c:bf:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fa1518a3cb5c2749e30d9ff21c8378891ce8125
        Validity
            Not Before: Sep  5 04:00:58 2025 GMT
            Not After : Sep  6 04:00:58 2025 GMT
        Subject: CN=42024359ea558c6eb4b2d87c903d48c319f6b022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:47:29:42:6a:b5:b3:be:cc:5e:a4:a8:71:da:
                    bb:3c:7e:f8:20:95:c4:0a:05:d4:ff:59:c7:a5:99:
                    3d:a3:61:08:0e:86:80:98:af:fb:4b:77:38:b7:57:
                    2b:91:0a:d9:da:43:26:45:93:db:89:99:5b:99:ee:
                    6f:df:74:b6:2b:5a:c7:36:32:b4:96:12:35:a0:61:
                    8c:f2:f2:b1:df:d3:32:8c:91:08:5e:88:76:f6:87:
                    e1:0a:b0:15:f8:a6:25:da:35:fa:a6:10:66:95:b4:
                    c4:a7:2b:24:d2:aa:d9:50:32:a9:75:aa:18:bd:a8:
                    10:b3:5b:19:70:8e:fe:29:ad:aa:da:3c:30:0f:36:
                    45:cf:e8:89:d0:94:27:56:c5:96:ae:11:af:16:70:
                    66:15:cf:ce:9b:90:0f:e3:5a:a2:08:3e:9e:1c:e1:
                    65:3d:89:31:4d:91:f2:2d:84:d4:90:fa:9b:fc:8e:
                    27:12:fc:96:c8:ac:3e:46:d7:63:9d:24:82:13:a6:
                    45:ba:cd:4a:e6:9f:97:56:d0:bd:19:80:18:f0:74:
                    3f:8a:08:c4:3c:43:35:a7:2e:a5:11:cb:ba:6d:c0:
                    9c:3b:be:cc:bf:45:ec:bb:58:56:2d:40:6b:b2:86:
                    62:95:13:98:07:37:03:57:37:bc:ed:f4:30:65:de:
                    8e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:02:43:59:EA:55:8C:6E:B4:B2:D8:7C:90:3D:48:C3:19:F6:B0:22
            X509v3 Authority Key Identifier:
                keyid:5F:A1:51:8A:3C:B5:C2:74:9E:30:D9:FF:21:C8:37:88:91:CE:81:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6FRijy1wnSeMNn_Icg3iJHOgSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f8:24:9f:be:26:c8:34:f4:3b:e5:f0:f4:4f:a9:c3:93:86:
         1d:fb:e4:f0:9c:a8:ff:a3:88:45:d4:94:f3:7f:fb:9b:6d:c9:
         c5:3a:4d:a9:8f:36:26:0c:dd:cb:53:31:f6:a7:e6:97:d7:ff:
         1e:36:4f:8e:31:9e:91:1f:c3:a5:81:c4:ed:c9:ae:c3:45:df:
         44:6f:0a:15:ba:f7:a0:3f:ac:90:c7:8c:0e:cf:d6:6a:bc:16:
         30:7e:95:41:48:66:52:72:61:30:d0:60:c4:dc:b3:cd:fb:82:
         33:34:3a:e9:cf:54:cb:b4:09:16:ec:50:16:59:26:55:c8:94:
         d2:f3:37:79:b7:19:51:a0:51:99:20:1e:33:0f:5b:87:1c:4d:
         c1:3b:6b:e4:e2:c3:4b:64:a6:e6:97:24:b6:cc:f7:0c:5e:64:
         69:04:51:02:7b:87:4c:1e:7f:92:3a:98:76:8b:42:01:84:80:
         fb:21:06:75:62:68:3f:42:d0:da:d5:a0:89:2b:db:2d:80:93:
         a7:7d:c2:73:b3:11:71:a2:44:e1:48:43:10:07:53:1f:00:87:
         6e:c4:c0:39:79:31:ac:43:dd:88:95:22:71:17:94:e4:9f:e4:
         db:41:6c:5b:99:bd:af:8c:cc:27:72:d8:38:53:eb:c8:3b:bd:
         d5:a5:78:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkYCN8ClChaEXx/75kLXL+bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYTE1MThhM2NiNWMyNzQ5ZTMwZDlmZjIxYzgzNzg4OTFj
ZTgxMjUwHhcNMjUwOTA1MDQwMDU4WhcNMjUwOTA2MDQwMDU4WjAzMTEwLwYDVQQD
Eyg0MjAyNDM1OWVhNTU4YzZlYjRiMmQ4N2M5MDNkNDhjMzE5ZjZiMDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kcpQmq1s77MXqSocdq7PH74IJXE
CgXU/1nHpZk9o2EIDoaAmK/7S3c4t1crkQrZ2kMmRZPbiZlbme5v33S2K1rHNjK0
lhI1oGGM8vKx39MyjJEIXoh29ofhCrAV+KYl2jX6phBmlbTEpysk0qrZUDKpdaoY
vagQs1sZcI7+Ka2q2jwwDzZFz+iJ0JQnVsWWrhGvFnBmFc/Om5AP41qiCD6eHOFl
PYkxTZHyLYTUkPqb/I4nEvyWyKw+RtdjnSSCE6ZFus1K5p+XVtC9GYAY8HQ/igjE
PEM1py6lEcu6bcCcO77Mv0Xsu1hWLUBrsoZilROYBzcDVze87fQwZd6O1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEICQ1nqVYxutLLYfJA9SMMZ9rAiMB8GA1UdIwQY
MBaAFF+hUYo8tcJ0njDZ/yHIN4iRzoElMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDZGUmlqeTF3blNlTU5uX0ljZzNpSkhPZ1NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC85MzEwMTUtYTgwYi00ODQ0LWFjMzct
NmU4ZTk4YjkwYzVmLzEvWDZGUmlqeTF3blNlTU5uX0ljZzNpSkhPZ1NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC85MzEwMTUtYTgwYi00ODQ0LWFjMzctNmU4ZTk4YjkwYzVm
LzEvWDZGUmlqeTF3blNlTU5uX0ljZzNpSkhPZ1NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvgkn74m
yDT0O+Xw9E+pw5OGHfvk8Jyo/6OIRdSU83/7m23JxTpNqY82Jgzdy1Mx9qfml9f/
HjZPjjGekR/DpYHE7cmuw0XfRG8KFbr3oD+skMeMDs/WarwWMH6VQUhmUnJhMNBg
xNyzzfuCMzQ66c9Uy7QJFuxQFlkmVciU0vM3ebcZUaBRmSAeMw9bhxxNwTtr5OLD
S2Sm5pcktsz3DF5kaQRRAnuHTB5/kjqYdotCAYSA+yEGdWJoP0LQ2tWgiSvbLYCT
p33Cc7MRcaJE4UhDEAdTHwCHbsTAOXkxrEPdiJUicReU5J/k20FsW5m9r4zMJ3LY
OFPryDu91aV4ug==
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:34 2025 by rpki-client