Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft
File:                     J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft (raw, json)
Hash identifier:          U8XAuuUAuYriswOKlm5cxgEMP74wXv1PS6yqddw7f4c=
Subject key identifier:   55:8F:28:DC:8D:84:C5:F6:9D:F9:D2:79:1A:FC:F6:E6:CF:32:E1:58
Authority key identifier: 27:83:79:03:50:87:0F:DB:5B:26:74:BC:61:C8:D8:FD:62:D7:71:9B
Certificate issuer:       /CN=2783790350870fdb5b2674bc61c8d8fd62d7719b
Certificate serial:       019922C3C3DA81E2E3442F1B2D3555795DBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J4N5A1CHD9tbJnS8YcjY_WLXcZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft
Manifest number:          06CE
Signing time:             Sun 07 Sep 2025 06:01:18 +0000
Manifest this update:     Sun 07 Sep 2025 06:01:18 +0000
Manifest next update:     Mon 08 Sep 2025 06:01:18 +0000
Files and hashes:         1: J4N5A1CHD9tbJnS8YcjY_WLXcZs.crl (hash: RK2ZffUVgeE/xG0VZE7aC9O5iIYKznte6VDaJQhmSd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J4N5A1CHD9tbJnS8YcjY_WLXcZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:c3:da:81:e2:e3:44:2f:1b:2d:35:55:79:5d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2783790350870fdb5b2674bc61c8d8fd62d7719b
        Validity
            Not Before: Sep  7 06:01:18 2025 GMT
            Not After : Sep  8 06:01:18 2025 GMT
        Subject: CN=558f28dc8d84c5f69df9d2791afcf6e6cf32e158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cd:03:7a:d1:83:05:2e:27:69:d8:72:fd:ae:
                    d0:f7:65:39:e7:5d:73:be:b7:83:a3:5f:f9:f6:28:
                    4d:e0:db:3c:c6:19:f8:aa:1e:65:b0:63:93:f7:60:
                    64:c4:a3:9f:bd:cb:0f:93:50:9d:a5:c6:aa:d5:a2:
                    e8:0a:7f:8b:30:1a:92:8a:92:1b:f9:7c:56:d4:ec:
                    e0:1d:1b:da:a5:b1:8b:b2:10:3b:b0:61:7b:de:9e:
                    f5:1c:68:73:9b:60:5a:92:7b:c3:8c:a1:ea:e6:72:
                    85:c2:9d:05:33:91:62:61:aa:ef:b2:b2:d2:58:1a:
                    e3:2c:3d:cd:f9:a0:4d:26:d4:ad:bd:34:ed:3f:9f:
                    9a:a5:65:6c:82:e6:3c:19:9d:45:d4:8a:b3:b4:91:
                    52:c2:1d:84:90:18:ab:48:19:ab:00:f8:3f:02:59:
                    5a:2f:b6:16:b8:09:9b:95:a4:46:45:b2:74:2f:86:
                    de:da:04:ea:a7:99:eb:be:6e:18:1b:cb:3a:34:b1:
                    02:a9:8e:fb:eb:15:d0:fc:21:4d:64:14:9c:fe:41:
                    98:ec:fe:ca:e7:71:09:87:ab:81:4b:2b:ce:9b:2f:
                    fd:00:d5:bf:5d:6d:44:45:39:bf:b1:99:51:77:e6:
                    b6:cf:48:cd:a1:d9:b3:84:23:a8:ad:96:38:21:0c:
                    05:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8F:28:DC:8D:84:C5:F6:9D:F9:D2:79:1A:FC:F6:E6:CF:32:E1:58
            X509v3 Authority Key Identifier:
                keyid:27:83:79:03:50:87:0F:DB:5B:26:74:BC:61:C8:D8:FD:62:D7:71:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4N5A1CHD9tbJnS8YcjY_WLXcZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:e9:ca:db:3e:bd:ea:49:da:fd:2d:11:36:76:9e:74:c7:60:
         f3:fa:69:64:43:1a:48:6d:b0:99:5c:d3:04:17:8e:4d:4e:32:
         3f:9b:e4:29:b4:26:91:11:21:6a:41:e3:13:69:ab:dc:99:18:
         33:c3:49:92:fc:23:71:b5:3b:66:39:b2:ec:6e:0d:cb:36:e4:
         e0:f4:6b:fc:34:15:f7:6d:e9:49:04:49:ce:32:f3:30:7d:09:
         7d:4d:eb:f0:0f:9f:79:d6:2b:50:c4:6b:34:a9:a6:78:66:06:
         83:05:f2:a3:1f:90:55:1f:01:59:23:71:a7:17:cc:e1:52:0d:
         a3:35:88:12:f9:f6:96:db:20:91:a8:7a:7e:b6:31:3e:57:5b:
         86:da:5e:bc:53:99:2c:c9:12:11:3f:cc:17:94:61:64:96:dd:
         41:9b:26:6c:a0:29:04:48:83:a1:63:11:e6:b7:f0:75:6b:aa:
         27:5a:9c:c7:64:b8:0e:8c:d6:63:1d:34:3d:d0:91:c5:d6:c9:
         6a:e1:b0:d9:57:60:9d:8c:e6:91:8b:6c:68:22:a1:fe:3e:4b:
         8e:70:2d:2e:24:b0:52:6d:6a:68:86:72:fc:c5:3d:e2:b6:25:
         19:b9:f3:fd:b6:24:57:61:79:b7:e0:43:2b:69:bf:da:e2:25:
         1e:4d:3c:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw8PageLjRC8bLTVVeV2/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ODM3OTAzNTA4NzBmZGI1YjI2NzRiYzYxYzhkOGZkNjJk
NzcxOWIwHhcNMjUwOTA3MDYwMTE4WhcNMjUwOTA4MDYwMTE4WjAzMTEwLwYDVQQD
Eyg1NThmMjhkYzhkODRjNWY2OWRmOWQyNzkxYWZjZjZlNmNmMzJlMTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM0DetGDBS4nadhy/a7Q92U5511z
vreDo1/59ihN4Ns8xhn4qh5lsGOT92BkxKOfvcsPk1Cdpcaq1aLoCn+LMBqSipIb
+XxW1OzgHRvapbGLshA7sGF73p71HGhzm2BaknvDjKHq5nKFwp0FM5FiYarvsrLS
WBrjLD3N+aBNJtStvTTtP5+apWVsguY8GZ1F1IqztJFSwh2EkBirSBmrAPg/Alla
L7YWuAmblaRGRbJ0L4be2gTqp5nrvm4YG8s6NLECqY776xXQ/CFNZBSc/kGY7P7K
53EJh6uBSyvOmy/9ANW/XW1ERTm/sZlRd+a2z0jNodmzhCOorZY4IQwF6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWPKNyNhMX2nfnSeRr89ubPMuFYMB8GA1UdIwQY
MBaAFCeDeQNQhw/bWyZ0vGHI2P1i13GbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjRONUExQ0hEOXRiSm5TOFljallfV0xYY1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kZDg4ZTItZDdkOS00NjdmLWI1YjQt
ZWNjNWZiYTA4MzQwLzEvSjRONUExQ0hEOXRiSm5TOFljallfV0xYY1pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kZDg4ZTItZDdkOS00NjdmLWI1YjQtZWNjNWZiYTA4MzQw
LzEvSjRONUExQ0hEOXRiSm5TOFljallfV0xYY1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+nK2z69
6kna/S0RNnaedMdg8/ppZEMaSG2wmVzTBBeOTU4yP5vkKbQmkREhakHjE2mr3JkY
M8NJkvwjcbU7Zjmy7G4Nyzbk4PRr/DQV923pSQRJzjLzMH0JfU3r8A+fedYrUMRr
NKmmeGYGgwXyox+QVR8BWSNxpxfM4VINozWIEvn2ltsgkah6frYxPldbhtpevFOZ
LMkSET/MF5RhZJbdQZsmbKApBEiDoWMR5rfwdWuqJ1qcx2S4DozWYx00PdCRxdbJ
auGw2VdgnYzmkYtsaCKh/j5LjnAtLiSwUm1qaIZy/MU94rYlGbnz/bYkV2F5t+BD
K2m/2uIlHk08QQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:36 2025 by rpki-client