Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
File:                     9EDl66L4v8j-j-VsyIpCiWUjkLo.mft (raw, json)
Hash identifier:          YSqixDYKMG0Uk3VM5wyIc2gDIF7PdQFUEk7tC6Z4JNM=
Subject key identifier:   90:96:44:55:FC:49:90:E7:41:BE:58:D0:B9:BB:88:86:8A:CE:90:73
Authority key identifier: F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA
Certificate issuer:       /CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
Certificate serial:       0197684E29DD4D792984515097BA9BB0A3E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
Manifest number:          0DA9
Signing time:             Fri 13 Jun 2025 08:00:42 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:42 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:42 +0000
Files and hashes:         1: 9EDl66L4v8j-j-VsyIpCiWUjkLo.crl (hash: v2MQHV86EmsscFVKfFFddtA3CSlVYGWL67qPsEDRa2U=)
                          2: XZCD2ozMadKu5ppRclcjA81adQM.roa (hash: 5bgsDhtiRsAZtWQwU54/e6IL5DKPg91iF0EEc9dqPDs=)
                          3: cHDBlBO6N0ca9YSLdLpALyyHWaI.roa (hash: o2xngpUpZnDRvPeXgXjlZjCICvbC/BE21jFOWmBqYGA=)
                          4: iUk2qAaYanuhC0yHx75ofbbtDfw.roa (hash: 6NTe6e0s9TjAs580GSrWi1bA7imMCeeLHXSr5hAoGzk=)
                          5: mTa0tBmnc-EZQRSpAfUf53n7dTc.roa (hash: 1CRclX1Yx0St5CAEJDWGoq4O3N6WotLgVbncs/lahzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:29:dd:4d:79:29:84:51:50:97:ba:9b:b0:a3:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
        Validity
            Not Before: Jun 13 08:00:42 2025 GMT
            Not After : Jun 14 08:00:42 2025 GMT
        Subject: CN=90964455fc4990e741be58d0b9bb88868ace9073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b4:ce:92:23:e9:08:e3:de:95:51:fa:d6:4c:
                    0c:a6:b1:8e:0e:29:40:32:9d:1b:a5:25:6b:94:9f:
                    9e:e1:32:8f:a9:27:b7:94:9f:12:d4:1b:bf:3d:72:
                    74:8d:dc:8b:68:98:f3:cf:2f:2a:93:70:19:72:f0:
                    f1:2f:d3:eb:f3:2f:50:45:91:c4:ec:15:63:2a:26:
                    82:72:c8:74:5d:44:35:aa:74:6d:25:7b:70:8a:cd:
                    75:a9:84:d6:55:7b:51:fb:db:46:67:ff:00:59:b4:
                    1f:e0:37:c1:ee:5c:16:56:d9:67:4e:c5:36:2e:b9:
                    d0:4b:e2:59:2a:02:0a:2a:80:4a:0e:45:d6:e7:07:
                    5f:da:4e:7c:f5:29:a4:59:66:5d:e0:0b:71:92:a8:
                    ca:fe:53:d4:24:07:98:4c:17:b0:76:62:2a:12:8c:
                    26:f1:74:bc:64:47:7c:70:5e:d7:71:eb:c7:7d:22:
                    33:58:91:ca:8c:b2:e1:0d:35:b3:8d:db:e4:4a:2e:
                    1b:18:fb:95:ad:4b:c1:58:65:80:bb:bc:28:22:a8:
                    42:11:5b:8b:fb:82:ba:29:36:50:be:47:14:21:91:
                    7b:fe:93:d3:8f:74:b0:61:4a:7d:58:99:ce:ce:71:
                    7e:61:ee:17:24:7f:1a:73:f0:51:b3:23:99:be:de:
                    15:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:96:44:55:FC:49:90:E7:41:BE:58:D0:B9:BB:88:86:8A:CE:90:73
            X509v3 Authority Key Identifier:
                keyid:F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:e9:af:80:9c:b9:1f:90:52:c5:9a:18:05:2a:25:e2:d1:c5:
         c8:91:c9:d0:12:b4:85:14:36:62:d3:cf:ab:d4:dd:9f:84:1c:
         c2:be:d3:03:63:4c:cb:94:50:3b:d0:04:c5:bf:71:de:9c:bc:
         2d:ba:28:0e:75:54:ad:7f:ee:2c:e3:f5:e3:8c:91:5c:b9:5b:
         f5:bb:da:cf:4d:96:b6:27:47:cd:fa:59:51:17:5c:7f:7d:8d:
         72:1b:c8:78:d9:d8:b3:b3:03:84:78:cc:4f:ea:f8:55:a7:1d:
         b0:04:ef:fe:94:ff:64:cf:67:01:d2:16:3f:97:76:3f:39:3e:
         13:0a:4d:1b:a2:1b:23:e0:e9:6b:55:8a:81:55:a9:04:dc:fa:
         8e:a0:ad:1c:05:89:58:89:74:ca:03:94:a2:24:9e:4e:ed:3b:
         a8:92:9c:71:b4:60:62:70:65:13:12:ff:5f:e3:89:00:38:31:
         64:e4:65:9d:65:33:7e:6a:bf:f5:f3:1e:a6:7e:8b:84:2a:8b:
         44:38:4d:7e:8f:e5:cb:6f:8c:15:26:49:f5:4b:cb:64:63:59:
         47:4d:09:f1:c3:5c:25:7e:d1:7c:1c:6d:71:54:3c:ed:bd:2b:
         b8:5d:b2:63:c1:9e:39:4d:99:7b:c1:41:22:28:a2:31:e5:4c:
         65:65:f6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:51 2025 by rpki-client