Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
File:                     9keQtSf6QLqj8ts_oqFL-UzSgv8.mft (raw, json)
Hash identifier:          YulEBrOJFz1MUkQv3tw0Q8OwmG4hH2dyz78qRp7N/BM=
Subject key identifier:   AC:03:69:A1:0D:BE:49:79:3F:AB:EE:B3:0D:7D:DB:0E:10:E8:81:1A
Authority key identifier: F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF
Certificate issuer:       /CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff
Certificate serial:       0197684E54D9CA4C6925332DE2A243CEA30D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
Manifest number:          02B5
Signing time:             Fri 13 Jun 2025 08:00:53 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:53 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:53 +0000
Files and hashes:         1: 9keQtSf6QLqj8ts_oqFL-UzSgv8.crl (hash: 9iDFWFBrnBb5umf2ncNU1P3NPlaJm6FgY+ievuXka1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:54:d9:ca:4c:69:25:33:2d:e2:a2:43:ce:a3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff
        Validity
            Not Before: Jun 13 08:00:53 2025 GMT
            Not After : Jun 14 08:00:53 2025 GMT
        Subject: CN=ac0369a10dbe49793fabeeb30d7ddb0e10e8811a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:43:b6:12:d5:18:64:fb:d0:a5:a9:36:77:e7:
                    bf:75:5c:4f:b3:42:c4:2d:da:1a:37:e3:90:8d:27:
                    7b:03:11:bf:f6:c0:c9:19:ee:fe:87:21:0e:4d:14:
                    46:33:be:c2:07:6c:cc:d3:93:50:8e:fa:45:cc:2c:
                    f1:9b:61:de:da:be:47:e3:17:b8:ca:d5:8f:74:cf:
                    00:a2:54:33:40:41:c7:a1:39:cd:6e:ac:0e:34:19:
                    26:68:d6:32:7c:d0:5e:18:1a:fe:b3:98:bc:e2:5d:
                    f5:c1:e4:9f:c0:51:96:ce:4d:46:71:13:28:0a:95:
                    32:e1:0c:6b:54:74:2f:38:24:53:56:81:e7:73:ea:
                    6f:f7:4d:f5:cd:e0:a4:07:80:3c:d5:4e:50:1b:82:
                    fb:fd:df:26:f8:07:53:95:8d:48:1a:66:fc:a1:79:
                    83:d9:b8:24:f1:c2:af:0b:df:d7:66:d5:19:ae:89:
                    35:f7:1b:9d:c2:13:52:28:8d:a1:31:04:26:42:f5:
                    04:28:3d:d4:1d:77:e5:4a:06:b2:c9:5e:48:74:60:
                    77:a8:4c:90:16:00:27:fd:2d:7e:a3:83:92:70:70:
                    b9:cc:25:c0:f3:c6:a7:4e:85:d4:29:f3:2e:3b:10:
                    df:6b:74:93:cf:1c:b3:5e:ee:a0:f2:d8:68:17:ef:
                    55:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:03:69:A1:0D:BE:49:79:3F:AB:EE:B3:0D:7D:DB:0E:10:E8:81:1A
            X509v3 Authority Key Identifier:
                keyid:F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:89:fd:c4:5b:8f:85:1d:c9:82:8a:da:4c:2d:a1:2a:88:63:
         42:82:f3:4c:07:1f:cf:cd:3d:f6:d0:d7:f3:cd:0c:66:0a:19:
         5a:78:f5:57:46:4b:39:8a:21:ea:fd:e7:9e:39:fe:a4:3b:10:
         b8:ff:57:a7:a8:f5:af:48:b0:55:0a:81:17:48:9d:c6:07:f7:
         5f:5f:ca:36:64:3a:f0:5d:dd:3d:db:00:be:f2:32:c1:24:4a:
         02:bb:b3:04:13:50:76:2e:2c:8e:b3:eb:3e:ee:74:6e:48:e0:
         4d:53:99:c9:09:d5:0b:ff:87:e9:b8:e5:82:6b:39:52:48:af:
         74:2d:4b:82:0a:3e:86:12:01:91:9d:f0:cb:2c:5b:67:3f:78:
         9c:70:79:76:40:48:fb:92:00:93:64:6d:3b:1f:d5:a6:2e:90:
         03:da:08:c6:9f:bf:c8:2b:c8:82:f9:5b:d1:2d:4a:8e:48:4d:
         10:fc:82:20:bd:4a:5d:87:ec:9a:ba:9a:fc:bd:36:98:a8:9d:
         79:94:29:74:01:95:ec:85:76:87:a2:25:f9:68:3f:7a:58:b5:
         37:c5:a8:23:ec:e3:75:bb:11:82:7e:9d:6e:07:0e:30:a5:c8:
         b7:19:e8:6f:eb:ce:a5:26:bd:7a:98:d3:51:f5:f5:3b:20:d2:
         f9:8f:50:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:14:02 2025 by rpki-client