Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
File:                     8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft (raw, json)
Hash identifier:          xVyJwKTcbegUzsGRZoWtT96ifEhgQ7w2B1FQMm9Cz/4=
Subject key identifier:   C0:73:5A:21:A2:A1:45:92:AB:88:40:10:0B:3D:24:12:66:DA:30:A1
Authority key identifier: F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC
Certificate issuer:       /CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc
Certificate serial:       01976F2C2EAB7A202B659DB917C777D132FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
Manifest number:          14E9
Signing time:             Sat 14 Jun 2025 16:00:55 +0000
Manifest this update:     Sat 14 Jun 2025 16:00:55 +0000
Manifest next update:     Sun 15 Jun 2025 16:00:55 +0000
Files and hashes:         1: 8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl (hash: 0uvj8757522mvzoyDEvYKI2Wy/vEJOzhyxKpwnu1v2w=)
                          2: C3nJIzqXqtfT9J07ejsBxjCr7Es.roa (hash: 0iPZreySqxS1TmgmvlfhSgIdLiwkUUv4lfeOkL5knpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:2e:ab:7a:20:2b:65:9d:b9:17:c7:77:d1:32:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc
        Validity
            Not Before: Jun 14 16:00:55 2025 GMT
            Not After : Jun 15 16:00:55 2025 GMT
        Subject: CN=c0735a21a2a14592ab8840100b3d241266da30a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:96:a0:58:8f:13:71:e5:8b:b6:2d:cd:4f:9b:
                    5f:0e:9f:96:ac:47:31:81:f1:ed:3d:52:e7:56:fd:
                    fe:2f:d3:62:7f:2f:de:8d:12:29:26:d0:72:63:3d:
                    e7:fb:79:5b:95:6d:db:53:d5:aa:0a:16:29:87:6e:
                    11:f0:73:66:9b:36:f5:ec:23:e3:50:a7:f9:96:0f:
                    b7:9d:e1:fd:21:00:9c:39:79:cd:f2:dc:7f:7e:0f:
                    54:00:fc:39:82:f7:21:b4:75:e1:75:8d:cb:5d:e0:
                    d8:95:a5:d5:5f:41:78:97:c2:2d:4a:c8:a2:03:de:
                    58:c3:9d:a6:14:be:d5:d8:1c:65:09:e3:c8:43:c3:
                    b7:53:44:c7:42:c3:e8:c6:3d:d7:06:ea:ff:a5:37:
                    a6:7e:80:7d:a2:88:11:31:91:a7:c9:e4:f0:8e:2c:
                    a0:e8:f1:33:51:aa:28:ed:93:c9:fc:94:92:19:61:
                    6a:23:2f:ae:a0:1b:0b:0b:81:aa:1a:56:b6:23:e5:
                    8c:51:22:a8:ae:07:63:32:a1:92:16:15:87:46:24:
                    a8:36:87:e6:7d:1f:12:dc:9d:9d:98:e7:f8:ce:96:
                    ae:5c:f4:dd:b8:da:c4:f4:57:88:ab:ef:83:2e:3e:
                    20:15:ae:c7:52:61:09:76:6a:3c:bd:ac:b4:38:e8:
                    94:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:73:5A:21:A2:A1:45:92:AB:88:40:10:0B:3D:24:12:66:DA:30:A1
            X509v3 Authority Key Identifier:
                keyid:F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:fe:e1:f9:47:c2:f9:40:f3:a8:e8:8e:c3:6b:b4:68:0b:73:
         b9:f0:00:94:e5:70:74:04:85:ac:64:6a:a2:48:b5:8a:8b:1e:
         89:63:36:a5:18:c4:8f:2f:0d:3c:7f:73:ca:97:bc:5b:78:92:
         f6:b1:a2:49:b6:f3:3f:b4:49:af:d3:78:82:8f:be:fa:2b:65:
         9c:38:9c:3e:1b:4e:5e:6b:dc:0b:aa:6b:07:46:4b:08:15:71:
         a8:2f:ba:f8:63:5e:33:8f:9a:2a:02:73:6f:4a:10:dd:e4:a7:
         e8:d4:c6:96:de:d8:24:cb:ef:08:8d:c9:1a:38:cc:93:fd:e2:
         64:0c:c7:8c:e4:b2:90:78:ec:49:a8:9e:e6:28:1d:b5:42:60:
         18:30:73:ef:5a:e7:d4:93:dd:09:27:82:0b:f1:9b:d7:ca:f2:
         4c:4d:15:c3:97:56:52:f0:90:10:4e:ff:06:ad:b0:07:3c:24:
         42:b4:5e:ca:99:88:51:f1:dc:66:a3:4c:d2:91:40:8f:cf:b5:
         57:6d:37:da:c2:6a:1c:ad:3e:85:aa:c9:d6:34:2f:cb:2b:21:
         8c:ff:b3:07:69:50:32:5d:07:a1:a0:67:bc:59:49:ed:91:a4:
         88:e7:8e:7b:71:59:25:c4:eb:03:6b:38:9e:3c:b2:26:26:39:
         22:e6:70:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:51:00 2025 by rpki-client