Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
File:                     9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft (raw, json)
Hash identifier:          ijl1H+YSk66wOGs0AFjD8qQIaFhXtSmKkETa/mDR/rs=
Subject key identifier:   62:79:E1:B2:D0:03:65:4C:9B:32:D6:34:06:74:6D:31:AB:EB:8E:37
Authority key identifier: F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
Certificate issuer:       /CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Certificate serial:       01976BF43CAC6D77C624D4ADEF083397A8D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
Manifest number:          15A7
Signing time:             Sat 14 Jun 2025 01:00:57 +0000
Manifest this update:     Sat 14 Jun 2025 01:00:57 +0000
Manifest next update:     Sun 15 Jun 2025 01:00:57 +0000
Files and hashes:         1: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl (hash: CbzTduFHmaPpgilG8EN6NLLiXpB9R55xG77LCBewqXY=)
                          2: Rq5qhuZJL_f0RiemcCNo1CeBLZg.roa (hash: QjHh1mk02MSSyzdrymnZqYJyNlwN9P8BOUPtrzzXBu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f4:3c:ac:6d:77:c6:24:d4:ad:ef:08:33:97:a8:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
        Validity
            Not Before: Jun 14 01:00:57 2025 GMT
            Not After : Jun 15 01:00:57 2025 GMT
        Subject: CN=6279e1b2d003654c9b32d63406746d31abeb8e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4d:51:e4:0e:90:c2:b1:89:6b:6c:0b:8e:11:
                    1c:c1:3d:25:cc:27:81:28:a1:43:4d:0d:4b:5d:60:
                    26:c5:40:5b:33:c1:50:55:f0:6a:e9:14:69:15:a4:
                    43:d5:dc:d9:3b:07:9e:c4:ae:a5:24:c1:75:ae:b4:
                    af:fd:7e:98:11:fc:61:0c:ae:eb:24:42:53:94:53:
                    c8:07:de:ea:c9:ea:1d:a9:42:b8:69:f5:a6:35:62:
                    51:af:20:17:96:df:27:c0:73:2f:68:96:b6:ba:35:
                    c2:e4:3f:87:8f:43:5d:13:b4:09:b4:d4:e0:17:34:
                    7d:74:94:b4:f1:49:fc:df:65:a0:7d:5e:b1:bc:c5:
                    f4:37:c5:41:da:c7:d5:d2:c4:fb:ec:ec:7b:d1:50:
                    3d:48:1b:57:bc:da:1c:fd:9b:98:d2:ea:c6:30:30:
                    8c:0e:34:36:f3:1b:29:42:3c:33:80:b0:9a:1a:06:
                    84:75:ef:0f:e9:9d:3f:20:12:9e:60:f1:fc:e7:42:
                    5a:73:9a:e5:cc:59:b9:7f:5d:a6:d1:e6:82:9f:8c:
                    50:35:48:8b:b2:50:6c:e5:ec:31:85:4b:e9:de:5d:
                    0a:04:b7:b8:c5:d6:b8:24:b7:37:84:35:e3:07:7a:
                    f9:6b:a9:fc:a3:04:80:32:9b:6a:53:89:b5:66:0c:
                    79:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:79:E1:B2:D0:03:65:4C:9B:32:D6:34:06:74:6D:31:AB:EB:8E:37
            X509v3 Authority Key Identifier:
                keyid:F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:2a:91:f3:b5:fe:9e:11:d6:74:1f:ea:44:ec:21:fb:58:aa:
         43:38:b2:09:80:c7:0f:c7:9b:98:10:df:df:98:4b:a3:58:37:
         48:f0:55:85:09:75:78:25:b2:a3:67:d4:bb:ab:3d:21:13:6d:
         1c:cb:a5:88:03:99:df:47:5a:2c:02:66:4c:9a:72:c1:8f:0c:
         de:85:de:70:11:45:57:b5:9f:c4:6d:81:1f:09:94:e2:9d:a8:
         df:36:c9:26:f9:35:5c:11:89:aa:62:ad:06:54:41:86:bb:d9:
         1d:a6:bf:3b:2f:1f:37:ee:b0:08:23:40:97:25:8f:e1:e0:d0:
         b4:c4:b8:9d:97:5e:f8:35:05:3f:df:fe:9b:03:15:74:b8:02:
         1e:5c:13:6f:6c:f4:cc:3a:1d:7c:42:be:1d:b3:da:1b:aa:84:
         b1:19:d7:dc:ba:50:43:7e:1e:5a:a0:81:f4:aa:bd:d6:af:32:
         ec:a4:70:5d:1f:ee:fa:60:7c:8c:2d:6b:85:9d:2d:18:f8:fc:
         fc:e2:76:e6:3a:c9:7e:76:45:b2:c6:88:6e:7b:6b:9c:ba:6f:
         04:f2:34:1d:e2:50:61:6d:db:73:18:c3:24:0c:e6:01:16:23:
         e9:41:c6:98:f9:da:4e:78:9c:72:be:04:66:db:c6:c9:57:48:
         7a:10:97:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:50:39 2025 by rpki-client