Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
File:                     9Is_DGqHwEW9z_q9kA24iSvnAuE.mft (raw, json)
Hash identifier:          p+YjBix+xS3o39stMY0swfqmRkIx3jikQ21KTPZ/A20=
Subject key identifier:   28:17:2C:8E:A0:65:7A:5B:D0:6D:68:2E:CF:B4:32:A5:7B:7D:B2:0D
Authority key identifier: F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
Certificate issuer:       /CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Certificate serial:       01976BBCEFD9D9563DB145B1E84BF6F98795
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
Manifest number:          1593
Signing time:             Sat 14 Jun 2025 00:00:33 +0000
Manifest this update:     Sat 14 Jun 2025 00:00:33 +0000
Manifest next update:     Sun 15 Jun 2025 00:00:33 +0000
Files and hashes:         1: 9Is_DGqHwEW9z_q9kA24iSvnAuE.crl (hash: AF01UNXpHl0JRmlu2GL2OKu717H6A60wjV1skJ85/ds=)
                          2: AMZNY2ioL1FdTxYpQ_5_vn5xae4.roa (hash: FA95yICxP5LnzLz5ZPaXdyIPM3T30+TR7VWXzTyf+X0=)
                          3: Hg9ZafaXQ8rLTSt-HMnDH0lT2yU.roa (hash: 0HTHXkqvlWJxm74CgwKZLUkDjsOUoGNMgHyD7nKaILk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bc:ef:d9:d9:56:3d:b1:45:b1:e8:4b:f6:f9:87:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
        Validity
            Not Before: Jun 14 00:00:33 2025 GMT
            Not After : Jun 15 00:00:33 2025 GMT
        Subject: CN=28172c8ea0657a5bd06d682ecfb432a57b7db20d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b4:a6:31:bd:27:db:38:5a:06:24:79:6e:7e:
                    3f:4e:2f:ad:46:a5:33:29:1c:bf:48:52:5f:6a:37:
                    7c:47:3b:b6:c8:02:6f:d9:ff:09:14:c4:95:24:1e:
                    0f:7c:3d:3e:26:b4:a1:35:6f:7d:f1:5b:3d:de:64:
                    24:3c:86:19:d7:3b:c5:03:f5:ac:f6:5a:dd:73:f1:
                    1c:7e:1e:c7:98:2a:43:2c:3a:53:1d:33:4e:8b:d5:
                    a2:17:e3:de:16:57:ae:d8:b7:8f:f0:d5:43:ca:2b:
                    05:92:21:df:e3:4d:e8:7c:00:de:4a:46:c8:18:c9:
                    dd:b4:ed:36:c8:9d:56:ee:ac:a8:01:7e:a7:27:d0:
                    ee:9b:1a:d9:48:29:63:f9:cb:6d:ed:c1:0b:ee:a4:
                    cf:51:e4:d8:89:3d:09:a2:31:30:a2:cf:56:88:f5:
                    9f:19:78:d7:81:84:00:7d:24:66:ed:3a:ff:1b:c7:
                    11:7e:a5:28:93:98:1b:47:76:9c:53:f8:d9:97:7e:
                    2d:bb:06:79:f8:7e:22:ce:7f:10:da:42:cf:db:20:
                    d2:1f:48:6a:c5:9d:ec:8c:b8:46:2d:a4:81:45:c6:
                    de:90:59:ad:da:36:81:7f:44:82:75:f8:a9:24:cc:
                    57:88:06:ec:7f:c0:9b:34:ab:aa:5e:65:e5:97:ce:
                    e6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:17:2C:8E:A0:65:7A:5B:D0:6D:68:2E:CF:B4:32:A5:7B:7D:B2:0D
            X509v3 Authority Key Identifier:
                keyid:F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b4:99:4b:c5:16:94:bf:39:f3:f1:4a:33:e7:19:3a:6b:8e:
         aa:1f:2c:71:b7:a7:8c:bf:a0:ac:d3:27:a2:86:13:68:fb:b2:
         9f:89:95:c5:47:f3:53:e8:19:2d:7a:61:65:1d:7e:f4:f0:4a:
         be:f8:ac:aa:39:c5:5f:1c:6a:c6:0c:bb:b8:e8:13:8a:9c:7e:
         4a:ff:0c:f6:a6:33:90:c5:7f:2f:80:90:a0:0a:31:11:c7:eb:
         2a:3d:8b:9d:b4:35:01:e8:8d:93:2a:21:2d:83:98:ce:3e:37:
         19:fa:4d:a9:9e:a1:ed:e0:eb:e4:aa:b0:9f:4d:66:a3:c3:b6:
         2c:79:30:52:7f:fa:ae:b3:ee:87:9f:a7:35:25:78:ed:73:64:
         30:e5:88:ef:f0:cd:a9:2c:67:d6:6c:09:41:e5:c0:1e:d0:53:
         fa:54:88:5a:38:e4:b3:12:31:2b:0f:c3:52:83:c8:4e:56:10:
         32:a4:af:4f:73:89:e5:6b:50:2a:9c:da:b7:e5:72:b5:8a:8f:
         65:ce:10:55:0d:9c:4c:82:90:dc:5f:db:2d:a8:aa:5b:bf:fe:
         e7:39:d5:77:e2:35:20:cb:e6:76:64:71:56:a8:ad:2d:e6:81:
         55:1a:07:c8:00:7b:b3:16:6b:01:f1:74:f0:c4:eb:47:cd:f6:
         fa:dd:77:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:31:11 2025 by rpki-client