Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
File:                     9URgWW1tUyQB3jE9-JA2blN21gI.mft (raw, json)
Hash identifier:          wxYNSjsI44n7R2Ps75lR2poZagOL9jm3wkT38LnhYdY=
Subject key identifier:   2F:89:2E:89:AA:BC:D8:A6:1B:F5:8C:28:EC:8C:37:A2:42:1D:BF:A8
Authority key identifier: F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
Certificate issuer:       /CN=f54460596d6d532401de313df890366e5376d602
Certificate serial:       019786C647F5BA5AB9546E9604070914150B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
Manifest number:          056E
Signing time:             Thu 19 Jun 2025 06:00:30 +0000
Manifest this update:     Thu 19 Jun 2025 06:00:30 +0000
Manifest next update:     Fri 20 Jun 2025 06:00:30 +0000
Files and hashes:         1: 9URgWW1tUyQB3jE9-JA2blN21gI.crl (hash: sByLf3zR1LiWoSZN+Y8n+PWRw6yek1U3ic0cgd8Kk2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:86:c6:47:f5:ba:5a:b9:54:6e:96:04:07:09:14:15:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f54460596d6d532401de313df890366e5376d602
        Validity
            Not Before: Jun 19 06:00:30 2025 GMT
            Not After : Jun 20 06:00:30 2025 GMT
        Subject: CN=2f892e89aabcd8a61bf58c28ec8c37a2421dbfa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ae:d6:56:39:64:1a:19:73:b3:6b:f3:02:f4:
                    0c:a7:d1:9c:54:dd:dd:15:b9:3c:82:bc:17:ea:3c:
                    ce:61:8a:2a:9e:f2:aa:04:70:4c:ea:ce:f5:77:f9:
                    c3:c8:20:23:51:13:37:6b:31:db:c5:00:5b:bb:ed:
                    7a:c1:13:1d:92:e9:82:7b:f6:31:f1:47:88:7f:be:
                    88:41:eb:90:78:f1:a4:e3:c1:5d:a4:7c:1b:f1:0f:
                    bf:ac:4c:50:1c:77:2e:5a:55:c5:b9:c3:67:29:00:
                    e2:6d:15:3d:2c:82:77:52:b8:e5:6d:49:32:a8:be:
                    6f:cf:6a:5f:11:9b:98:7c:e0:a2:a2:c9:81:8d:8d:
                    ef:ee:90:41:69:ed:77:4a:e6:a2:95:50:71:0d:75:
                    58:94:97:a1:dc:68:f9:10:41:ff:d9:5b:92:5f:64:
                    8b:65:26:5a:ea:40:ef:66:cb:e8:0b:86:b6:8c:de:
                    7c:56:7a:6a:9f:47:d7:92:7a:cc:57:21:97:d5:9b:
                    30:b9:57:d1:d5:52:59:49:cc:1e:a6:41:5a:57:0b:
                    94:19:ce:6c:51:f8:6b:11:92:50:50:ed:3a:b8:2e:
                    7a:ee:91:8b:65:ce:2c:61:14:27:78:b2:52:0c:a4:
                    89:44:f9:64:5c:2e:7b:3b:1c:13:d1:85:76:07:44:
                    95:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:89:2E:89:AA:BC:D8:A6:1B:F5:8C:28:EC:8C:37:A2:42:1D:BF:A8
            X509v3 Authority Key Identifier:
                keyid:F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:84:4a:2a:3f:dd:43:f7:a4:4b:e1:51:e0:a4:21:9f:00:20:
         b2:5e:c8:61:82:84:7f:9d:01:f5:6f:4d:35:bb:59:7d:79:6c:
         f1:e6:46:17:f1:5d:46:ee:fd:01:55:d5:02:9e:d4:f2:6a:04:
         2b:a8:39:dc:44:93:e4:9d:79:4a:fe:64:9f:dc:09:f3:f7:0e:
         34:f1:51:46:7d:52:a3:e8:57:0b:33:c8:db:6a:e2:97:2c:b1:
         ac:5b:63:a7:9c:55:39:a5:a2:0c:96:be:34:db:e8:80:87:b9:
         1b:b7:de:0f:b1:64:c1:a9:ba:88:48:f7:50:f3:4f:c3:0e:70:
         19:21:47:06:60:93:a9:e5:d1:76:cb:12:5d:5d:b9:2f:68:54:
         37:aa:c4:aa:59:b7:e2:78:3f:dc:27:ee:04:32:87:9b:a2:ef:
         34:ec:e3:35:21:37:2f:3b:3b:96:ee:b6:74:db:28:02:1f:15:
         dd:4b:89:4a:5e:6a:74:ea:47:56:bf:62:60:c8:bf:d4:5f:8a:
         07:ed:c4:9d:de:11:71:f2:5c:7f:7b:70:8a:2a:06:11:ed:ef:
         2c:23:ab:76:40:d5:f9:36:a6:75:94:91:fc:87:19:48:76:96:
         ca:96:c4:8d:d1:be:4e:3f:50:2d:95:ed:75:5d:77:8d:3f:d2:
         b0:e9:38:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:08:48 2025 by rpki-client