Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft
File:                     9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft (raw, json)
Hash identifier:          RPbgvFjvHQJ4KlgAUAMInJ0vod5M3zQ3w3Sq+YXRNwg=
Subject key identifier:   94:AC:B4:E8:81:9A:C1:74:CC:AC:63:68:B7:34:0D:E1:49:B8:04:F1
Authority key identifier: F6:38:7E:90:C4:FE:56:EE:1B:63:94:6F:E4:D4:63:1C:60:87:E7:ED
Certificate issuer:       /CN=f6387e90c4fe56ee1b63946fe4d4631c6087e7ed
Certificate serial:       01989034A35E3355F7ACDC0D863BBBEB49D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft
Manifest number:          06EA
Signing time:             Sat 09 Aug 2025 19:00:25 +0000
Manifest this update:     Sat 09 Aug 2025 19:00:25 +0000
Manifest next update:     Sun 10 Aug 2025 19:00:25 +0000
Files and hashes:         1: 9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl (hash: +OlHGfj8WuD/JCcmt5CnUBZm0q8chbzj+2l+BtCaMf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:34:a3:5e:33:55:f7:ac:dc:0d:86:3b:bb:eb:49:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6387e90c4fe56ee1b63946fe4d4631c6087e7ed
        Validity
            Not Before: Aug  9 19:00:25 2025 GMT
            Not After : Aug 10 19:00:25 2025 GMT
        Subject: CN=94acb4e8819ac174ccac6368b7340de149b804f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ee:49:a1:2f:19:a4:3f:3d:50:ab:9c:a5:d3:
                    59:1a:b6:2f:2c:4f:ab:f1:ef:0e:36:97:3c:e1:3e:
                    9b:01:f0:38:81:ab:66:1d:30:73:f5:26:1e:ea:42:
                    67:24:80:2a:81:03:d6:f8:75:13:48:f4:8f:2f:5b:
                    ce:24:a2:d8:58:d9:7e:59:a3:95:75:9b:f8:41:d8:
                    6b:d7:b2:c4:bc:d2:f7:de:8b:58:08:3f:f7:3b:7a:
                    f1:9d:24:55:85:34:3e:5f:04:34:9a:f7:1c:88:9f:
                    ef:4d:ea:13:58:c6:cd:84:be:cc:df:2d:89:c7:d1:
                    f3:e1:84:7d:db:82:69:75:49:4c:a8:7d:9b:4e:fb:
                    78:fe:ed:20:3b:07:60:eb:68:51:15:34:be:e6:23:
                    36:ec:62:ee:79:1f:31:b7:c1:a8:e1:63:4b:a3:20:
                    90:08:6f:29:b1:9e:f2:f4:d9:22:ea:60:5f:e3:e6:
                    63:a3:d9:b1:41:56:4d:73:ba:19:c7:83:78:98:ea:
                    c6:56:ef:32:36:b1:72:43:ac:46:9f:31:96:12:3b:
                    ef:e3:c9:b5:9f:5e:5e:b5:5d:57:c2:f5:17:e4:bb:
                    06:c5:5e:2b:13:33:d8:2e:b6:84:39:a2:18:26:ed:
                    ae:a8:b6:00:eb:a7:83:28:28:26:7c:84:88:5c:5c:
                    a9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:AC:B4:E8:81:9A:C1:74:CC:AC:63:68:B7:34:0D:E1:49:B8:04:F1
            X509v3 Authority Key Identifier:
                keyid:F6:38:7E:90:C4:FE:56:EE:1B:63:94:6F:E4:D4:63:1C:60:87:E7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:6c:43:42:89:bd:db:31:9e:3a:f0:a4:19:ea:60:88:65:8e:
         88:67:c8:e3:6a:31:eb:34:85:71:85:ae:39:cf:a0:fc:c5:ae:
         d4:0e:d0:9f:f4:e9:32:48:1a:ad:02:ae:35:29:13:5b:72:64:
         84:be:cb:a4:88:69:49:9e:b3:d1:f8:69:32:b1:10:7a:a8:3d:
         fd:53:f5:f9:43:cc:72:88:7f:30:5e:f5:26:0c:c3:bb:57:4b:
         5b:b5:48:10:e8:3f:24:22:07:1a:a3:88:46:01:90:12:27:ae:
         2d:b1:17:56:62:91:45:8f:4b:b7:3d:92:9b:c3:ee:08:bb:be:
         26:d2:f7:ce:1a:7c:f5:63:0d:c9:1f:ff:5f:78:fd:ac:fe:bf:
         7f:64:b7:9a:a8:e2:78:bf:7c:20:86:d5:3d:18:45:20:dc:25:
         f3:49:ee:24:d6:8b:6b:43:e4:62:30:4e:ae:ce:6f:de:ac:10:
         c6:4d:fd:c8:dc:59:7e:04:4d:7d:2d:ce:aa:17:f9:e2:54:32:
         8d:fb:03:18:63:53:7a:e5:0d:a0:cf:78:ac:cf:70:be:58:af:
         fd:da:06:33:cc:47:a2:67:35:23:d8:e6:a8:74:69:cd:f3:24:
         1d:9a:a7:66:68:cb:09:3f:bf:44:bf:5d:c5:6e:91:ea:be:f9:
         12:9c:d7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:42:24 2025 by rpki-client