Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
File:                     CfJr1vRoN-Cv2Vidh478PsiWfwI.mft (raw, json)
Hash identifier:          nvroDf+W8zpaCVrmqpfZulFU2NYi0dxcexS87FgwuB4=
Subject key identifier:   02:90:F6:84:28:04:F5:CA:04:31:B5:A2:61:32:6C:5E:D9:90:3E:66
Authority key identifier: 09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
Certificate issuer:       /CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Certificate serial:       01976A05E2FA7F4020BDB8142874A5BEE464
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
Manifest number:          12D5
Signing time:             Fri 13 Jun 2025 16:01:00 +0000
Manifest this update:     Fri 13 Jun 2025 16:01:00 +0000
Manifest next update:     Sat 14 Jun 2025 16:01:00 +0000
Files and hashes:         1: CfJr1vRoN-Cv2Vidh478PsiWfwI.crl (hash: fLYJdsZ2GLyfEHB9e9DvXk65XBimGm+dTkmWIEWIF8U=)
                          2: bPhuRniXhi6v8miKtxoaZnEn00A.roa (hash: xSundNXAHWzuOj0WfGOEO/7NeCRZEJh+UG6019ph0YU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:e2:fa:7f:40:20:bd:b8:14:28:74:a5:be:e4:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
        Validity
            Not Before: Jun 13 16:01:00 2025 GMT
            Not After : Jun 14 16:01:00 2025 GMT
        Subject: CN=0290f6842804f5ca0431b5a261326c5ed9903e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:30:b6:b0:27:b2:81:19:73:51:48:34:99:0d:
                    75:4e:33:0b:e0:6b:d2:a7:9c:af:8b:e7:46:29:e1:
                    40:ce:49:0b:3c:11:1f:0a:00:57:18:02:1b:86:59:
                    06:22:1c:dc:71:51:68:26:e7:98:7d:4b:3b:ef:65:
                    f7:f4:10:af:a4:4a:a7:d6:d8:c2:26:45:e2:5a:ea:
                    c0:06:eb:73:bd:5c:85:15:6b:58:bb:2d:c0:ac:ac:
                    7d:6a:e0:40:68:62:b7:3d:78:6e:17:87:8a:49:7c:
                    c8:47:59:09:71:86:14:60:fa:ba:52:33:24:4d:c2:
                    e2:e0:68:68:0a:9c:69:d0:1b:29:71:26:65:ef:2b:
                    9e:be:38:6a:6c:38:f6:82:db:df:c7:5c:07:4b:d9:
                    2d:49:4f:ae:88:0a:c6:37:0e:1e:ae:f1:a2:f1:cd:
                    3c:ce:17:e8:ee:d4:31:f8:7b:f8:97:9f:7a:16:84:
                    30:fc:6a:90:d9:ec:87:83:62:45:11:3b:fb:28:c7:
                    4c:75:5a:08:65:99:f3:68:68:43:ca:1e:ff:d6:73:
                    5f:5c:de:47:8f:a0:69:34:78:75:b3:35:0e:6d:d7:
                    e7:4a:1b:e7:b0:98:d1:3f:be:4e:1d:ac:87:97:eb:
                    71:65:0b:b4:3f:48:b8:e6:68:4f:a0:3f:0b:16:4b:
                    d0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:90:F6:84:28:04:F5:CA:04:31:B5:A2:61:32:6C:5E:D9:90:3E:66
            X509v3 Authority Key Identifier:
                keyid:09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:f8:13:43:9b:90:47:53:76:e1:0b:96:27:ba:bf:6a:ce:cd:
         87:c1:ff:d4:81:d5:17:c4:76:32:4e:80:8a:bc:aa:43:f0:c5:
         e9:0d:fa:2f:4a:94:98:2f:3c:33:1a:70:de:d2:48:69:47:1a:
         eb:e4:f0:9b:bc:f1:7c:d4:f9:3c:4f:c5:89:da:a2:ed:5d:1b:
         b1:3c:19:f0:31:ae:7a:3c:94:93:0e:a9:84:0c:87:05:c9:d7:
         96:2e:cc:da:cf:7a:7d:85:27:d2:6b:4b:12:70:7f:92:d2:41:
         aa:e6:4e:37:bd:38:c7:96:7c:da:e3:f1:87:80:26:bd:d2:11:
         0d:14:ab:b9:5e:22:1b:1c:4b:19:19:44:c8:2b:0f:f0:63:1d:
         a7:90:9a:cd:87:0f:7c:c0:c1:78:26:27:78:8f:51:9c:b7:28:
         61:65:ac:3d:25:fb:35:91:eb:a3:85:c0:76:b0:44:e4:7a:43:
         d6:fd:1f:da:56:22:8c:f3:fb:f5:25:b3:9b:55:21:45:40:bf:
         83:f9:9a:1d:65:03:07:be:5f:a6:62:11:44:f0:16:56:34:d9:
         fc:8d:57:56:6c:8a:30:40:f7:d3:0c:90:c8:0f:cf:62:cc:cb:
         31:76:9f:cb:b6:66:ac:21:3e:42:c5:49:28:26:7f:80:d2:c8:
         86:ae:a0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:57:39 2025 by rpki-client