Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
File:                     1-c0pgMHHi89rubgKB5IFiwvK7Us.mft (raw, json)
Hash identifier:          J1+lrzqxyfYTaeR1rMK15eaR6Ix6OfugTRLrKp8wXPs=
Subject key identifier:   42:5C:97:11:C7:49:12:CF:8A:E9:A0:A6:97:7F:2D:1B:45:44:39:71
Authority key identifier: F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B
Certificate issuer:       /CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b
Certificate serial:       01976EBE32FE54879524A4FE2FD9ACB929A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
Manifest number:          154E
Signing time:             Sat 14 Jun 2025 14:00:48 +0000
Manifest this update:     Sat 14 Jun 2025 14:00:48 +0000
Manifest next update:     Sun 15 Jun 2025 14:00:48 +0000
Files and hashes:         1: 1-c0pgMHHi89rubgKB5IFiwvK7Us.crl (hash: v2ZRdJX6Y3zks9UaPP2/HEfmzeqB3BZke0/dUqLVjGM=)
                          2: DBBkmAjtiZvJk178YbVOfqGzI3Y.roa (hash: 8eJVP5XAdO67of9omWg+boW49giOURgUcnG9ZjC9lgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:be:32:fe:54:87:95:24:a4:fe:2f:d9:ac:b9:29:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b
        Validity
            Not Before: Jun 14 14:00:48 2025 GMT
            Not After : Jun 15 14:00:48 2025 GMT
        Subject: CN=425c9711c74912cf8ae9a0a6977f2d1b45443971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4b:41:e7:83:b7:f6:90:0d:84:5b:b3:83:1f:
                    d8:aa:00:d6:6c:79:36:15:94:56:19:0f:c0:95:ad:
                    98:8d:a2:c0:86:62:a0:5c:96:e3:0f:c1:a8:32:a7:
                    cc:8c:14:fc:32:e7:4a:37:af:df:cb:23:28:5e:b2:
                    fe:ef:a3:03:f4:38:d1:c0:14:38:36:e3:29:6f:ef:
                    32:7b:e3:28:7d:f5:75:4e:14:b9:0a:e8:b6:c5:58:
                    06:61:03:90:99:ba:cd:20:46:c4:4d:00:1d:71:f1:
                    8f:ab:89:35:7e:b8:cb:f2:98:11:33:50:81:36:8f:
                    fc:1b:d3:59:98:ad:3b:b5:ec:f0:0b:2d:47:f4:3c:
                    3e:ea:19:e2:2f:b6:f1:d5:09:4f:10:fe:08:b1:b9:
                    9d:0f:67:db:1a:5f:54:ea:8f:6e:f7:a3:4e:17:6d:
                    5c:f3:ad:bf:09:a0:0d:1a:b9:ea:dd:62:18:ad:31:
                    bb:8c:06:5d:73:b5:6b:64:de:ec:9d:8c:d7:ad:41:
                    04:b7:05:59:ac:74:1a:91:e9:ea:e2:b4:6e:dc:66:
                    63:d3:7b:d7:0e:99:dc:31:cb:30:e9:65:09:c7:35:
                    98:6d:52:04:b2:08:b2:1c:61:30:4d:02:a5:15:27:
                    67:ce:ae:77:8d:41:9d:ab:c3:24:df:65:9e:7d:57:
                    0d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:5C:97:11:C7:49:12:CF:8A:E9:A0:A6:97:7F:2D:1B:45:44:39:71
            X509v3 Authority Key Identifier:
                keyid:F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f3:25:d7:0d:a5:aa:13:6f:6d:6c:a1:d4:bc:5f:ae:4d:6a:
         f0:ae:5a:66:0e:23:5b:58:e1:04:b5:22:29:62:76:39:7c:ec:
         f8:d8:67:2e:f7:e5:81:48:0a:83:dc:0d:cd:c3:96:ce:eb:dc:
         f5:68:24:74:ad:31:ff:c9:73:cc:36:fd:23:d3:5b:c4:ad:da:
         1d:84:14:14:74:5d:1a:0b:2b:84:92:02:33:c8:86:a1:fd:02:
         c1:4d:b8:f1:41:59:94:97:0e:5b:7e:51:13:8c:5c:c0:7a:3c:
         75:96:67:85:ed:76:bb:1d:60:c3:f2:94:fa:09:d4:e5:e5:45:
         22:28:f1:c1:32:bc:7e:3b:1d:67:ec:92:d5:ce:09:ae:81:da:
         20:03:21:f4:04:12:a7:e5:f6:61:79:53:e2:5c:ee:8d:4d:63:
         8c:33:20:40:8d:dc:b5:7c:d7:56:50:49:08:c1:79:f4:92:d8:
         77:33:2f:a4:83:8e:bb:7c:75:8e:d0:13:9b:17:e8:ea:e9:42:
         91:d6:49:e0:af:b7:04:5a:73:93:eb:b0:c8:dc:67:f7:f6:05:
         63:02:6a:eb:6f:ee:2e:4c:5e:f3:f2:30:37:0d:1c:10:ec:e9:
         7e:82:32:69:47:bc:b0:d6:80:0f:f4:d2:5b:ed:2d:bc:8c:2a:
         2f:c4:c8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:01:21 2025 by rpki-client