Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
File:                     9M3Ux8i_hxhwMKZEcCColvQeSZM.mft (raw, json)
Hash identifier:          KZKPWOrcg0Oe+d09PoPyvwVMvd5NNXjrAC3uUF36NOk=
Subject key identifier:   4E:4C:30:77:E7:29:11:BC:27:C8:93:22:D3:44:D1:1B:BF:55:14:73
Authority key identifier: F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93
Certificate issuer:       /CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
Certificate serial:       0197846AF45667FD3704DBB796D7B9D38163
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
Manifest number:          1229
Signing time:             Wed 18 Jun 2025 19:01:31 +0000
Manifest this update:     Wed 18 Jun 2025 19:01:31 +0000
Manifest next update:     Thu 19 Jun 2025 19:01:31 +0000
Files and hashes:         1: 9M3Ux8i_hxhwMKZEcCColvQeSZM.crl (hash: APqpfR2LTT5NUU30dBMaoV5TzFiybLClpc4moKCH1Fc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:84:6a:f4:56:67:fd:37:04:db:b7:96:d7:b9:d3:81:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
        Validity
            Not Before: Jun 18 19:01:31 2025 GMT
            Not After : Jun 19 19:01:31 2025 GMT
        Subject: CN=4e4c3077e72911bc27c89322d344d11bbf551473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fa:e1:8c:20:b6:c3:34:47:76:d3:20:00:02:
                    7a:ba:bc:08:7c:ae:59:09:32:60:94:a1:4f:27:71:
                    f0:4d:59:ce:d5:a2:63:1c:d7:9d:1e:f3:2d:59:08:
                    92:dc:60:de:48:19:e0:65:0d:74:79:1a:ce:a5:a3:
                    17:20:ce:fe:03:4a:9f:28:c2:3f:45:7c:f1:cb:8d:
                    32:fd:88:4e:56:0d:9e:07:06:f5:dd:3e:c3:77:28:
                    8c:ac:65:11:3c:7c:aa:23:49:14:79:53:ef:7d:70:
                    66:28:00:eb:a3:c5:06:ae:14:3d:cd:36:35:3d:5b:
                    d3:e6:b7:70:47:46:00:4d:b4:3f:ec:9e:68:08:48:
                    e7:d2:21:48:49:b0:65:ed:2d:f0:9b:1c:06:c4:74:
                    d5:55:14:ee:6b:b3:6d:5b:93:a6:3d:83:58:90:15:
                    d8:f1:6c:41:4c:9d:92:65:a4:f1:c6:7e:7c:01:73:
                    c2:4b:83:6e:b6:03:fb:82:83:b3:ba:1a:b2:df:c3:
                    fc:0c:47:09:a7:0f:bb:57:18:12:82:42:31:d5:3c:
                    99:0d:79:e4:ab:7a:18:6c:e2:9e:28:21:df:a0:f1:
                    d9:ad:da:d6:25:60:da:b7:0d:36:93:ca:27:73:2a:
                    cf:ff:85:bf:fc:85:10:5f:91:29:4c:06:16:16:f5:
                    9d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:4C:30:77:E7:29:11:BC:27:C8:93:22:D3:44:D1:1B:BF:55:14:73
            X509v3 Authority Key Identifier:
                keyid:F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:0d:e0:3d:b4:89:48:19:f8:e1:90:6b:f1:01:30:e0:d6:06:
         3d:26:4d:94:3d:be:7a:23:eb:80:35:c2:f6:f0:23:fb:f9:b6:
         05:dd:b3:ae:85:2a:a1:d0:eb:d7:ef:09:f5:4e:68:07:3c:35:
         a1:be:20:ed:79:3a:39:7f:58:32:f8:da:ec:d9:4a:8e:1a:16:
         c5:16:b6:78:86:6d:2c:7e:2b:10:4d:f5:3b:48:25:b1:62:ce:
         90:b4:25:91:4b:12:37:90:37:e2:5d:b5:36:bd:f4:b4:44:cd:
         07:4e:10:b8:94:05:e8:12:20:69:b6:cb:cc:28:32:5a:62:8e:
         98:88:16:31:e9:e1:c9:34:53:1a:5f:50:66:0d:42:0b:8d:e1:
         a5:7a:c6:35:93:b8:8b:a2:2f:84:1d:21:8c:eb:63:55:88:af:
         ff:cd:e6:6d:21:38:20:f0:1d:cb:2c:9e:3d:90:d4:75:9f:b1:
         25:53:4d:2e:6a:d3:6b:2d:d7:ff:48:c2:a7:76:4e:68:64:20:
         72:6b:fe:26:b6:4b:c8:45:b4:8c:db:20:79:6e:d0:57:90:fa:
         44:fd:de:66:56:ef:ee:67:fb:b8:b6:de:f4:e6:47:75:f9:46:
         6a:b3:35:b6:c4:48:2b:b4:7f:04:ea:23:00:3d:52:99:4e:a0:
         e4:e4:66:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:08:38 2025 by rpki-client