Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft
File:                     9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft (raw, json)
Hash identifier:          8Aoevz/JdoFuncrFsNzpki3ldcH9bJ4hdFVDUN+CHn8=
Subject key identifier:   41:88:8E:D3:6D:EF:9B:B9:ED:0B:08:61:9E:9B:17:9F:D3:1E:E5:2F
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Certificate issuer:       /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial:       01976F99E7AE92985FF0A20735A75FD174F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft
Manifest number:          0F37
Signing time:             Sat 14 Jun 2025 18:00:46 +0000
Manifest this update:     Sat 14 Jun 2025 18:00:46 +0000
Manifest next update:     Sun 15 Jun 2025 18:00:46 +0000
Files and hashes:         1: 7InXKoGXPyPmSkShdNo1bN5BHPE.roa (hash: p0vQNoVwsgdCf98zXzcil2JDwtIbKg4o52YVuAX43Qg=)
                          2: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl (hash: H5Dyg5QvveLbLYuK5DFHSboOJhg0iAthCORlpksjwlE=)
                          3: G7eTk3jqB-BdA_Wy3K2E2YFtyTA.roa (hash: OtseOoY4gfu7tKjqn1wIwpg1/zv9XoIf0fx8DQ1CUfM=)
                          4: ISNHkwTdIse1R5eVAbZVrpNzf7I.roa (hash: aWcNBCaUk6iVQl/ljrkexa0tplOypXs9VyEvekzMA3M=)
                          5: L0ujmwzkJ6RRH45eugAjMYC2Zhg.roa (hash: ZYuGlloJDpR2SY2TTczc6v50q6dosW6j6YAj25G96Pg=)
                          6: LII7hRC3tP9UTUOEbD-OlE2YLz0.roa (hash: 2G0IT+KoXJQxpXp8HjaK3udKnKhR8XLas866IuV7Mj4=)
                          7: MGAJtndIL2Zkck_RVFiKK_Egp5c.roa (hash: 3Dl+p66+/Z3qtyr+Z1rkPfMp8vG5nBq1fl9w3qHRGM4=)
                          8: QlkzD36W5v0AxlNSx0z4hSk7uFU.roa (hash: uYqo04qiRW99BRZNiigYBH7mOhV3UNP+jPgusIVov/k=)
                          9: VTdQuPLguO6Ibw0Th9ypJCxyOf8.roa (hash: ipcRPToVDEN7EVH1AfqkAeCn3ymsz/f4y1+i87V66wQ=)
                          10: _nLYAZC-VddX97JjR5Q6LKKqBQ4.roa (hash: ndREz8aC1hd1w5pe58qePL+6kw9PyDSZ6Q1HeOlC7Rc=)
                          11: d1Mc0OsWnepemmVerPa7kdZl1N8.roa (hash: JRdvIEtlRj7j9yeTQYkXzcTmst5QyvuiftJaDhMJ8Og=)
                          12: gZtcQ4r6Woqv34G6dpT_HEC-DoY.roa (hash: FjGgXSzWLOa8xqz/zgnt2HT+YvKm/u5bq1IXo4VHelQ=)
                          13: k_9bhWj2JcQnyMq-FPfEv0otOUw.roa (hash: Zs3oxA2HTYXtiE5lUDi8OJy4SVF/+vQT5qkuzqaf+ew=)
                          14: o4_pEwPipmYi6C3PXNhpC7by3MA.roa (hash: HbprNAxeP8NoQY7jwdw1Rs3l1Tj/TI85puQfPIX124c=)
                          15: qjxC3CMWMpiM1TpibiIWl8s1Se0.roa (hash: vL7m0foCqcx4qZwFUYV1ieilxVwO5UgoFDNdvDch1DE=)
                          16: t0gWV72zLQLExI3pDHKlUQNMCLg.roa (hash: sZqkeiCyvYuQZJfxR8h/KOL8f5qWehA/zicZawvNouA=)
                          17: wj2VxfuvQPp_y-B-S4cBoG4no9E.roa (hash: NUb/774hisZdKkcNsYbowzixlPdgcgSeN+DazRzxjeU=)
                          18: yKoxV-6M6xkebvfJ-LK1Pi2FfE4.roa (hash: BokFvMbsrr4nAc7qB6GIDJeX4FQmEPo1VOjQtgLqvj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:99:e7:ae:92:98:5f:f0:a2:07:35:a7:5f:d1:74:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
        Validity
            Not Before: Jun 14 18:00:46 2025 GMT
            Not After : Jun 15 18:00:46 2025 GMT
        Subject: CN=41888ed36def9bb9ed0b08619e9b179fd31ee52f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0b:65:09:0c:5f:1d:67:cb:12:af:1a:c4:30:
                    bb:e4:42:55:a3:59:90:0d:41:b5:e3:91:d2:6c:7b:
                    4a:4a:08:0b:33:1d:8d:b8:a9:d3:f7:9e:7f:9f:53:
                    fc:2f:bc:25:31:4a:4b:91:28:bf:bd:7c:15:bb:62:
                    55:96:95:be:0a:44:1a:04:8c:5a:6c:55:6e:20:6c:
                    77:56:e7:69:22:9e:d5:e2:20:6c:a6:40:bd:02:29:
                    89:43:ce:d0:67:6b:8d:87:34:f1:d7:68:03:a3:d1:
                    21:f2:bf:27:7f:12:90:0b:2a:ab:5a:7b:1a:4d:d6:
                    8d:cc:ff:04:3b:30:29:30:4d:38:c7:02:0a:16:85:
                    de:17:09:97:55:8f:49:fe:86:db:7a:a9:6f:3b:68:
                    79:7a:c7:d4:d8:a6:f2:1e:fe:df:50:28:05:02:f6:
                    cb:ef:d5:aa:48:3e:c8:b6:e1:20:bf:72:95:13:5b:
                    06:d2:f7:f2:68:12:ce:ce:3d:b4:12:47:7a:78:17:
                    8c:5b:ad:3a:36:0b:e4:eb:9e:fc:ea:7c:e1:66:8c:
                    e4:72:8c:34:b1:49:a5:08:87:08:82:ec:5a:a9:19:
                    61:b1:28:af:4f:59:86:38:7d:fc:c4:e4:47:ea:27:
                    28:2d:ff:c8:18:87:e2:c2:5a:14:9e:3e:73:4b:3a:
                    53:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:88:8E:D3:6D:EF:9B:B9:ED:0B:08:61:9E:9B:17:9F:D3:1E:E5:2F
            X509v3 Authority Key Identifier:
                keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a4:6c:06:cc:27:87:37:a6:f6:1a:57:d5:15:66:80:13:12:
         a3:88:c6:a8:fd:09:23:7d:20:a5:83:d8:fa:5c:2a:17:af:bf:
         1e:f3:cd:27:57:35:10:c3:7f:22:66:09:86:3e:0f:e9:e9:bd:
         8f:51:b3:af:cb:1e:c1:48:a3:4e:17:df:07:8d:d3:e8:b9:bf:
         fc:41:0c:49:b9:5f:ed:42:7e:f2:79:17:91:69:f8:fe:f3:1f:
         58:b5:09:e1:7a:96:a0:b9:51:51:12:35:09:91:1f:60:b4:f9:
         52:7f:4a:54:85:e7:68:64:5d:a2:e2:73:95:8e:43:94:81:4b:
         31:87:da:e7:04:71:03:a6:f7:5e:41:b3:39:bf:2a:56:1b:05:
         1a:03:2b:94:e7:3a:c5:55:ae:72:31:cf:f4:7f:ac:fe:23:0d:
         be:74:7d:f7:4c:c5:62:3a:5e:4e:bb:f0:62:3d:b7:34:0d:52:
         0a:72:1a:7c:db:d6:b8:ac:4a:32:07:54:40:5c:86:d1:28:fc:
         6e:9e:5d:ba:bd:bd:18:52:30:d1:fd:5d:48:89:88:16:00:49:
         cf:5e:5d:60:f0:2f:40:9a:cb:2f:fc:7f:3d:a1:e1:c8:7b:93:
         62:98:20:4d:0f:4c:63:47:a9:11:5a:36:a5:1a:76:90:4c:c9:
         a6:43:47:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:18:48 2025 by rpki-client