Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
File:                     r9rCQfMBCxrkhLwx9YStD50gZzQ.mft (raw, json)
Hash identifier:          0faKzyHXiNX62Umb7r/sii28LZPwNFZuOd1cAahvlSw=
Subject key identifier:   CC:0F:96:4D:34:5C:04:48:FC:B1:FF:02:75:00:FF:B5:69:69:37:35
Authority key identifier: AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
Certificate issuer:       /CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Certificate serial:       01977E3165766FF2272409F8F17326EC9C46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
Manifest number:          0B5E
Signing time:             Tue 17 Jun 2025 14:00:55 +0000
Manifest this update:     Tue 17 Jun 2025 14:00:55 +0000
Manifest next update:     Wed 18 Jun 2025 14:00:55 +0000
Files and hashes:         1: Pyp3KZhgaPnGJ0klVfWstvZhAaA.roa (hash: 2zE2fETyOiknIdhnDsU5+xLMFz/vO5FngmYcWoMLhMg=)
                          2: r9rCQfMBCxrkhLwx9YStD50gZzQ.crl (hash: 7uVYktDtfjFLB42y81KN36tKpg5/HpYw6i5DftN/EXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 13:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7e:31:65:76:6f:f2:27:24:09:f8:f1:73:26:ec:9c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afdac241f3010b1ae484bc31f584ad0f9d206734
        Validity
            Not Before: Jun 17 14:00:55 2025 GMT
            Not After : Jun 18 14:00:55 2025 GMT
        Subject: CN=cc0f964d345c0448fcb1ff027500ffb569693735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ea:b0:dc:38:94:06:4a:da:86:77:e1:0b:0c:
                    e7:9e:e6:8e:22:d8:0d:dd:66:64:db:cc:25:de:71:
                    2d:66:55:ef:6c:8c:e2:38:77:6e:6f:58:ac:29:fb:
                    83:48:51:35:2f:b5:1b:2d:7f:86:2d:37:55:62:66:
                    9f:e8:ca:8e:64:ea:cd:05:0c:f3:63:b7:1f:17:f9:
                    51:26:38:e5:f4:8b:c0:19:8c:56:2c:99:2c:63:ef:
                    b3:8f:c7:5c:6b:d2:82:d6:01:ca:7f:5e:04:a1:37:
                    0c:a3:72:b7:c0:b5:ad:7a:7a:ee:c0:80:e9:aa:55:
                    03:6c:45:32:89:40:5d:fa:42:5f:5a:5c:85:15:49:
                    2f:b0:9f:49:a8:7d:0d:21:bf:e6:82:c2:3f:6f:ab:
                    dc:ce:20:1c:b4:cb:4c:02:f1:0f:6f:14:e3:d2:27:
                    dd:00:cd:31:f9:d9:47:ef:8c:3f:a7:ed:b3:08:49:
                    cc:4e:cd:d6:96:cc:db:7d:70:20:25:03:fd:bd:98:
                    14:2d:5a:1e:f3:84:16:22:40:2b:dd:18:0d:51:b7:
                    a0:0f:41:34:20:53:69:06:0e:f0:e4:09:c8:69:11:
                    0c:e5:22:5f:5c:a3:d2:9e:04:9b:cc:cc:0c:e1:cf:
                    e2:e6:8a:30:f3:d2:8d:15:f1:68:a8:4e:b1:c9:3b:
                    4f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0F:96:4D:34:5C:04:48:FC:B1:FF:02:75:00:FF:B5:69:69:37:35
            X509v3 Authority Key Identifier:
                keyid:AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:d0:b6:a8:6a:fa:8b:ad:ef:64:f4:46:b8:39:d2:c5:f9:2f:
         f7:69:71:ae:e3:87:99:eb:38:d0:27:d6:30:8b:fa:72:98:3c:
         9b:0e:08:75:5a:8f:81:26:90:ad:dc:97:82:45:a6:10:84:97:
         82:4d:92:75:f1:a7:1a:64:39:b9:7e:93:c8:cf:fc:c7:ae:da:
         6d:fa:6d:cd:16:f4:0e:c1:94:85:68:05:78:1d:c3:28:bf:d7:
         29:8c:56:54:5a:79:bb:41:da:64:58:bc:d7:e5:99:7e:85:cc:
         f8:ff:36:00:29:4f:b6:25:6b:1c:21:d2:11:54:35:81:ce:d6:
         8f:7b:08:47:ad:28:b5:ff:14:e1:0e:9d:13:fb:5c:7f:91:19:
         65:2c:b1:47:98:0b:cc:5c:ec:b2:c8:88:b0:60:aa:ca:67:fe:
         2c:15:19:8d:73:40:ef:10:37:5d:de:eb:17:bd:5e:a0:3b:bc:
         63:48:5c:da:93:71:3b:27:e3:c4:68:1e:ab:47:64:36:f4:9f:
         fd:06:81:03:0a:45:ab:82:9c:58:f2:c7:c9:f4:2f:29:42:88:
         41:a0:1d:6f:24:d3:1f:5e:5e:64:18:3a:51:f2:5d:bf:f1:7d:
         90:60:2f:31:71:49:a2:b1:d4:f2:c4:46:5e:45:ff:0f:bf:8d:
         2c:2f:1a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 22:16:44 2025 by rpki-client