Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
File:                     9BGAp8UWZ-w4dedl8kX5CThhJXE.mft (raw, json)
Hash identifier:          baxbOFOjw7ui52YMMn7fRVEEQZvJPtDDYlWwbXL29mk=
Subject key identifier:   19:DB:06:0C:84:62:07:A9:A0:54:7F:57:07:66:E5:AD:54:21:AB:D1
Authority key identifier: F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
Certificate issuer:       /CN=f41180a7c51667ec3875e765f245f90938612571
Certificate serial:       01977AC2732BF8A34D7893B6FF8CAF665C3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
Manifest number:          0666
Signing time:             Mon 16 Jun 2025 22:00:53 +0000
Manifest this update:     Mon 16 Jun 2025 22:00:53 +0000
Manifest next update:     Tue 17 Jun 2025 22:00:53 +0000
Files and hashes:         1: 9BGAp8UWZ-w4dedl8kX5CThhJXE.crl (hash: 91NZwB6g34guLtk3p8QsZaQ6yn+8uWlFGgwj9J3e3Sk=)
                          2: Fu214pqREiMNysqnZ9A7Q5Jm5yE.roa (hash: 3AsnPktXMzidA1tsY7S+Rc/2XsSBvEXEVlda+G5oNPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:c2:73:2b:f8:a3:4d:78:93:b6:ff:8c:af:66:5c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f41180a7c51667ec3875e765f245f90938612571
        Validity
            Not Before: Jun 16 22:00:53 2025 GMT
            Not After : Jun 17 22:00:53 2025 GMT
        Subject: CN=19db060c846207a9a0547f570766e5ad5421abd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ea:53:52:58:2e:ff:93:6c:46:31:d3:41:42:
                    4e:1d:d3:22:42:10:53:db:74:e8:c6:a1:ba:39:a6:
                    a5:21:ba:99:6a:6a:e5:33:f1:57:aa:c2:50:37:06:
                    73:4d:59:bf:55:bc:07:0e:6e:e7:dc:4a:8c:2b:8e:
                    7f:a2:e8:21:43:16:9c:d9:81:e5:04:99:ab:d5:52:
                    87:ac:6d:6e:69:77:41:4f:61:d2:45:ea:e2:da:f3:
                    83:6e:4a:cf:13:47:dc:8d:09:fe:82:e9:da:db:f2:
                    2f:a2:22:da:f8:4a:69:f7:f2:aa:57:41:15:ac:af:
                    86:a9:87:96:4d:a8:b9:79:1c:e7:3e:db:6c:71:c4:
                    ea:67:b3:b1:92:a4:65:57:46:cd:8c:a9:4e:16:a2:
                    f6:aa:83:15:bb:47:4d:b9:eb:b0:1e:b2:29:93:7d:
                    cd:e5:7f:ad:c6:65:66:82:af:57:db:c7:05:c4:41:
                    38:eb:ce:a4:75:24:88:23:30:ef:4a:33:7f:df:de:
                    66:5c:0d:42:ba:8b:df:51:b8:a9:cf:76:e0:4d:3f:
                    63:2a:01:f3:43:31:ed:af:1b:f9:97:db:d5:af:c5:
                    3e:49:3d:12:02:1b:d9:8e:ad:0f:3d:cb:78:6a:fa:
                    2b:af:d7:c4:ff:8a:75:47:4b:6d:e6:5e:af:91:51:
                    ab:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DB:06:0C:84:62:07:A9:A0:54:7F:57:07:66:E5:AD:54:21:AB:D1
            X509v3 Authority Key Identifier:
                keyid:F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b8:04:1d:89:4a:d3:07:bd:26:ff:0a:fd:03:36:d7:68:94:
         06:48:55:d1:71:ff:05:ed:fd:ad:7c:7a:9b:84:91:60:5c:95:
         c2:4c:ce:38:35:48:8d:21:a4:08:c4:08:bd:26:e3:8c:e1:2a:
         cb:75:30:0f:a5:18:0a:19:58:0c:b4:f0:56:31:5d:c8:40:4f:
         05:27:1f:d7:9a:58:55:7f:af:21:4e:3f:33:cc:ed:be:76:36:
         fa:bc:7a:46:f9:2a:da:bd:c5:7d:a4:98:61:62:28:91:01:3f:
         1d:c5:d1:4c:e8:ed:8a:4a:ee:92:75:b1:e9:ed:ea:cb:cb:5b:
         50:f5:8e:13:b8:fa:ae:68:c4:45:7f:88:6e:f7:f3:bb:de:4a:
         4e:9e:f1:da:be:24:8f:f4:e7:b2:99:e9:f9:c4:05:96:b4:7c:
         a9:73:e0:5c:aa:77:ca:ba:1d:54:ac:31:b9:29:4f:b4:cc:ca:
         7a:a0:2f:e8:e3:30:53:dc:5b:46:9b:90:8f:25:db:2d:a4:3d:
         60:7e:49:c9:50:b7:b1:89:cb:6d:32:b5:ba:34:ed:e7:61:fe:
         05:ed:a3:bd:b2:a6:ac:aa:3c:12:86:61:ec:95:63:04:41:31:
         c8:c4:30:b3:ca:ca:0d:67:94:cf:5a:86:66:cc:1a:5c:0f:16:
         1c:76:70:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:34:08 2025 by rpki-client