Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
File:                     n9aPGyQUI9qXZHuZIkUwOG0laYw.mft (raw, json)
Hash identifier:          6huMOGhmRwaipzRp/uAsOyZYFlbRg7QKaOX+l1hbhTw=
Subject key identifier:   F4:91:7E:16:B2:CA:18:31:0E:4C:3B:25:16:30:59:5D:A1:2D:CE:88
Authority key identifier: 9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
Certificate issuer:       /CN=9fd68f1b241423da97647b99224530386d25698c
Certificate serial:       019680C6CE5F068402B5B003007B9A65C247
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
Manifest number:          1515
Signing time:             Tue 29 Apr 2025 09:00:34 +0000
Manifest this update:     Tue 29 Apr 2025 09:00:34 +0000
Manifest next update:     Wed 30 Apr 2025 09:00:34 +0000
Files and hashes:         1: 6zp8k7ws-z1aCcsmWGLYmfVsv4E.roa (hash: bUIQEUVAIaujbjPg7okGrEKCeQdfL4efouwX9EGneXc=)
                          2: n9aPGyQUI9qXZHuZIkUwOG0laYw.crl (hash: rTPoudBIn4UnuMUTdcG3VHGuwJ5Fi7JNfXMOKXE7GCg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:c6:ce:5f:06:84:02:b5:b0:03:00:7b:9a:65:c2:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fd68f1b241423da97647b99224530386d25698c
        Validity
            Not Before: Apr 29 09:00:34 2025 GMT
            Not After : Apr 30 09:00:34 2025 GMT
        Subject: CN=f4917e16b2ca18310e4c3b251630595da12dce88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f4:a8:10:7b:4f:f2:01:ab:51:27:c6:2a:0b:
                    ff:93:c8:44:30:21:0f:d7:29:7c:9f:b4:fb:da:36:
                    0a:fa:be:ab:ca:95:b9:ff:95:79:ea:76:55:36:65:
                    3f:00:a8:8e:21:5a:0b:29:8c:12:47:35:64:9a:0e:
                    c1:5c:34:a8:5e:97:5b:38:b4:40:1b:33:cf:6a:eb:
                    70:c2:f9:5d:ad:07:ad:bb:52:94:55:e5:82:af:d5:
                    1e:4e:82:e9:ff:4f:9f:78:51:84:a4:bb:ba:7e:f8:
                    1e:ca:9e:2a:c7:8a:f0:ca:4f:3b:35:11:2f:3d:1f:
                    47:4c:80:47:cb:c4:bc:f8:37:43:b2:36:c5:8d:de:
                    6f:fa:5f:ca:57:db:9c:24:e0:6c:e2:f2:32:c1:a6:
                    8d:8a:41:a9:d0:aa:19:37:c4:2e:b1:f7:6b:b9:47:
                    14:f4:01:64:e6:22:cb:f1:d5:eb:3b:8a:25:72:b8:
                    aa:a4:0b:39:60:89:d0:5e:9b:1b:29:60:72:69:91:
                    4b:4d:98:6d:47:fe:59:e2:46:b2:c7:ba:1b:d0:87:
                    7b:06:5f:4e:cf:6a:47:7d:32:93:fe:56:44:9e:bb:
                    5e:0d:91:cc:e0:61:41:98:9f:c2:f4:79:d5:fd:2a:
                    a3:11:61:a7:3a:8f:c3:8b:62:6d:25:df:51:a0:e7:
                    c0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:91:7E:16:B2:CA:18:31:0E:4C:3B:25:16:30:59:5D:A1:2D:CE:88
            X509v3 Authority Key Identifier:
                keyid:9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:55:91:bd:b1:dc:19:5c:b7:d8:30:51:87:cc:a0:65:c4:89:
         d3:45:78:6c:c9:c3:73:74:68:d3:91:d4:5c:b2:d4:f7:2b:dc:
         4d:5e:01:77:9f:22:86:0a:bc:62:0f:f9:65:c6:92:c6:f1:06:
         28:0a:cb:af:51:67:75:c0:60:e3:4f:00:52:07:e1:44:fe:04:
         1f:d7:66:e0:76:42:3d:25:ab:e0:ce:bc:d2:9b:0c:52:c8:28:
         0b:cd:26:3c:6d:6e:7b:7f:36:7a:49:64:c9:a9:34:e2:ef:9f:
         5b:dd:04:73:17:62:d3:d8:9c:ab:45:d1:88:e9:79:9c:ad:04:
         f4:08:63:70:bb:c8:ef:0f:e3:e0:db:e0:db:1f:2c:2a:3f:d4:
         bf:b5:c5:42:f3:9c:81:3a:70:e1:51:ae:f7:9d:53:c2:6c:bd:
         92:2d:34:15:96:5d:86:1a:ed:46:11:6d:d8:87:15:64:f1:49:
         a1:16:cb:20:bc:71:42:51:23:83:a6:87:b7:55:22:8d:c7:0b:
         c1:78:51:7a:4b:d8:91:3b:60:58:8c:c2:95:bd:6d:06:61:a2:
         dd:78:38:d2:a4:20:b6:2b:87:89:31:ad:28:3b:ab:99:c3:2d:
         1a:19:12:81:34:77:eb:e4:f9:ce:a0:66:c4:d8:90:ff:33:a6:
         75:f6:0d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:32:48 2025 by rpki-client