Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
File:                     l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft (raw, json)
Hash identifier:          2hnWeX6lYVw40iCqK8MyFnY3UEuImFxNYuRH/g0Ze4Y=
Subject key identifier:   76:B8:4F:7F:9C:9D:B8:7A:B9:05:D3:5F:7F:C2:93:21:E5:5D:42:08
Authority key identifier: 97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
Certificate issuer:       /CN=97da420008cfb9193499278ef558bd42d61c7f75
Certificate serial:       0197711B27C821CD289A4FB820DE7B8398D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
Manifest number:          0AEB
Signing time:             Sun 15 Jun 2025 01:01:34 +0000
Manifest this update:     Sun 15 Jun 2025 01:01:34 +0000
Manifest next update:     Mon 16 Jun 2025 01:01:34 +0000
Files and hashes:         1: Lt0FJSjIL_wYzPK9Xck2UjuDtjE.roa (hash: +dB90Z/NoEK2sKATplyBvT745dtw32LCvl2j/FqLTfY=)
                          2: XCN5lwkGM58av9oqAJsgGCsHbJ4.roa (hash: 8aCR6L9MXmCNnfWofwqGUNu6pEk0OZanJ7hWSkVsigk=)
                          3: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl (hash: WteXsDGBhQfd2saa+Yl/vpGbWT6ldA/VhjQ+YAByIBU=)
                          4: tYNk5ivLrJOQmND4t8YVO7XJjVM.roa (hash: 7BRKmsVp5QSVmk/qolkRNTnxiIc5l5yvcX18LVXR7ro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1b:27:c8:21:cd:28:9a:4f:b8:20:de:7b:83:98:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97da420008cfb9193499278ef558bd42d61c7f75
        Validity
            Not Before: Jun 15 01:01:34 2025 GMT
            Not After : Jun 16 01:01:34 2025 GMT
        Subject: CN=76b84f7f9c9db87ab905d35f7fc29321e55d4208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9d:fa:d1:a3:56:98:82:aa:8f:91:85:66:2c:
                    7f:b8:e0:15:75:bd:04:ee:08:7e:ea:ba:43:12:fe:
                    05:3b:eb:5f:0a:c0:c4:36:67:cc:53:4c:c3:22:d1:
                    5b:1d:34:fa:81:d9:61:7b:73:b4:23:e5:e5:d9:cd:
                    8e:a6:f0:71:e3:c7:4b:66:4c:91:39:6c:b0:6f:5c:
                    40:99:13:4b:2c:8b:a4:f6:83:bb:5f:67:88:4b:d8:
                    ce:02:8c:69:69:35:aa:5c:1a:1c:2c:c6:81:26:d8:
                    20:7b:ef:e5:79:cf:fd:d8:3c:97:54:15:ef:ca:e0:
                    46:a8:67:fa:76:7d:c5:32:24:6f:a7:23:05:bf:af:
                    62:f4:4f:2b:66:cd:b8:23:fd:51:78:5d:c6:7f:ff:
                    6d:9f:ed:6f:91:f2:d4:ac:94:91:44:1c:93:4a:0e:
                    2c:bb:f5:87:f5:d9:54:82:7f:eb:a1:11:73:5c:b5:
                    2c:ac:3f:ed:f9:7d:ff:bc:6f:94:fa:38:ad:4d:fc:
                    f8:cf:f2:c2:15:b3:f3:65:1c:9f:2d:e0:2c:2a:56:
                    d8:64:79:e0:c7:70:9a:82:43:c3:9a:8b:35:cf:99:
                    61:be:ce:3e:b7:3d:50:8c:44:2d:2d:1b:f8:6e:c0:
                    f2:c2:82:f7:e5:41:e9:96:4c:b6:c2:21:dd:61:43:
                    d9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B8:4F:7F:9C:9D:B8:7A:B9:05:D3:5F:7F:C2:93:21:E5:5D:42:08
            X509v3 Authority Key Identifier:
                keyid:97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:c7:92:21:49:46:f4:40:ec:b9:82:1c:b2:72:7f:3f:3a:ad:
         86:3a:58:e9:0a:ed:f0:65:b9:86:20:7b:91:e1:b9:13:fe:f4:
         fb:d3:23:0a:04:fc:51:29:41:92:55:78:b7:65:1d:5b:19:50:
         a8:9c:ef:b9:f3:ff:3f:5f:ce:ae:19:49:48:fd:c5:8e:28:6c:
         b4:0a:1e:71:79:44:d5:01:a7:d0:6a:7f:93:ea:e0:dc:74:2a:
         f4:11:26:91:04:5d:aa:5e:14:42:a8:10:16:ed:64:e1:11:7a:
         70:c6:dd:b9:96:ba:a5:d8:c7:19:e6:8e:81:58:f5:15:a6:80:
         92:75:26:08:01:0e:44:cb:37:63:15:9e:ae:7b:2a:34:a6:de:
         b4:2c:81:81:dd:d5:5d:77:45:92:da:89:1c:ed:0d:d0:8e:fa:
         05:39:a2:2f:ad:10:f3:88:28:2f:b7:cc:4e:3d:f8:1b:c4:9c:
         64:59:31:25:b1:d8:29:73:0d:b3:bd:1c:cd:49:ed:3e:d0:63:
         e7:67:d6:52:33:8d:cd:f8:bb:de:e0:7d:a9:c3:60:92:85:50:
         82:95:d6:1e:10:79:ed:fa:ee:d2:37:e7:1c:4f:dd:2b:73:63:
         35:a9:ea:17:ea:c3:0d:ca:33:84:55:b7:59:13:ad:7d:ab:a2:
         84:ee:28:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:49 2025 by rpki-client