Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft
File:                     9_TLjFICzFNe2v0grLaoBQLk_Sk.mft (raw, json)
Hash identifier:          bdEx4JCICxycv3XQzrtAQFCwRvd05G0U4+AKKdB4WrY=
Subject key identifier:   E3:C9:4F:D9:D6:13:8B:55:B6:8E:62:86:13:EB:41:6C:36:2B:23:5F
Authority key identifier: F7:F4:CB:8C:52:02:CC:53:5E:DA:FD:20:AC:B6:A8:05:02:E4:FD:29
Certificate issuer:       /CN=f7f4cb8c5202cc535edafd20acb6a80502e4fd29
Certificate serial:       01976F2C84A8D48363AEA3454C838465408C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft
Manifest number:          127B
Signing time:             Sat 14 Jun 2025 16:01:17 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:17 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:17 +0000
Files and hashes:         1: 7HvIX7fCTI2gbjc-7RnxufJl1mA.roa (hash: NWw/MjwkOB9Lahk4UnTOA4UYmqTEetLTZcrDtU3BUtM=)
                          2: 9_TLjFICzFNe2v0grLaoBQLk_Sk.crl (hash: pnXrh10f2/5+RojIuFpxOt5nKcQ6uo4InjG3WMVCBe0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:84:a8:d4:83:63:ae:a3:45:4c:83:84:65:40:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7f4cb8c5202cc535edafd20acb6a80502e4fd29
        Validity
            Not Before: Jun 14 16:01:17 2025 GMT
            Not After : Jun 15 16:01:17 2025 GMT
        Subject: CN=e3c94fd9d6138b55b68e628613eb416c362b235f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e6:e5:7b:b9:98:4e:77:ae:58:46:3d:a2:3d:
                    e1:74:41:b7:82:06:c8:8d:7d:e7:05:d5:c9:34:fc:
                    ca:96:0a:cb:58:4c:3b:0e:d9:4d:64:18:47:f2:71:
                    6b:65:f4:a2:f3:ac:14:dc:a9:15:cb:e2:90:ca:b6:
                    ba:7f:04:4b:b6:b7:2c:82:62:d9:7c:71:18:d5:93:
                    6c:77:1d:f4:8e:a6:d6:23:f2:19:0b:14:ce:75:6a:
                    a6:29:9f:90:df:e2:d0:6a:22:56:83:37:fb:e8:1c:
                    e8:06:69:99:f4:60:c2:ab:78:6b:4f:e3:95:0c:a9:
                    db:66:5c:d7:9c:db:26:ad:35:06:d5:b5:ff:04:c1:
                    c5:7d:c2:7d:a5:30:79:e4:43:b9:1e:f9:c6:66:6e:
                    3c:0a:bd:63:f5:51:62:a6:2f:b6:39:91:38:06:9e:
                    6f:17:8f:5d:21:be:e6:95:ef:96:26:57:86:20:6f:
                    f2:5a:cf:b3:14:a2:f9:45:76:2a:d4:1c:13:87:87:
                    bb:a4:8f:6a:f9:e4:06:cf:c7:07:c4:69:05:26:29:
                    83:94:2a:46:4b:67:c6:bd:ff:0b:7a:61:de:0e:f8:
                    a2:48:b4:ba:40:66:85:04:b1:9f:8f:c0:17:64:fa:
                    8d:12:cb:af:04:87:37:d3:f0:f3:99:71:d2:a6:18:
                    0f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C9:4F:D9:D6:13:8B:55:B6:8E:62:86:13:EB:41:6C:36:2B:23:5F
            X509v3 Authority Key Identifier:
                keyid:F7:F4:CB:8C:52:02:CC:53:5E:DA:FD:20:AC:B6:A8:05:02:E4:FD:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b3:c9:c5:d8:3a:53:77:dd:9a:fc:5f:1b:c6:77:8e:43:22:
         3e:98:bc:90:df:56:11:72:68:63:46:8c:12:7f:23:6c:67:76:
         f6:a1:fb:b2:d5:75:76:9d:9f:b9:78:25:f0:a9:80:f3:6c:53:
         75:18:01:13:dd:5f:6a:cd:85:e6:ae:7f:95:71:de:b0:7d:05:
         2e:35:62:12:f3:52:7b:f9:3c:b4:fe:b7:97:32:43:19:bd:b7:
         f6:e6:8a:13:ea:76:d9:35:ee:8f:bd:dc:59:ed:c7:67:70:68:
         c0:0c:9a:cd:73:07:f9:88:dc:75:02:43:bd:25:2c:2c:45:af:
         d8:79:15:0b:fa:63:44:50:a7:8e:93:09:ba:b6:20:f1:23:e7:
         06:ac:9b:1f:9c:21:1a:22:61:c2:1d:c5:7c:88:16:1b:63:30:
         05:a0:77:c9:7c:1c:5d:11:89:a3:ed:64:5e:e2:1c:8a:db:a9:
         20:8c:fc:cf:5e:cb:31:a6:96:a4:71:bd:f2:38:6d:0f:4e:43:
         79:c6:3c:65:1f:7a:35:4a:f3:f7:39:8a:e2:95:73:97:77:db:
         ac:07:51:9d:88:90:ac:3e:90:52:ee:79:00:43:61:02:8a:21:
         49:74:47:b4:de:b9:1b:02:1b:cc:5c:a5:be:dd:29:79:da:31:
         c9:d7:74:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:48:07 2025 by rpki-client