Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
File:                     Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft (raw, json)
Hash identifier:          NHyAe3777yajpg4+oDn6/ml+Q3ZksxRxZ9pisC3xhqQ=
Subject key identifier:   56:30:5A:87:81:7A:8E:23:19:74:52:52:52:48:00:BA:0D:F2:28:54
Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
Certificate issuer:       /CN=09f93d62beb75bb4232dcd052d270276d36f8573
Certificate serial:       019768F2AD78B723642D0ED9BB289DBED723
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
Manifest number:          13D5
Signing time:             Fri 13 Jun 2025 11:00:23 +0000
Manifest this update:     Fri 13 Jun 2025 11:00:23 +0000
Manifest next update:     Sat 14 Jun 2025 11:00:23 +0000
Files and hashes:         1: 0wq7nKaScS0pbrNtDp5CCYa40I0.roa (hash: YLAnQ899fen9G75o1VQ4WG3xmrR1aE24+aqGBivGfPg=)
                          2: C61GwcJeRtAOI01pw_9OifWmDg4.roa (hash: 9PW5ZjiozCQ8wL+eGdZzyMhYF63EjKCPmt13mTOq/Zk=)
                          3: Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl (hash: bkNEq1essNo0vMz0bxCswEDehg/vnbTAbxUs4C+QfL8=)
                          4: ItVJPK2mLPB9FvjsYvA3kQUwYMo.roa (hash: 1Z3qdwF8M3C1Jp6cQIQ9f/sPtjEFM+fpGWKdDGskejw=)
                          5: y9tjDMwj3FUxf0FE58l3CpQ2f7s.roa (hash: ER0udvIPerpU2WoViOM+UwzfexA+zzC+m8a4XFVRnXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 11:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:f2:ad:78:b7:23:64:2d:0e:d9:bb:28:9d:be:d7:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573
        Validity
            Not Before: Jun 13 11:00:23 2025 GMT
            Not After : Jun 14 11:00:23 2025 GMT
        Subject: CN=56305a87817a8e2319745252524800ba0df22854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e2:64:4b:d9:99:f9:49:15:67:3c:0c:f7:38:
                    7e:14:8c:a6:69:0b:e0:e7:72:b3:06:76:0b:af:4d:
                    af:af:ab:fc:2f:72:31:b3:c8:31:8c:f6:24:cd:58:
                    18:dc:56:94:b6:ff:2d:21:c6:6d:19:34:dc:2f:ee:
                    60:20:7f:13:94:ee:bd:e6:f2:a6:65:fc:68:45:96:
                    9e:0f:fa:d2:8e:41:c6:4c:33:ec:63:92:b6:2e:e5:
                    9a:b1:78:e4:dd:81:77:15:25:65:41:54:ab:17:f2:
                    a6:d3:8a:72:c7:9e:fa:f1:6c:97:f9:8b:3e:19:06:
                    8d:e5:e2:30:c1:23:e8:d8:85:5d:a1:4f:e4:60:01:
                    fb:74:32:90:9e:cf:91:8c:9b:71:8b:9d:c8:3c:54:
                    b4:2f:d5:51:f2:e4:bd:0e:64:5e:63:a0:94:db:de:
                    0f:62:d9:1b:61:7f:92:7f:e1:6c:86:6d:41:49:e7:
                    cd:4d:53:3a:e4:cb:9e:5f:90:94:54:5e:5a:60:6e:
                    79:c4:1f:95:d4:c6:42:89:94:90:4e:4d:88:04:e9:
                    e2:75:14:0d:ee:fc:c3:96:04:66:81:2c:86:b3:ca:
                    4c:14:28:25:b4:a1:89:46:a8:d6:3e:41:bc:a1:91:
                    1d:36:f8:b3:83:5e:45:36:63:b1:5c:d0:81:c9:46:
                    fc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:30:5A:87:81:7A:8E:23:19:74:52:52:52:48:00:BA:0D:F2:28:54
            X509v3 Authority Key Identifier:
                keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:0a:0a:e0:e0:61:9a:50:0d:87:82:97:81:c1:3c:29:79:a9:
         80:17:62:fd:9c:01:c4:8c:8f:92:c5:27:50:44:60:c8:4d:57:
         32:00:98:c3:65:dc:90:f7:c4:75:27:03:a0:96:8d:be:cb:4e:
         af:e4:7b:15:d2:24:ac:28:39:26:bb:6e:8f:c2:37:1f:fe:55:
         10:21:81:6d:db:b0:07:07:47:1f:94:1d:4d:a6:66:3c:3e:4b:
         62:98:4c:d4:50:15:66:93:a3:5e:23:12:17:af:8a:7a:28:67:
         89:22:38:2e:29:69:e8:33:f0:2c:3b:16:53:6a:a8:0b:a7:fa:
         63:1a:13:9f:0a:14:24:2c:58:4a:eb:04:83:89:56:da:77:17:
         70:5f:2a:59:84:48:b9:b8:8e:59:90:33:4d:fd:0f:49:5e:43:
         0a:27:30:09:6a:41:84:8c:32:42:67:5d:24:af:c1:c6:fe:07:
         8c:9f:ab:a0:70:56:e9:8c:7e:21:2e:71:99:b3:3e:43:05:4b:
         fd:6f:f2:42:27:94:73:3d:7c:69:12:e9:42:c6:39:0b:f8:2b:
         12:d4:c2:c4:dc:ba:b0:eb:84:bb:b5:45:57:3e:12:d9:10:ca:
         c5:b9:fd:0a:7d:6c:0f:bf:0c:fe:a9:c9:a8:df:85:ea:b2:56:
         42:81:16:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:01 2025 by rpki-client