Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
File:                     9vwoeVAOHrgIVXBc-ENeA2NRN94.mft (raw, json)
Hash identifier:          XgUd/zLXApyZFZCqB8c+8tIl93hFkz47Kd1dExP/wo0=
Subject key identifier:   C1:B1:3C:ED:87:55:D2:30:85:D5:0C:46:26:2C:03:E8:BD:1A:51:3F
Authority key identifier: F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE
Certificate issuer:       /CN=f6fc2879500e1eb80855705cf8435e03635137de
Certificate serial:       019778D39AF8EABAF3FCDF0F0A64AF9127C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
Manifest number:          05E7
Signing time:             Mon 16 Jun 2025 13:00:23 +0000
Manifest this update:     Mon 16 Jun 2025 13:00:23 +0000
Manifest next update:     Tue 17 Jun 2025 13:00:23 +0000
Files and hashes:         1: 9vwoeVAOHrgIVXBc-ENeA2NRN94.crl (hash: BTBYeCzyw3Z4xilnAuGfqDRuO7zNniLd8ptXWgl9kWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:d3:9a:f8:ea:ba:f3:fc:df:0f:0a:64:af:91:27:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6fc2879500e1eb80855705cf8435e03635137de
        Validity
            Not Before: Jun 16 13:00:23 2025 GMT
            Not After : Jun 17 13:00:23 2025 GMT
        Subject: CN=c1b13ced8755d23085d50c46262c03e8bd1a513f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d3:9d:6c:0e:d2:3c:4c:39:64:61:62:ae:d5:
                    a4:65:6d:14:26:88:ec:41:9c:bd:7b:44:d1:f1:d8:
                    73:53:0f:d2:e4:43:35:73:80:ae:00:81:f7:b7:1a:
                    4c:d2:10:6a:0b:36:c6:c7:4e:5f:ee:93:7c:d3:c1:
                    fd:55:a7:dc:c1:3e:10:7f:9d:15:25:dd:0c:1c:0c:
                    db:da:0d:33:72:fc:b7:46:7d:ac:1a:60:9f:1d:93:
                    f3:74:69:8d:1f:55:a9:3e:2a:60:ef:ca:fd:06:d2:
                    e0:24:ee:15:09:2a:8f:4b:d7:60:e4:49:b7:bb:20:
                    88:d7:41:0f:72:7b:78:52:2d:0b:7e:6c:1f:a1:69:
                    da:77:1d:19:af:a9:fa:9e:79:d0:63:98:5a:19:e4:
                    3c:0f:94:54:a9:95:46:7d:31:8c:d2:5d:6b:d3:6a:
                    4a:12:6f:2a:3e:2a:c3:0c:d4:9b:6b:dc:6c:5a:c1:
                    7c:e1:8d:9a:42:be:6f:09:81:38:9a:41:ab:c1:e7:
                    86:73:ef:07:77:a9:bf:af:a7:9c:80:f1:aa:62:0f:
                    c3:79:77:86:4f:ea:38:76:d2:37:b1:a3:f6:96:5b:
                    4e:dc:27:3b:c1:34:2a:80:14:f1:3b:6d:4a:74:2a:
                    23:47:c7:e4:82:e2:d3:2f:99:d6:0a:5e:d8:7a:e7:
                    ca:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B1:3C:ED:87:55:D2:30:85:D5:0C:46:26:2C:03:E8:BD:1A:51:3F
            X509v3 Authority Key Identifier:
                keyid:F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:19:6e:bb:de:a7:5a:e8:62:8c:29:0c:fe:bb:21:a7:7c:79:
         8c:c8:71:b6:eb:c4:db:39:50:e6:26:ad:39:d7:18:19:2a:33:
         bc:04:22:b9:3b:61:09:15:4e:92:d7:a4:85:8a:c6:3d:e5:cd:
         05:08:1c:5a:14:f7:a4:30:12:15:24:24:cc:fb:c2:a7:24:88:
         18:07:46:83:0a:8d:c2:ac:21:08:be:ee:43:5d:78:4f:58:0c:
         2a:79:a1:cd:de:76:31:b8:42:26:28:6b:5f:ec:ea:57:15:69:
         51:13:11:28:75:3d:40:11:25:c8:90:e9:35:66:94:e1:5d:b2:
         c3:f3:3e:06:e6:d1:27:80:8a:03:22:3f:9a:4e:06:5f:c8:f5:
         0b:c1:f8:f6:2d:c0:75:30:d8:94:76:43:1a:f6:61:b3:db:da:
         a5:e6:03:2f:09:fb:a6:3d:37:35:3a:60:c8:08:59:6d:1c:49:
         b0:73:78:0f:4d:95:31:db:b3:20:3a:24:50:52:2f:b2:26:22:
         3e:36:03:81:88:6d:16:7b:02:87:df:4a:2f:80:51:68:da:7d:
         6f:18:ae:ab:98:a6:1e:fe:9a:8c:cf:1c:05:e6:53:67:32:12:
         60:5d:15:ee:5b:9d:d7:ee:91:a9:0d:0d:64:21:18:e1:80:a8:
         5b:a6:28:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:03:49 2025 by rpki-client