Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
File:                     muJTTfUJyW7LgRvIXXbWK6rfPSk.mft (raw, json)
Hash identifier:          GFa1kbyLmMGEI2uLJpLHKeWKrdKosu06FFuOFUppZEk=
Subject key identifier:   81:1F:BA:73:DC:D1:85:D4:2A:9B:E6:76:F4:E6:20:83:7B:DA:8E:25
Authority key identifier: 9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
Certificate issuer:       /CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Certificate serial:       01976A061A502685B061F24C670FC18F9965
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
Manifest number:          09AF
Signing time:             Fri 13 Jun 2025 16:01:14 +0000
Manifest this update:     Fri 13 Jun 2025 16:01:14 +0000
Manifest next update:     Sat 14 Jun 2025 16:01:14 +0000
Files and hashes:         1: SkEoFqWz8Nesa-6bLQGwcsWuCyc.roa (hash: YBTkqmp/iQfLCssDb/tS/QsoGIchXV4bMdX9APnUYwY=)
                          2: muJTTfUJyW7LgRvIXXbWK6rfPSk.crl (hash: jXgAHR37ubR/93RzGalV7I1oJ3f7h8ZaAZRYgq20254=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:06:1a:50:26:85:b0:61:f2:4c:67:0f:c1:8f:99:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
        Validity
            Not Before: Jun 13 16:01:14 2025 GMT
            Not After : Jun 14 16:01:14 2025 GMT
        Subject: CN=811fba73dcd185d42a9be676f4e620837bda8e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9f:7a:a4:c7:e4:c3:e2:64:55:d5:f3:eb:43:
                    b4:97:54:9b:d0:46:3f:09:68:ea:e7:df:1c:5e:95:
                    a7:ee:5b:c5:c6:f1:55:cf:9f:9b:84:e4:98:6d:d4:
                    76:39:5e:9f:c9:79:8d:31:c5:c9:59:40:f3:c7:41:
                    aa:73:b4:00:5f:6e:26:4e:11:62:ef:8e:67:d8:f9:
                    7e:92:0d:18:7c:79:d9:c9:39:78:23:db:37:22:86:
                    28:84:65:bf:f0:c4:56:61:be:9a:7a:6c:0a:67:15:
                    5a:d1:11:76:2d:2f:58:db:b0:47:59:e2:d0:fd:2e:
                    6d:40:96:71:30:50:f8:7a:c1:e8:2b:e8:03:48:a6:
                    d9:f0:db:e9:8f:c8:c9:2e:9b:7d:cb:85:e8:56:21:
                    ab:e6:4f:cf:57:21:b9:d3:bc:56:af:63:4a:99:23:
                    e8:31:9c:46:e0:fb:38:23:4c:1d:8b:3f:66:96:cd:
                    1c:d1:83:c2:6a:ca:11:cc:99:aa:51:5e:cb:33:37:
                    51:53:54:7b:8a:a4:55:a8:ea:21:9d:54:48:a3:c3:
                    18:af:6c:ea:ea:87:0e:16:e7:c0:f2:12:d7:79:22:
                    d9:a0:ed:88:7f:4a:ac:df:61:aa:c3:27:7d:28:11:
                    5a:7d:6e:f8:a6:87:cf:7e:cc:5e:14:04:b4:c1:b0:
                    c2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1F:BA:73:DC:D1:85:D4:2A:9B:E6:76:F4:E6:20:83:7B:DA:8E:25
            X509v3 Authority Key Identifier:
                keyid:9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:21:ce:7d:4b:e4:e1:f0:fb:6b:6d:69:76:da:4e:7a:91:00:
         8f:79:33:a0:20:c8:2e:6b:4f:e1:0b:ba:9b:ee:3d:52:d3:5b:
         0b:5b:1c:d1:1d:fb:2d:d1:ff:06:6b:c8:87:8e:67:c1:ea:b7:
         95:54:2a:bb:ad:09:48:80:75:b4:04:96:be:18:a5:35:ef:92:
         fa:b1:b1:ca:ea:b2:72:5d:c8:dd:7d:81:60:2d:aa:75:db:23:
         c6:25:98:ad:f3:a2:9c:84:2a:50:3b:2f:dd:0d:a4:91:94:83:
         a9:87:ad:a2:47:6f:d8:4d:be:2f:dd:4b:8b:90:98:db:9f:60:
         d8:f2:93:d6:c3:b0:56:aa:20:ea:bd:94:ab:26:69:2a:9e:32:
         df:28:f6:59:ed:b3:c8:d5:9d:72:f0:f3:b9:cb:3a:c6:46:90:
         d5:d6:72:45:a3:ef:6d:ac:6c:f8:9d:e1:52:14:51:ac:33:59:
         3b:43:98:2f:24:c7:f3:13:e1:ab:1d:a4:9a:71:71:a8:96:2b:
         a5:68:94:c6:5d:bf:95:48:9f:96:99:10:76:c5:a8:0d:4f:ef:
         7a:6f:78:b2:62:03:c8:df:58:15:d5:99:ce:60:11:c1:12:04:
         0e:15:3a:10:c6:40:d7:e2:20:3b:92:96:ac:24:3c:e9:18:c8:
         9e:af:35:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:59:29 2025 by rpki-client