Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
File:                     F9uL3_IuGjew9KaVNCS2UWmwNCk.mft (raw, json)
Hash identifier:          vhmCaLstWMpTcPmWoLXaSnblshjjt3QliMP5QsxrV24=
Subject key identifier:   13:78:63:77:E1:3B:37:B9:8D:9A:79:94:5C:2C:78:4E:EB:7B:62:AE
Authority key identifier: 17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29
Certificate issuer:       /CN=17db8bdff22e1a37b0f4a6953424b65169b03429
Certificate serial:       01976A05AD5B769AE20D4F235BF9D586E230
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
Manifest number:          0C9A
Signing time:             Fri 13 Jun 2025 16:00:46 +0000
Manifest this update:     Fri 13 Jun 2025 16:00:46 +0000
Manifest next update:     Sat 14 Jun 2025 16:00:46 +0000
Files and hashes:         1: F9uL3_IuGjew9KaVNCS2UWmwNCk.crl (hash: L1BqtRGgyDcWSkSHJ0rVLWaIg1ZEkyZvJsoS2RNeBk4=)
                          2: KNcCODBaDX2MFgjxBHddnmeDs1w.roa (hash: v5RHpNNKwnL8+b9d7xhZwKkWy+NYX2Itp+tps9r7KV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:ad:5b:76:9a:e2:0d:4f:23:5b:f9:d5:86:e2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17db8bdff22e1a37b0f4a6953424b65169b03429
        Validity
            Not Before: Jun 13 16:00:46 2025 GMT
            Not After : Jun 14 16:00:46 2025 GMT
        Subject: CN=13786377e13b37b98d9a79945c2c784eeb7b62ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1f:9e:a4:a2:e3:2f:c5:b7:dd:ba:bc:4c:06:
                    91:26:80:e7:a5:d8:47:a5:80:07:f2:9a:ac:a5:b0:
                    fb:ab:dc:ee:b6:81:7e:86:d4:60:ba:4c:46:2d:5d:
                    ca:34:cd:a7:6b:08:bc:80:cc:24:81:8a:b9:c1:ba:
                    3d:e6:76:dd:ef:78:dd:a9:6f:b3:f4:0a:51:06:72:
                    a8:15:89:15:0a:3f:79:0b:25:16:f7:76:80:cc:1b:
                    55:f2:64:d5:4f:75:bf:c5:d7:b7:63:b5:67:08:46:
                    2f:50:70:d8:b9:fd:2d:74:63:65:76:28:5e:3b:30:
                    3b:87:fc:a9:84:1f:a8:ca:62:9c:a4:03:99:83:0c:
                    2c:fb:80:25:49:3b:30:b2:75:b6:4c:dc:c1:38:a2:
                    da:a5:77:ec:bf:b6:d4:09:0c:4c:1f:5f:d2:a4:36:
                    9c:ff:67:84:79:c4:e9:56:bf:f0:13:1e:fd:a2:f2:
                    13:4f:5b:ca:03:ea:8d:b4:9d:d1:0d:f0:1f:97:3a:
                    6a:3f:05:8b:c4:f7:c0:86:ae:10:56:eb:c8:66:fc:
                    6f:3b:43:cc:76:1c:e7:66:c4:29:36:10:cb:a7:1e:
                    49:6e:9e:38:62:fd:19:3a:ac:41:4f:ae:a1:9f:38:
                    95:22:ed:a6:97:9e:c7:60:dd:14:95:73:d8:81:66:
                    01:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:78:63:77:E1:3B:37:B9:8D:9A:79:94:5C:2C:78:4E:EB:7B:62:AE
            X509v3 Authority Key Identifier:
                keyid:17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:8d:13:5c:87:15:b0:7e:22:d5:2f:97:23:f4:34:b5:68:e9:
         99:54:0d:01:ea:48:72:97:4a:be:56:e6:2a:dc:ef:57:cf:24:
         99:6d:15:b1:de:ba:3b:87:cb:f4:f3:19:07:c9:c5:4b:69:57:
         45:f7:c7:07:38:4b:b8:88:89:19:94:09:68:de:72:2d:dd:b6:
         0d:86:aa:c5:42:03:8e:8a:bc:d8:d2:32:91:e2:a2:ef:e0:61:
         76:c9:00:8e:ac:54:e4:e5:97:c4:ce:85:44:1b:b9:53:7a:e6:
         3a:e2:59:a1:5a:b2:97:c0:01:ac:01:7f:63:21:87:e3:00:7c:
         e2:a6:58:e1:6d:f9:c7:93:35:ca:b3:6b:b7:4a:68:d1:d4:3b:
         0a:de:8c:92:78:3a:58:7e:c4:56:fb:ca:c3:b3:9b:77:b1:03:
         65:26:9e:ec:e6:50:ac:1e:eb:bd:2d:67:3d:4b:8d:59:2a:b5:
         66:07:ac:bf:42:39:33:8a:64:31:19:7f:d7:85:52:b8:ed:80:
         16:79:e2:16:ef:58:f3:c8:7b:dc:8e:b6:3a:0a:f6:0d:56:24:
         87:f2:10:1b:8b:0a:15:68:8d:01:95:2d:fa:a3:3a:50:11:2d:
         57:6f:57:7e:cf:36:3c:d9:c2:a7:51:b3:f3:76:07:03:0c:75:
         d9:83:50:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:46 2025 by rpki-client