Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
File:                     9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft (raw, json)
Hash identifier:          KukE20ky3Auv0wEZJ9QUjV0E5CcrBYVomiFfk1B8Gdc=
Subject key identifier:   E1:C0:5A:B9:B9:5F:ED:1F:16:84:0A:2F:6D:F6:C1:40:BB:01:69:C0
Authority key identifier: F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
Certificate issuer:       /CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Certificate serial:       019689CA70D26CB224D1A5F4C45E1BBB1066
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
Manifest number:          0BFA
Signing time:             Thu 01 May 2025 03:01:07 +0000
Manifest this update:     Thu 01 May 2025 03:01:07 +0000
Manifest next update:     Fri 02 May 2025 03:01:07 +0000
Files and hashes:         1: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl (hash: GpXE/govVmkqch5ckhQIUaNvApq1sY9B+YJPbX4uDp4=)
                          2: lTwG7fexEhfG1KlVMWVQwuwbbtc.roa (hash: bfD7+ofvPCOaA8CmUpbLhJtSVYv9giSBukJUfQkg6wo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 03:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:89:ca:70:d2:6c:b2:24:d1:a5:f4:c4:5e:1b:bb:10:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
        Validity
            Not Before: May  1 03:01:07 2025 GMT
            Not After : May  2 03:01:07 2025 GMT
        Subject: CN=e1c05ab9b95fed1f16840a2f6df6c140bb0169c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:da:76:bc:61:70:5a:ef:a0:e0:7c:97:c4:2b:
                    00:06:33:43:fa:88:3a:e5:e1:2f:14:3a:39:9d:19:
                    6a:cb:bb:37:0e:b8:23:7f:16:a8:5a:e2:e0:96:24:
                    ff:06:34:36:bb:ac:55:e3:25:84:4b:34:ef:36:de:
                    78:d4:71:5e:26:bd:3c:c0:05:1a:1e:d6:b7:72:44:
                    c1:45:9b:01:7b:8e:b6:86:ed:23:74:2b:ee:19:8d:
                    2e:3b:95:2a:6f:ad:81:a3:e0:7e:19:c5:fd:30:47:
                    f5:11:30:03:cc:4d:5c:fd:e8:1c:a5:bb:43:bb:f9:
                    96:1b:6a:68:78:02:db:08:7a:49:83:1e:77:67:a2:
                    82:39:46:6b:ed:ee:51:15:bb:14:02:39:62:7b:e4:
                    b9:6d:f0:97:37:6c:32:1b:fa:f1:8d:46:41:9f:2a:
                    2e:fe:7f:f1:eb:61:57:2d:92:ed:29:20:b8:62:a8:
                    25:cf:12:e8:f4:a0:36:2d:8f:84:c7:5f:0b:da:51:
                    21:12:86:97:e4:e8:9e:cc:34:f6:95:82:75:83:24:
                    04:d9:b7:40:26:88:1c:bd:04:51:5d:ae:d3:e5:4b:
                    4f:56:d3:ad:43:7f:7a:a8:75:d3:9c:ae:83:57:a3:
                    99:c8:c0:8b:f1:38:63:37:98:c1:40:32:b7:75:bc:
                    e2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C0:5A:B9:B9:5F:ED:1F:16:84:0A:2F:6D:F6:C1:40:BB:01:69:C0
            X509v3 Authority Key Identifier:
                keyid:F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:15:e1:30:50:0e:bd:79:d0:7c:84:19:5b:3c:56:e0:56:ae:
         db:2d:6f:e5:c8:95:f1:69:1f:de:b4:ed:15:18:df:e1:be:e4:
         76:7e:79:50:f3:94:13:0f:b2:41:2a:f7:41:e6:49:26:7e:30:
         c9:81:87:ea:94:21:49:5f:37:57:06:cc:a7:4f:3c:43:38:dd:
         bc:9f:bd:c5:8e:77:de:61:e4:d9:ed:fe:da:6d:f0:7f:b2:99:
         cb:8a:34:44:de:03:17:29:8d:ed:74:c4:75:c2:b9:06:96:45:
         c9:3b:9b:3d:72:57:6e:c0:ff:45:24:84:96:04:a7:67:24:a1:
         e4:cf:48:3c:4e:f5:61:86:9c:7e:88:64:04:4d:03:ba:6e:25:
         3a:54:d0:1c:14:b4:f6:b4:3e:c3:d0:07:ff:1e:42:50:4c:97:
         83:21:2e:cf:99:7a:7c:a8:f2:a9:bf:0d:08:c5:e6:e3:f9:fc:
         28:5d:ef:66:36:ed:f3:e1:11:b6:98:1f:92:82:ab:c6:eb:89:
         3b:ba:97:cd:61:62:f3:1c:37:bd:98:8f:f1:50:bd:6f:26:5b:
         a6:9e:f0:c1:a8:4c:27:17:0f:ec:5d:8f:8a:bd:2b:5e:f9:ea:
         73:8e:df:0a:30:50:35:91:46:40:a3:77:74:37:76:eb:57:02:
         77:97:b1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:09:51 2025 by rpki-client