Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
File:                     n5FENjC-1KQYJ6zlcHmpR6yHy74.mft (raw, json)
Hash identifier:          uCLvGVl1kgjMfH6UYr84feJhsoOOr2QpjDWEb+WEeSI=
Subject key identifier:   A3:68:ED:AA:23:46:64:01:8B:43:C4:79:B3:1E:7A:09:D8:D9:87:74
Authority key identifier: 9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE
Certificate issuer:       /CN=9f91443630bed4a41827ace57079a947ac87cbbe
Certificate serial:       01976D74B454FF20A3C75BBFBB2B923408A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
Manifest number:          8F
Signing time:             Sat 14 Jun 2025 08:00:54 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:54 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:54 +0000
Files and hashes:         1: FTz3I1LwzTnAWMfdkHFOvWrYtnw.roa (hash: ON7nD9k8gZbbUe0iuDqX0lxMxjEVRpGMdIVVvIAhjDg=)
                          2: n5FENjC-1KQYJ6zlcHmpR6yHy74.crl (hash: XjnOFBb5OZyFy819AxluCD2ftBpTOsOy5g2Qq2iPHME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:b4:54:ff:20:a3:c7:5b:bf:bb:2b:92:34:08:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f91443630bed4a41827ace57079a947ac87cbbe
        Validity
            Not Before: Jun 14 08:00:54 2025 GMT
            Not After : Jun 15 08:00:54 2025 GMT
        Subject: CN=a368edaa234664018b43c479b31e7a09d8d98774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4d:44:6b:9d:a9:af:53:92:97:e6:f4:7e:11:
                    46:a0:ea:8d:13:92:d0:1f:f6:be:c9:e5:79:19:4c:
                    78:79:8b:30:75:71:61:20:7c:18:17:52:5f:32:f1:
                    c5:60:fc:4c:36:b3:9a:59:f7:f4:df:04:55:80:da:
                    0d:14:d9:64:a7:d5:46:ac:d1:e6:e0:74:5c:70:fc:
                    50:c8:7a:a9:54:e1:69:47:51:65:0e:9d:bc:48:c1:
                    59:d4:fe:dc:9f:a8:5f:1c:48:1b:a7:77:6e:ca:7c:
                    8d:e1:b1:d9:11:ad:7d:f7:df:72:cc:0e:a5:80:56:
                    92:28:9c:47:e6:02:cc:0a:48:90:90:56:5c:91:ad:
                    7b:50:32:b4:c3:23:37:7d:a0:1b:6e:25:b7:5b:06:
                    4c:e1:70:5b:d8:42:d4:2c:64:28:ab:89:ed:09:c7:
                    f5:3d:db:30:28:d1:d2:10:b3:ff:9b:6f:a7:43:c0:
                    7a:c2:3c:2d:38:1a:56:10:8c:7d:c5:e8:4d:a6:3c:
                    8e:55:66:23:25:eb:ab:b2:e9:26:f5:a4:b6:08:9a:
                    e9:5d:fb:50:e3:b1:e9:a9:03:45:4d:0f:17:cb:b2:
                    af:4e:bd:74:46:7d:cb:15:49:63:17:9c:f9:3a:b7:
                    f4:08:4d:23:d9:77:23:9a:00:82:8f:60:c9:2f:66:
                    e5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:68:ED:AA:23:46:64:01:8B:43:C4:79:B3:1E:7A:09:D8:D9:87:74
            X509v3 Authority Key Identifier:
                keyid:9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:40:46:b8:b7:07:7c:ce:ba:dd:c6:8b:67:eb:05:c1:22:1f:
         9b:4d:56:d0:82:ef:dc:aa:22:a1:33:5a:f6:3e:ce:a5:dd:72:
         9c:e8:d9:fd:d8:df:35:ac:2d:59:22:2b:46:92:3f:5b:01:54:
         17:81:89:bf:39:4e:90:e5:f1:90:8e:72:98:2a:cd:1b:17:ba:
         08:e1:74:83:f4:9e:9f:72:8f:c9:0c:a1:52:f7:83:15:4e:dc:
         d9:00:f0:af:3f:40:40:83:47:78:ea:70:d0:40:aa:df:3a:10:
         1f:14:de:8b:b0:7c:bc:92:63:fa:33:5c:bc:85:1c:03:59:b8:
         98:6b:4a:da:7d:23:f0:ef:22:6d:b1:4f:16:a5:79:e9:14:1d:
         cc:ba:3a:13:4e:3f:28:f3:9e:4a:e6:38:1f:dd:48:3c:96:85:
         6e:80:03:ce:e6:b9:1d:0c:28:1f:d8:4c:c9:c9:76:80:45:ac:
         b4:c2:e0:04:1c:aa:0d:73:ec:1e:4e:0e:04:94:d6:ba:ce:7c:
         c0:fe:00:38:35:1c:65:19:4d:5d:1f:e6:7b:2c:8b:51:f3:25:
         4a:55:27:29:d1:e7:f6:47:13:df:bb:73:3f:39:f3:d8:68:86:
         03:ce:ee:b6:df:bc:03:ba:e8:7f:26:60:45:75:9e:b0:86:32:
         0e:41:26:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:01:45 2025 by rpki-client