Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
File:                     O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft (raw, json)
Hash identifier:          2t34c0ajgGbA9NhoKErBTJULECXdkwQYRsHURoLqmpk=
Subject key identifier:   C1:AF:81:E6:C9:51:7F:58:4A:41:FB:55:94:02:90:7D:75:DB:DE:64
Authority key identifier: 3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
Certificate issuer:       /CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Certificate serial:       01976FD0D770CC05EFFC5333936074C26A69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
Manifest number:          1214
Signing time:             Sat 14 Jun 2025 19:00:46 +0000
Manifest this update:     Sat 14 Jun 2025 19:00:46 +0000
Manifest next update:     Sun 15 Jun 2025 19:00:46 +0000
Files and hashes:         1: O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl (hash: RFTILACPQYI2seW5wTadW619pzCL/FshMKhcBVlt0jI=)
                          2: OcIpHvqAwT2M9dTBJHDbqY1xej4.roa (hash: gnCvl1Md/DWtZz5X5Y7WYVBP9HfFDhgD11ts2150gvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d0:d7:70:cc:05:ef:fc:53:33:93:60:74:c2:6a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
        Validity
            Not Before: Jun 14 19:00:46 2025 GMT
            Not After : Jun 15 19:00:46 2025 GMT
        Subject: CN=c1af81e6c9517f584a41fb559402907d75dbde64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:08:5c:81:1a:65:b0:50:11:ba:1a:18:3a:31:
                    f9:d3:85:66:2a:8c:2a:a3:74:91:65:ba:d8:a6:e9:
                    a9:86:3a:52:51:ef:16:f0:ba:33:02:f0:0b:8c:5b:
                    e4:67:4b:c7:d3:01:b6:02:2f:1c:e3:1b:44:f1:40:
                    da:c7:da:87:5b:21:03:06:cc:12:d5:5d:6c:9d:93:
                    7d:09:a7:1a:b0:95:d8:f7:a8:18:dd:6e:3d:4b:14:
                    fd:2c:11:a9:96:6b:86:13:2b:00:0f:b8:a7:ac:cd:
                    8c:bd:49:d0:19:d0:73:11:e5:07:b9:b6:ec:3c:0d:
                    50:af:ab:82:80:35:cc:17:fa:d0:17:07:fd:b7:96:
                    5c:d9:d7:91:56:31:12:47:77:b0:b4:5d:fc:ce:a8:
                    13:a3:9b:79:5e:9d:43:7b:ab:d5:a3:fc:89:70:28:
                    44:0d:8d:3b:07:1d:38:84:f5:f9:e3:7f:dd:81:74:
                    5f:dc:7b:0d:53:e9:8a:29:2f:d3:44:9e:19:1a:d4:
                    0b:e2:e1:ef:a1:b6:b1:c1:53:29:1a:71:77:dc:aa:
                    63:5e:9a:6d:4e:a7:ff:dc:22:8b:99:79:96:51:b5:
                    de:46:2d:88:1d:fc:cc:d0:2d:1c:ac:9d:68:65:4b:
                    94:f1:81:0f:7f:d3:32:a5:06:78:9a:60:47:33:d2:
                    5d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AF:81:E6:C9:51:7F:58:4A:41:FB:55:94:02:90:7D:75:DB:DE:64
            X509v3 Authority Key Identifier:
                keyid:3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:dd:c1:20:df:e3:ad:26:57:3d:57:da:ad:a6:71:d6:08:cc:
         7d:94:bd:5c:c5:46:72:59:33:d2:be:68:29:a3:89:ac:be:a7:
         8a:98:92:73:05:b4:45:3d:b9:65:63:5e:88:37:6c:b8:ae:59:
         ab:3e:92:b5:bb:b0:58:71:aa:ee:51:69:7e:1a:c7:c3:1a:f5:
         23:d9:ab:52:b1:b6:cd:54:c7:80:31:65:cb:a9:26:1e:6b:86:
         a8:f8:d0:ec:b5:27:37:03:d9:52:08:f7:be:2e:df:56:26:2c:
         99:82:ad:38:f3:df:36:b1:bc:3b:8c:d5:bc:a4:ed:1a:8a:e6:
         62:17:c3:4e:55:16:38:f8:96:d4:4e:4b:2c:fc:67:83:e8:52:
         73:f6:94:a2:ff:ce:ef:50:ad:ed:7f:3f:cd:9a:1d:e5:1c:ac:
         4d:f1:98:a2:88:97:93:ef:4d:4d:cc:78:78:5c:cd:79:fc:0b:
         2e:b9:43:1a:14:30:e0:66:6f:9c:ea:6d:e0:99:5d:c0:1a:bb:
         bf:d3:1d:b5:c9:4e:3f:15:56:70:83:bd:03:05:cb:fe:74:bb:
         91:c8:33:1e:07:27:91:9b:e2:12:b0:ca:ea:91:52:bc:38:d9:
         f5:46:b2:4e:f8:aa:7d:5a:4e:ee:e9:0d:8d:b8:3f:38:77:ca:
         d4:7e:be:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:24:38 2025 by rpki-client