Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
File:                     9krUXSK1888ucc4KwBB0t80hrFc.mft (raw, json)
Hash identifier:          D3pK42VPr6kSyC0hElnwlmQy8E0knuaTh4+af41mNRI=
Subject key identifier:   A3:07:A6:2D:34:FC:4B:4A:9D:17:1E:8D:4A:23:CF:54:36:3D:78:F4
Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
Certificate issuer:       /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Certificate serial:       0197722D05DDB42F16F2BBB5649226B859AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
Manifest number:          143F
Signing time:             Sun 15 Jun 2025 06:00:42 +0000
Manifest this update:     Sun 15 Jun 2025 06:00:42 +0000
Manifest next update:     Mon 16 Jun 2025 06:00:42 +0000
Files and hashes:         1: 9krUXSK1888ucc4KwBB0t80hrFc.crl (hash: d04NVaRv2HMVmgpcxV84DwnYbwIkdEBu1dYzn2p6F7Q=)
                          2: rnFKFHUDJ2VK_n3nnMWQgvu93Us.roa (hash: ddxwbWDe9h7jTPjb6zGryBRSU7cXly9K/marvCxyA4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:2d:05:dd:b4:2f:16:f2:bb:b5:64:92:26:b8:59:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
        Validity
            Not Before: Jun 15 06:00:42 2025 GMT
            Not After : Jun 16 06:00:42 2025 GMT
        Subject: CN=a307a62d34fc4b4a9d171e8d4a23cf54363d78f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dd:04:07:1e:45:05:01:ab:42:be:aa:cd:01:
                    9a:8b:94:7f:8a:73:2d:bd:d3:39:48:ef:6a:ef:3f:
                    9e:1d:ad:d3:8f:cf:ef:d8:3a:47:aa:42:5e:b7:43:
                    21:be:5c:8e:37:a6:c1:ae:c6:01:f6:75:84:72:68:
                    79:1d:80:29:3f:b8:7c:8d:5f:28:45:d3:33:8b:7f:
                    79:13:23:83:d2:23:89:c1:2b:d1:ee:ff:91:a2:7e:
                    be:ac:47:f5:16:48:eb:8d:28:c9:06:b6:7d:65:9a:
                    e6:91:cc:55:a0:8f:a8:63:52:48:22:a4:5c:be:dd:
                    b7:81:2f:f9:79:db:77:03:56:49:f1:61:6e:7d:1a:
                    2e:72:b1:80:0a:7c:d6:4e:05:da:26:69:6a:12:ff:
                    08:9a:d1:81:69:e5:ab:7e:3f:ac:2f:6a:ab:83:e5:
                    8d:9a:bf:6e:77:29:f8:e6:50:89:76:19:e5:1b:f5:
                    c8:0b:00:18:d9:70:ce:c9:45:03:32:89:fe:3b:72:
                    95:71:63:34:6c:66:81:a3:2a:62:08:64:dd:97:7f:
                    6c:5d:8d:97:aa:c1:76:17:ee:17:62:fc:5a:bc:55:
                    d1:d8:4c:78:3e:58:a6:02:db:6d:4c:7b:62:0e:b5:
                    ef:44:75:87:a6:86:de:55:9c:a0:86:68:bf:49:1f:
                    92:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:07:A6:2D:34:FC:4B:4A:9D:17:1E:8D:4A:23:CF:54:36:3D:78:F4
            X509v3 Authority Key Identifier:
                keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c8:0d:bc:51:ec:41:f4:0c:8e:5a:29:36:60:bd:5a:7f:ac:
         d7:ca:fe:46:53:d8:a1:4b:6e:5d:a5:77:d2:c5:49:0b:28:b4:
         d1:bd:fa:6c:b2:71:6d:c1:79:d6:4e:1e:d2:79:dc:ac:0f:a4:
         f5:7f:d2:38:21:9f:6c:96:fd:77:f6:91:85:9d:2f:f5:d6:6b:
         32:d0:86:84:47:76:1c:61:fa:8b:07:b2:ad:87:a1:59:15:dc:
         5c:7d:82:ed:5b:bb:f1:bf:36:9c:8f:0d:7c:2f:f4:f3:b9:4e:
         88:51:85:14:cc:5d:92:35:62:0d:34:b4:bf:7d:4a:72:46:93:
         74:e1:0b:a4:eb:6d:bc:93:f7:4d:2b:9d:81:d3:ee:53:13:6e:
         41:55:36:cc:59:ef:13:86:31:66:21:33:47:ff:ff:7d:b0:12:
         66:38:37:4a:b8:de:7d:48:a2:e1:c1:c9:ca:d7:68:7c:6a:b3:
         a1:1c:fb:9c:39:e6:d3:4d:6b:51:01:d8:e2:cc:71:60:4a:37:
         c2:96:81:df:47:f9:8e:38:45:a8:61:55:a4:e8:5e:bd:68:6a:
         55:6e:d6:7c:1b:e5:24:4f:04:f0:6d:6d:fd:ea:1f:81:56:f0:
         16:31:2b:52:ea:6a:a8:23:e9:a3:c3:84:04:6f:66:48:ec:ef:
         ca:00:a4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:20:28 2025 by rpki-client