Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
File:                     9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft (raw, json)
Hash identifier:          Sv2a7q5Jv16GwoRidlZYRoqnat68YVmv22NZxYI0mrI=
Subject key identifier:   12:27:CD:22:54:FF:F1:81:C6:93:2D:50:8C:4D:A8:EF:22:05:41:CC
Authority key identifier: F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
Certificate issuer:       /CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Certificate serial:       01976E504303D82749293CF92DDF2BB0675F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
Manifest number:          096F
Signing time:             Sat 14 Jun 2025 12:00:43 +0000
Manifest this update:     Sat 14 Jun 2025 12:00:43 +0000
Manifest next update:     Sun 15 Jun 2025 12:00:43 +0000
Files and hashes:         1: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl (hash: yDI9ohy3HXBY8ayUXIRzHPP5tci7hNIdHA1BH8UA2O8=)
                          2: oArMezXxnppYeQKqa4Fni7TfbMc.roa (hash: qlkimcr4G31oui8MrYfktlDJ5C4NmKprfu244lU2XRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:50:43:03:d8:27:49:29:3c:f9:2d:df:2b:b0:67:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
        Validity
            Not Before: Jun 14 12:00:43 2025 GMT
            Not After : Jun 15 12:00:43 2025 GMT
        Subject: CN=1227cd2254fff181c6932d508c4da8ef220541cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:97:44:10:b6:b0:d5:13:f1:65:b7:8f:1f:0e:
                    40:b3:eb:29:51:aa:e1:0f:c8:ff:b8:a5:21:39:e6:
                    aa:6c:b4:c0:53:b2:e9:a0:98:da:c1:86:ad:08:91:
                    65:53:b0:0a:7f:5a:3f:b7:41:61:a7:83:f3:ca:3b:
                    19:4b:f2:db:ae:cc:9a:1f:ca:65:13:ea:11:c7:87:
                    84:d0:95:8a:2d:18:4f:c3:47:87:e2:02:ad:91:fd:
                    19:60:0d:49:6e:56:6d:a5:16:8b:02:ff:00:81:5f:
                    9e:f8:55:9b:25:ed:06:61:94:8c:1a:0f:b9:c2:ca:
                    3b:d7:4c:07:92:40:75:b9:8b:aa:b7:bd:3f:63:fd:
                    8d:f0:7a:18:b6:bb:8b:60:61:04:09:18:e4:3c:84:
                    aa:bd:ae:46:d4:43:a1:49:66:8d:73:a8:ea:3c:f3:
                    1a:76:ff:2f:6d:a1:64:7c:e7:71:dd:10:b7:e7:c9:
                    ab:5f:83:73:74:f1:75:44:2d:90:17:c9:d2:39:66:
                    b2:bc:37:89:fa:41:62:ef:bb:5c:4a:fe:64:9d:68:
                    48:36:41:49:62:39:18:9a:86:4c:9a:ca:e7:f9:f3:
                    0e:59:4f:3b:f4:93:02:23:1e:68:33:27:5a:09:f5:
                    63:15:5d:e9:48:ca:5f:8c:e7:26:3e:8a:b9:de:8a:
                    90:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:27:CD:22:54:FF:F1:81:C6:93:2D:50:8C:4D:A8:EF:22:05:41:CC
            X509v3 Authority Key Identifier:
                keyid:F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:68:77:3e:92:31:ac:03:10:ec:72:39:53:dc:68:28:a8:8e:
         e7:dc:11:14:5f:13:ff:cd:7f:42:e6:89:52:f9:d2:ef:8a:f2:
         0c:da:9e:57:e1:ad:9e:5c:2a:91:66:b2:fe:27:c9:95:05:8b:
         31:51:90:9b:93:09:eb:ff:df:d2:8b:8f:26:9e:73:a3:ff:bc:
         36:35:e6:11:c2:fd:c2:f2:3a:da:fb:85:72:1e:4e:d7:d8:47:
         03:6c:32:8f:94:38:ae:7b:2a:65:09:df:6d:8e:af:82:37:08:
         d2:54:40:9f:ed:43:af:63:85:38:8c:97:ff:a9:8e:84:6f:0a:
         37:a1:c0:06:23:c2:20:dd:38:4f:94:e8:42:02:ba:99:fc:c4:
         2d:c3:1e:92:e7:80:ed:69:e9:fe:95:6e:e4:98:9e:19:60:c2:
         3c:f3:b2:8a:37:3e:44:4f:71:1b:89:79:46:9c:8f:03:90:19:
         93:40:cf:e4:50:a4:65:0a:9d:a0:e6:24:ff:80:40:13:35:0f:
         7f:58:44:3a:de:0c:f0:01:b0:a1:10:92:ea:c7:cb:40:b1:72:
         fc:d5:0a:8d:64:3a:91:fc:d5:e2:12:3d:b4:08:3d:ed:2a:ac:
         8a:3c:d8:1f:b8:45:34:98:98:98:58:2c:9f:31:89:37:3c:31:
         fc:6c:90:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:14:16 2025 by rpki-client