Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
File:                     c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft (raw, json)
Hash identifier:          uYVx0rje0oObmo/LdhP4RjRUeyepBmTisH2SqPnUbpw=
Subject key identifier:   13:9D:78:38:8E:04:D0:6F:46:B4:83:16:0C:2C:E9:F3:F6:01:3A:30
Authority key identifier: 73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
Certificate issuer:       /CN=73d85f8438d73b5668e89cc692646f9487965fa9
Certificate serial:       0197C9F17FCF7055CC882C43EE5340FA327C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
Manifest number:          0182
Signing time:             Wed 02 Jul 2025 07:02:16 +0000
Manifest this update:     Wed 02 Jul 2025 07:02:16 +0000
Manifest next update:     Thu 03 Jul 2025 07:02:16 +0000
Files and hashes:         1: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl (hash: V6fv7hWkXwMZhDZ4wnio65cxb8SgP+CWVDtn8exDqIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 07:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c9:f1:7f:cf:70:55:cc:88:2c:43:ee:53:40:fa:32:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d85f8438d73b5668e89cc692646f9487965fa9
        Validity
            Not Before: Jul  2 07:02:16 2025 GMT
            Not After : Jul  3 07:02:16 2025 GMT
        Subject: CN=139d78388e04d06f46b483160c2ce9f3f6013a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:89:e1:81:70:70:3d:e6:8f:ee:83:77:10:c3:
                    97:d1:06:33:33:32:47:ee:39:6e:f8:8e:70:7d:d7:
                    3c:17:cc:d9:37:73:9e:9a:c7:d8:e0:b8:76:80:c8:
                    d1:26:c4:ba:d0:3a:32:b5:02:a7:4b:62:de:8b:11:
                    3b:e6:ab:e9:4d:a2:62:db:bb:24:f8:37:16:90:c0:
                    be:27:82:76:2e:da:a1:d0:59:e0:52:30:64:ae:0b:
                    6b:ea:f1:67:55:56:7d:75:f6:3e:b3:22:af:e9:5b:
                    a1:61:c3:de:ad:7b:6f:40:6a:00:af:94:53:76:20:
                    dd:b1:2c:94:fa:e7:20:fd:25:c8:1c:57:40:52:a1:
                    09:4d:74:5e:55:d8:c4:2b:5c:41:fe:1e:08:57:12:
                    25:cd:15:25:0c:6e:fa:c6:2c:94:67:b4:72:e3:c6:
                    b9:e4:b8:f7:02:44:46:78:fd:b6:df:21:2a:c5:55:
                    26:8e:d1:ac:ba:74:8f:35:f2:7f:f2:cf:9d:bd:ab:
                    95:33:9a:c1:27:66:10:74:80:3d:8f:bf:7c:87:65:
                    00:37:15:f2:33:8f:d9:90:59:6a:e4:0e:ef:e2:ff:
                    8c:aa:95:90:01:9f:f9:3c:a4:ff:87:03:5d:f7:38:
                    61:3a:6b:89:0e:8b:2d:bc:49:f7:7e:38:23:31:e1:
                    df:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9D:78:38:8E:04:D0:6F:46:B4:83:16:0C:2C:E9:F3:F6:01:3A:30
            X509v3 Authority Key Identifier:
                keyid:73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:dd:b2:3d:3f:62:9a:1a:11:ff:21:7c:ee:72:07:e7:b6:aa:
         a6:72:d7:1c:b2:94:6c:23:b7:14:ef:b8:b7:07:7c:21:3e:a6:
         89:d8:59:d3:52:2d:48:2b:6e:4c:c1:f1:81:fb:6d:2d:3a:d5:
         b7:61:dc:04:1e:26:8d:11:5c:7d:73:a9:bb:e8:ac:2d:ec:46:
         30:01:72:a3:a0:88:47:cf:62:e9:bb:01:d0:d4:e1:f9:36:78:
         0b:df:dd:87:ef:76:8d:0a:64:78:31:be:f1:be:df:d9:62:dd:
         fc:52:e6:f4:53:c5:fe:c1:a5:6b:fb:6a:59:35:f3:e3:cd:f5:
         8b:b6:33:42:e4:35:ce:2a:9a:08:83:7b:5a:c0:c8:2c:ae:8d:
         8c:14:49:f9:f2:33:3c:b0:43:11:d8:91:03:f2:b8:18:1a:a0:
         68:7d:98:22:2d:e9:49:ac:a3:9e:c7:a6:d8:7b:6a:58:05:c9:
         06:ce:13:a5:3d:a2:ad:d9:95:04:9c:4c:56:bf:f4:5b:e0:e3:
         0c:01:ed:73:68:d4:22:56:c7:73:41:3f:3f:ad:a9:52:b4:7a:
         54:cb:ea:88:c2:bf:05:f6:6f:d2:8c:62:f1:e3:8f:c7:2d:55:
         7e:7a:7d:68:5e:39:41:8e:0b:6c:64:e0:1d:e7:dc:a4:08:31:
         7c:f3:49:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:38:17 2025 by rpki-client