Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
File:                     9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft (raw, json)
Hash identifier:          /BZayru60b2rHmSAxQ2ndKpfvtI60cx/eurVulnsvi8=
Subject key identifier:   02:27:AC:75:60:D9:6B:F0:BC:C9:37:88:5C:45:62:CA:CA:01:7F:DF
Authority key identifier: F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
Certificate issuer:       /CN=f4272ac0423fb097583c6872567d84cae410c89b
Certificate serial:       0197B77BFCB63E39583E19C37A09090B4647
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
Manifest number:          08CC
Signing time:             Sat 28 Jun 2025 17:00:45 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:45 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:45 +0000
Files and hashes:         1: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl (hash: 40OPI5RBvkUI1TsoPS72WwIW1ypUJBdRM4BrJmDNopI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7b:fc:b6:3e:39:58:3e:19:c3:7a:09:09:0b:46:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4272ac0423fb097583c6872567d84cae410c89b
        Validity
            Not Before: Jun 28 17:00:45 2025 GMT
            Not After : Jun 29 17:00:45 2025 GMT
        Subject: CN=0227ac7560d96bf0bcc937885c4562caca017fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:61:c6:35:9a:d1:ab:cf:76:53:9d:96:b8:b1:
                    cb:58:30:ff:9b:71:b6:66:68:f6:b1:a6:c6:b5:d2:
                    ad:e3:63:78:a9:ec:5e:fa:75:f2:32:65:fe:fd:54:
                    6f:5c:ef:44:8f:0b:33:a7:5a:7e:88:78:2a:7e:ac:
                    d4:b5:9d:40:cc:ac:e9:7d:fb:14:bc:17:6d:26:53:
                    52:cd:9e:4f:7f:b8:3c:37:0c:83:84:a2:e4:24:87:
                    43:93:47:98:4b:d7:99:2b:e6:c8:57:fc:e0:db:31:
                    78:2d:2c:f1:05:04:d6:11:17:18:9e:23:33:b7:a6:
                    c7:8b:41:f2:3a:21:1f:e2:51:8f:02:13:69:31:28:
                    64:dc:b7:e7:3b:1f:bf:85:87:0d:c3:a7:28:df:c2:
                    66:09:8e:78:82:78:76:93:14:86:a6:fe:3c:61:36:
                    bb:dd:72:23:4e:d8:4d:41:34:64:1e:ac:69:4b:f1:
                    23:15:a8:6b:c9:fd:6c:9b:df:b1:66:c1:5e:be:de:
                    55:c0:4e:eb:62:0c:69:32:c4:be:32:e0:78:1c:e2:
                    ce:3b:67:8c:69:ab:1f:b2:96:ac:9e:10:3d:45:e4:
                    20:92:62:d1:ba:87:0e:12:70:87:68:9b:26:08:8f:
                    bb:c1:33:99:91:d2:c9:c4:94:c2:00:e0:6f:69:a3:
                    6f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:27:AC:75:60:D9:6B:F0:BC:C9:37:88:5C:45:62:CA:CA:01:7F:DF
            X509v3 Authority Key Identifier:
                keyid:F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:03:0d:b1:36:c0:db:03:ec:a7:e8:eb:b9:e4:a6:33:87:8b:
         bf:40:18:b7:6c:71:75:48:b5:10:af:57:32:75:80:55:a6:38:
         d0:41:55:1b:46:c9:f1:f0:13:31:ca:cb:54:fc:18:46:c7:79:
         3d:26:79:02:c0:bd:90:76:28:ee:16:0d:2a:f2:fd:cd:11:4c:
         8c:fa:4d:fb:42:48:be:a0:6f:64:51:5a:0e:3b:08:4c:60:ab:
         bf:36:60:5b:13:53:c7:61:e4:95:d4:64:d9:a8:83:fd:8d:9d:
         5a:31:fd:70:b4:9a:cc:b3:9f:1f:5e:d6:eb:4d:62:4e:7a:96:
         6c:4f:31:06:ee:79:d7:af:38:48:ca:a1:75:c1:76:85:a9:d7:
         b2:d7:5e:1d:2d:3e:9d:90:e5:6a:0f:27:89:d5:dc:5f:76:6c:
         87:3b:5f:61:0b:d2:44:22:cc:bd:6d:56:71:1e:b9:80:a1:07:
         0e:dc:9a:8e:98:8b:a9:b0:e8:05:5d:61:4a:6e:5a:df:f7:61:
         52:ad:3c:2e:4b:52:fb:72:c0:a2:e4:f6:56:4a:20:33:3e:84:
         93:56:98:2e:44:06:f9:33:84:64:cb:9a:ef:03:70:56:c9:0f:
         cd:31:73:99:55:f9:37:77:91:47:ab:95:fc:7c:d1:a4:b4:c2:
         5c:4c:93:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:58:01 2025 by rpki-client