Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
File:                     9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft (raw, json)
Hash identifier:          UZoWf65p7ZbYysDECgu6DXu+pW1DlRo+CwL7tveBhGw=
Subject key identifier:   F0:21:8B:0E:FB:9B:79:3A:97:D2:FE:E5:FD:F2:4B:47:CA:26:35:ED
Authority key identifier: F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47
Certificate issuer:       /CN=f539a07ef47f805cca07c10ae187c93968808c47
Certificate serial:       0197B6D729CCFAAA65D451645343D22CE55A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
Manifest number:          038B
Signing time:             Sat 28 Jun 2025 14:00:43 +0000
Manifest this update:     Sat 28 Jun 2025 14:00:43 +0000
Manifest next update:     Sun 29 Jun 2025 14:00:43 +0000
Files and hashes:         1: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl (hash: Wk33kby7h5hhSo0GsIpOW4pg/BlTKhZ28KYc4Qn3aFs=)
                          2: hQ_4ttT47iSzyY-pXhE0Zk2VRI8.roa (hash: lla8JTSaGgyqrA7kZsNxFenXInFs3bsEJhodvXrTuiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:29:cc:fa:aa:65:d4:51:64:53:43:d2:2c:e5:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f539a07ef47f805cca07c10ae187c93968808c47
        Validity
            Not Before: Jun 28 14:00:43 2025 GMT
            Not After : Jun 29 14:00:43 2025 GMT
        Subject: CN=f0218b0efb9b793a97d2fee5fdf24b47ca2635ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:42:c1:07:36:f0:61:3b:cb:97:6c:04:65:f8:
                    a1:54:10:a3:60:06:8e:1d:f6:40:d1:d2:7e:15:ee:
                    92:85:0c:aa:08:a1:23:61:0e:bc:8a:9b:be:49:57:
                    4b:b8:89:f9:2c:6d:97:b2:e6:89:5b:3e:b2:5e:55:
                    04:17:3e:e3:46:e1:6d:e3:15:f8:a9:eb:20:fe:1a:
                    c0:e3:73:f5:a3:12:ee:fc:d3:bb:17:d6:3d:36:5b:
                    62:af:7b:77:0f:86:b4:5c:89:cb:01:06:49:88:c4:
                    31:7f:c8:ba:83:7a:63:20:b3:73:71:48:91:8e:cf:
                    00:af:ce:e9:ea:a9:60:8d:c3:05:a9:b4:1c:42:31:
                    e5:a4:6f:81:80:a1:ff:34:6c:29:3c:25:69:23:a2:
                    ab:b6:f9:47:a3:60:1a:53:b0:60:20:0e:85:bb:40:
                    3d:86:7c:6d:b0:0e:32:b9:97:a1:64:41:dd:e5:0d:
                    7e:9b:25:60:5f:2f:58:a0:93:53:cd:0e:14:3d:43:
                    7e:3d:22:3e:6d:17:39:f8:e9:2e:e0:de:dd:08:67:
                    37:90:9d:f3:3a:21:56:e7:54:f2:ff:91:1c:2e:86:
                    87:e3:6c:7f:e7:cc:01:56:a9:06:b8:99:5c:d3:46:
                    44:3a:12:6f:35:9f:a0:0d:11:e7:b4:1f:71:8a:7e:
                    d9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:21:8B:0E:FB:9B:79:3A:97:D2:FE:E5:FD:F2:4B:47:CA:26:35:ED
            X509v3 Authority Key Identifier:
                keyid:F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:d3:ea:f4:c9:88:1f:3e:04:7c:a2:55:49:93:b8:88:71:ce:
         17:29:9b:05:8f:0d:80:0c:54:5a:37:5e:77:f3:51:4d:a3:4e:
         bf:00:d9:cb:d0:4e:f4:92:11:8e:b4:77:3c:59:bd:11:3f:8a:
         55:78:c5:7f:15:4d:1a:a7:f8:ab:13:fb:ce:5a:9c:a9:84:61:
         f1:bc:d7:6a:72:8a:30:36:89:b4:73:12:dd:c2:28:b1:78:58:
         d9:7c:16:a7:67:55:e7:a0:8c:57:b7:69:a7:c0:db:f3:44:c6:
         ae:11:be:af:c9:05:d6:43:42:23:8c:85:fd:f0:11:b3:dc:5b:
         f3:05:8c:74:36:26:29:d6:78:d3:63:18:f3:15:ba:3b:51:e9:
         b8:dd:99:3b:7b:70:28:5e:3e:b2:08:cc:55:a1:4a:f9:58:d7:
         55:f2:cb:6b:74:90:a5:81:b5:e2:61:ff:bf:ac:5c:7a:33:73:
         9d:1d:62:0d:78:ba:96:0f:61:fb:84:13:1b:9b:3d:93:43:3a:
         a0:5f:c0:cc:63:8c:53:1f:e5:55:55:45:33:de:83:6a:75:e6:
         86:42:31:16:4b:81:03:a4:0e:aa:23:d4:e1:0d:c4:2c:c6:54:
         0a:2b:71:aa:7b:4b:78:47:63:2f:c4:93:1a:34:08:21:ed:01:
         85:aa:ee:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:36 2025 by rpki-client