Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
File:                     nuC9T-woxBx9-CFI8JHsPzkb23A.mft (raw, json)
Hash identifier:          bpM4ZSPx3LxSrmyWEy97dGYEq1Ry00W0T7fmySS8I18=
Subject key identifier:   D5:BE:92:D0:08:99:7E:DC:05:77:FB:94:24:59:A9:85:4B:F7:3A:05
Authority key identifier: 9E:E0:BD:4F:EC:28:C4:1C:7D:F8:21:48:F0:91:EC:3F:39:1B:DB:70
Certificate issuer:       /CN=9ee0bd4fec28c41c7df82148f091ec3f391bdb70
Certificate serial:       0197C9F20E92D41763C2194530AAB7097F09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
Manifest number:          076D
Signing time:             Wed 02 Jul 2025 07:02:53 +0000
Manifest this update:     Wed 02 Jul 2025 07:02:53 +0000
Manifest next update:     Thu 03 Jul 2025 07:02:53 +0000
Files and hashes:         1: nuC9T-woxBx9-CFI8JHsPzkb23A.crl (hash: 7uUn/4ptzc9TGdd6gqrpSqxfQ1TkLuroTgmki3w2nfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c9:f2:0e:92:d4:17:63:c2:19:45:30:aa:b7:09:7f:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ee0bd4fec28c41c7df82148f091ec3f391bdb70
        Validity
            Not Before: Jul  2 07:02:53 2025 GMT
            Not After : Jul  3 07:02:53 2025 GMT
        Subject: CN=d5be92d008997edc0577fb942459a9854bf73a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:55:1b:94:a8:4c:14:06:b4:cf:98:6c:45:eb:
                    58:8e:17:ee:b9:33:95:c8:17:13:0a:96:73:0d:8a:
                    76:a2:f1:b2:47:05:f5:3e:61:4d:75:45:5e:4c:03:
                    58:1b:dd:9e:9c:d3:11:51:a1:4b:c4:6a:f0:6b:54:
                    65:77:21:f0:f9:3c:7a:37:4f:d8:85:97:84:46:b8:
                    3b:7c:d5:bb:74:55:46:39:ef:e8:0a:99:28:42:0a:
                    a9:41:21:b0:72:96:cd:7c:48:5a:06:c8:26:aa:01:
                    49:39:9a:6c:ba:7a:05:6e:57:ce:fd:59:7a:ee:06:
                    74:d3:f9:ad:80:18:91:f8:a5:83:51:97:1f:00:89:
                    b8:a3:0d:28:7c:0f:31:58:ce:0f:61:15:bb:cc:6d:
                    10:5b:e2:7e:a1:05:67:45:66:b4:13:d4:30:17:ed:
                    f9:af:6d:2e:39:b7:56:94:6a:ae:a6:94:ed:cf:01:
                    7c:b7:21:41:aa:8e:55:60:8a:44:e5:c5:18:7f:bb:
                    08:a3:ab:14:0b:b3:1c:eb:04:68:4c:a3:f1:21:fe:
                    29:b0:16:81:79:62:b1:6b:8e:47:fd:e8:59:b8:ab:
                    e5:d4:bf:00:3a:9d:c7:cc:57:6f:39:aa:37:26:1b:
                    bb:6a:8e:91:0a:7f:0d:04:de:57:a0:1c:da:45:a9:
                    8c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BE:92:D0:08:99:7E:DC:05:77:FB:94:24:59:A9:85:4B:F7:3A:05
            X509v3 Authority Key Identifier:
                keyid:9E:E0:BD:4F:EC:28:C4:1C:7D:F8:21:48:F0:91:EC:3F:39:1B:DB:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a1:91:c4:c4:b4:0b:96:5c:92:eb:9e:3a:1f:82:59:c4:66:
         ac:26:3a:d2:fa:58:c2:fa:47:e8:9f:21:bf:d2:7d:4f:c3:a5:
         2f:a9:48:d5:bc:04:8b:87:dd:2f:4b:57:45:34:cc:dc:f8:94:
         49:50:f5:37:cf:37:0c:aa:a4:f4:d9:64:eb:14:ce:52:67:8c:
         2a:6a:4e:9b:58:42:4f:0a:5d:bb:1f:7d:59:de:fc:79:b2:92:
         72:a4:ae:b0:15:ef:17:40:5c:56:02:f4:c4:f3:03:f3:31:e7:
         d8:e5:15:67:3d:d2:51:24:8d:91:3c:fe:a6:05:d9:11:89:b7:
         5a:66:90:73:76:86:c1:14:86:ae:c1:01:56:aa:90:7c:9e:65:
         4d:c3:8d:41:f9:55:15:aa:e8:c4:00:f9:16:b9:14:34:ea:39:
         13:3f:c9:b9:ef:ba:bb:28:6d:b5:c6:b4:6b:47:1c:58:c7:99:
         b5:24:0f:f3:1d:f2:10:1a:6e:b8:e1:2a:4a:7c:7d:1c:eb:2b:
         4e:ce:45:21:ce:47:ef:17:9f:c3:0d:cb:9f:24:84:d5:9b:06:
         e1:71:b6:43:03:4e:ae:15:54:c2:f1:5c:e9:b4:89:ed:c7:6f:
         8e:56:54:f0:11:70:b1:50:a0:81:99:9e:4b:d9:cb:09:87:18:
         08:77:f1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:18:26 2025 by rpki-client