Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
File:                     9h0r7udUOkGpCKGgHs_AqHJqOuI.mft (raw, json)
Hash identifier:          HUW6//aDMRA9p1z3Q7CgJaSSgjPDN4bTCt+yUIff+aI=
Subject key identifier:   9F:B0:44:DF:56:65:72:6A:0A:89:5A:42:C9:E8:92:41:5A:D5:69:1F
Authority key identifier: F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
Certificate issuer:       /CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Certificate serial:       0196B1452819E8078AAB77E353A5C780BBBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
Manifest number:          09CF
Signing time:             Thu 08 May 2025 19:00:21 +0000
Manifest this update:     Thu 08 May 2025 19:00:21 +0000
Manifest next update:     Fri 09 May 2025 19:00:21 +0000
Files and hashes:         1: 9h0r7udUOkGpCKGgHs_AqHJqOuI.crl (hash: lbdFc5N3c/qG31CJ58ogz9K5C9cdI6Na97t9vqOVz5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:45:28:19:e8:07:8a:ab:77:e3:53:a5:c7:80:bb:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
        Validity
            Not Before: May  8 19:00:21 2025 GMT
            Not After : May  9 19:00:21 2025 GMT
        Subject: CN=9fb044df5665726a0a895a42c9e892415ad5691f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2c:ca:3f:94:ad:b6:2e:2f:71:ed:74:51:3c:
                    b8:6d:f1:ef:e7:1a:a1:ca:9f:bf:f2:e4:53:94:e4:
                    7f:57:a5:30:1f:01:f9:c4:b3:7f:80:d3:05:c1:8d:
                    57:3b:0b:67:10:10:7a:f8:7a:65:c0:a1:d2:26:2d:
                    47:67:59:65:9a:68:c8:41:95:9e:8f:d0:3e:79:9b:
                    38:af:85:d2:2a:63:9b:f2:03:cd:68:d2:b0:84:d7:
                    89:f8:c0:f2:1c:30:a2:10:83:7a:e5:f5:00:18:19:
                    01:b0:ab:6f:58:c3:a5:95:e2:2e:bf:4b:92:4c:c4:
                    ea:97:d5:cb:ee:2a:c5:fe:a3:e3:5c:87:19:07:d6:
                    03:e1:a6:c4:96:e0:81:14:0c:64:2a:69:95:ea:e5:
                    31:9e:96:8b:9b:6f:06:ba:c8:70:ac:04:82:4c:c8:
                    dc:86:37:5e:9a:c0:23:7d:70:f0:9d:f9:e9:c3:c9:
                    2d:9b:c2:27:06:49:1c:21:06:39:36:26:ad:98:1b:
                    5e:4d:f8:95:c7:57:c0:c8:55:93:d2:04:77:8c:c7:
                    2f:1c:5b:5e:85:7e:0d:9f:82:d4:9c:21:6a:36:c4:
                    39:ac:bb:5e:27:6d:d9:44:d5:8d:2d:33:5e:6f:99:
                    c2:9b:19:e0:91:94:f7:15:4a:10:74:6d:de:b2:19:
                    ee:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B0:44:DF:56:65:72:6A:0A:89:5A:42:C9:E8:92:41:5A:D5:69:1F
            X509v3 Authority Key Identifier:
                keyid:F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b0:24:ff:37:30:59:f4:4d:34:3a:36:5d:cb:72:ca:01:cc:
         2b:aa:21:e4:4b:97:40:d8:f6:9c:e2:03:49:de:bc:1c:44:ee:
         d7:90:7f:5e:cf:8f:a3:da:37:ac:2d:64:24:01:3b:06:e9:e4:
         16:f5:e3:c2:f9:3f:ca:b4:96:de:10:ff:4f:1e:d2:44:d1:af:
         34:76:29:83:fc:4b:40:6f:7a:5c:ea:71:03:75:47:49:4c:62:
         b5:00:c5:c3:db:22:c8:26:c7:ee:a7:1e:1f:61:f6:5c:28:2e:
         b5:14:f5:95:3c:46:72:a9:32:a5:4a:3c:62:2b:65:c8:29:ae:
         41:6f:0d:c4:d9:c2:bf:fd:26:2e:72:05:83:2e:c2:b0:a3:69:
         00:84:6d:b5:6c:55:92:54:d1:11:78:8f:cc:7d:b8:b6:1a:15:
         9b:1a:24:79:ea:9e:99:98:a3:bd:c0:e6:8a:d2:98:a6:6f:16:
         00:66:90:e1:ac:eb:bc:ac:cc:1c:d5:e8:e2:18:70:de:46:3b:
         44:1d:2a:95:10:bd:94:ac:86:68:21:2c:0f:ff:53:79:5b:fb:
         54:dc:9a:c1:85:55:41:12:37:66:05:68:7b:46:fd:d0:ab:8d:
         45:01:22:5b:55:65:02:9b:91:fb:7b:ce:b5:45:4f:41:47:33:
         09:8d:72:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:56:56 2025 by rpki-client