Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
File:                     9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft (raw, json)
Hash identifier:          8rIIBDglD0IlnT4vi66se9GkfwUqeoeBbQGaU7niFx4=
Subject key identifier:   3D:3D:78:97:E2:E3:4E:EA:A4:6D:FC:6C:25:C5:3F:AA:85:89:37:A3
Authority key identifier: F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D
Certificate issuer:       /CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
Certificate serial:       0196BB5B40FD9F00A29859EA21B6274E9B9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
Manifest number:          039F
Signing time:             Sat 10 May 2025 18:00:41 +0000
Manifest this update:     Sat 10 May 2025 18:00:41 +0000
Manifest next update:     Sun 11 May 2025 18:00:41 +0000
Files and hashes:         1: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl (hash: WKSODvRGEqv057dQ5TUPQ/OSxxTLSRZRH2OuESqjVUI=)
                          2: pcJxxqpyhZF6JL4G4VK7HBS4yYA.roa (hash: PZShrCQ10JtHGLNXwnmCPSpnucUc5Ex85jH4ClAc2jg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:5b:40:fd:9f:00:a2:98:59:ea:21:b6:27:4e:9b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
        Validity
            Not Before: May 10 18:00:41 2025 GMT
            Not After : May 11 18:00:41 2025 GMT
        Subject: CN=3d3d7897e2e34eeaa46dfc6c25c53faa858937a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6e:ad:51:fb:a1:ed:93:c9:1e:c8:7d:38:c5:
                    14:3a:22:f9:c1:e7:f9:67:c7:ed:e5:2d:b4:52:67:
                    2b:3b:7e:d9:42:7a:21:53:5e:99:f5:4e:c3:86:cd:
                    ba:4d:6b:04:80:e9:c2:b0:4b:53:98:3f:e3:fd:e4:
                    06:4a:7d:bf:fd:03:f9:ed:1f:46:08:1c:b5:2b:f2:
                    cc:fd:11:64:4c:e7:f5:06:54:fa:ce:46:c9:25:fc:
                    84:9a:9e:ea:bf:f6:34:b4:32:bf:3d:ea:e1:f2:4f:
                    6d:b4:72:f2:92:88:55:d3:2a:c5:d8:42:26:c8:7f:
                    55:93:00:7b:3d:45:ad:58:0a:96:1e:c2:45:c7:5b:
                    3b:d7:33:32:44:51:f7:a4:d2:95:e8:51:15:47:a8:
                    b5:ae:20:4f:ca:06:9a:73:dd:8f:e4:b1:0e:b0:cd:
                    5e:df:6c:92:45:62:18:dc:41:98:c4:8f:4e:8e:ac:
                    13:39:13:03:e1:9e:75:43:19:9d:04:c3:ce:80:d1:
                    d3:58:87:55:84:96:b1:e8:e3:21:79:22:e0:a2:c8:
                    52:2b:12:cf:af:1c:16:b0:e0:42:91:a8:e8:80:2b:
                    2f:54:1c:e7:61:e4:da:1f:bb:e8:7d:fc:8a:68:ef:
                    a2:ce:0d:92:26:11:3a:21:3f:ca:7d:bf:e2:17:64:
                    8f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3D:78:97:E2:E3:4E:EA:A4:6D:FC:6C:25:C5:3F:AA:85:89:37:A3
            X509v3 Authority Key Identifier:
                keyid:F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:a7:68:7c:06:3e:4a:30:91:1c:72:0c:d2:5e:0c:cb:3e:03:
         7d:ed:7d:c4:9f:4d:68:e1:7b:69:97:90:b9:80:96:04:8e:30:
         89:75:2c:c4:8e:8c:90:2e:14:7f:4d:03:50:41:e2:5d:68:22:
         81:45:89:cd:ca:72:b1:e3:2a:ce:b9:1b:a7:df:b1:16:4a:8b:
         5f:f3:f1:c1:f0:da:42:5e:f9:81:2e:70:a0:ef:bb:80:15:4d:
         18:f3:64:81:b9:95:c8:06:4c:11:e7:13:3c:b5:1e:59:18:43:
         21:02:a4:c0:0c:d3:26:11:0d:1e:a8:1e:e1:09:26:73:2b:ab:
         9f:56:6b:e1:dd:a5:41:e9:0d:7f:5a:29:56:d5:0f:c8:30:c5:
         93:d5:0a:ef:78:77:50:17:e5:fa:15:3f:97:fe:0f:9f:68:67:
         93:76:af:f5:ea:8a:09:2d:7b:c0:b2:d7:e2:a3:a1:f0:09:bf:
         5a:a5:7d:ce:4e:e7:f3:ea:6f:0f:7a:35:a7:36:8a:ed:b2:6b:
         56:0e:8c:d1:34:4f:39:5e:e5:83:3b:12:12:c6:04:9d:5e:86:
         cd:20:4d:9f:74:54:44:8a:e0:3d:12:f5:6f:c5:19:11:ae:6f:
         0c:86:04:a5:4b:b2:ea:3e:29:98:8d:53:2f:cb:cf:ab:42:dd:
         46:2a:fe:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:13:48 2025 by rpki-client