Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
File:                     T9a30KYwNXvDweDN2gbcqIo0Y-w.mft (raw, json)
Hash identifier:          jkdxMc6m5kY4BEYaa2jlABJ7kwDmWwhZIZ8u4lB4NeI=
Subject key identifier:   25:6F:6D:95:33:97:9E:6D:3F:4F:AD:B9:F7:18:58:86:7C:96:9B:4F
Authority key identifier: 4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
Certificate issuer:       /CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Certificate serial:       0197B77C9060280BB70B62C8D6548B82FA56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
Manifest number:          04A4
Signing time:             Sat 28 Jun 2025 17:01:23 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:23 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:23 +0000
Files and hashes:         1: T9a30KYwNXvDweDN2gbcqIo0Y-w.crl (hash: Uo6Gm1+md7JLDvnXpjnj0Qq+FZYTyMs0PRbVfaZmnZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:90:60:28:0b:b7:0b:62:c8:d6:54:8b:82:fa:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
        Validity
            Not Before: Jun 28 17:01:23 2025 GMT
            Not After : Jun 29 17:01:23 2025 GMT
        Subject: CN=256f6d9533979e6d3f4fadb9f71858867c969b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:22:05:b1:7b:cc:77:bb:73:27:5b:fb:ce:
                    b1:44:83:9b:41:c7:e6:b1:bd:bd:6a:88:6e:73:21:
                    c8:27:5d:6f:36:e7:91:11:bf:9a:33:bd:a6:92:77:
                    4c:83:4b:ca:42:4a:86:53:9f:d2:c6:82:31:b4:0f:
                    9a:fd:6c:ca:1b:17:8d:c7:22:56:43:dc:55:c6:e9:
                    12:28:dc:ac:c2:73:b9:a5:54:88:b4:33:ac:f8:01:
                    83:7b:62:02:4b:c8:be:71:be:e1:29:06:b1:03:e0:
                    8b:4f:30:95:dd:8f:d7:96:6f:cd:8c:13:38:21:c3:
                    93:9e:9f:d4:45:e8:d2:8e:2b:ec:2a:41:02:66:30:
                    ad:28:00:e3:de:3b:df:ff:dc:25:3c:c9:50:eb:72:
                    ce:70:6e:13:19:7b:88:55:60:9d:96:47:ac:76:e8:
                    8b:ec:8b:c1:e8:4f:f5:eb:50:d2:76:b8:e1:a1:9e:
                    a0:16:ea:83:f8:dd:dc:ae:5e:1a:2a:9f:23:bc:3d:
                    05:3b:35:23:ec:f2:5b:a6:d1:ed:94:cb:f8:1c:07:
                    b2:d1:ba:62:c5:85:5e:23:22:93:fd:5a:a3:a3:da:
                    2b:50:36:82:25:04:e5:2a:1c:e3:41:85:e7:22:aa:
                    f3:f0:fe:c4:68:2c:4b:db:4d:9c:7a:24:a9:51:73:
                    2d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6F:6D:95:33:97:9E:6D:3F:4F:AD:B9:F7:18:58:86:7C:96:9B:4F
            X509v3 Authority Key Identifier:
                keyid:4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d9:f4:7c:7d:39:ea:37:57:c8:4a:b5:31:d9:b6:77:83:dd:
         47:82:83:92:d2:92:54:5d:33:f3:ed:d8:b2:55:8c:97:24:60:
         8f:b0:eb:61:f5:fa:5a:05:01:57:50:be:21:ae:46:d1:76:fd:
         fb:98:a2:5a:96:cc:1e:87:9e:17:f3:c0:3c:54:3d:82:db:09:
         7b:f5:c6:b8:f7:48:80:3d:fc:a5:82:02:fe:1c:08:8b:e2:1a:
         8a:88:d4:dc:da:8c:59:02:c7:f1:35:91:0c:a0:25:cd:08:a8:
         00:4a:05:ce:40:3b:54:91:b3:84:53:66:7b:ff:59:7f:3f:94:
         38:0f:ca:da:80:2a:bf:ac:79:c8:cd:0a:b4:b3:7e:f1:fb:f6:
         c6:e3:da:77:cf:4f:64:64:e6:84:e3:ee:f1:97:73:b4:ab:59:
         61:c9:24:8d:67:da:02:79:02:0f:9f:3f:db:78:86:47:bf:40:
         2d:05:cf:95:3f:66:4c:aa:50:44:8a:b1:7c:c9:cd:66:50:cf:
         b4:ab:1b:6d:c1:a0:99:31:c5:20:7e:5c:72:f8:46:96:c2:08:
         3f:f0:b6:e5:8a:b0:1e:57:09:d2:52:84:23:11:dc:f3:df:c0:
         7d:7b:5f:9e:88:69:b7:fe:16:3c:49:ff:7e:32:c5:c8:2f:00:
         46:96:28:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:18 2025 by rpki-client