Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
File:                     9JupkRTr2r1uTL029s1HWzPPE4Y.mft (raw, json)
Hash identifier:          VaX6aCngp2pmeYEaqY0cyAgx2AtxQt6VApH+DT8aqTo=
Subject key identifier:   B1:C3:8C:4F:71:C6:A7:14:B3:C2:2C:6B:E0:94:D2:F9:A4:83:2A:A0
Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
Certificate issuer:       /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Certificate serial:       0196C5DF0EFD1D836C9AB808D81C92167FCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
Manifest number:          082F
Signing time:             Mon 12 May 2025 19:00:51 +0000
Manifest this update:     Mon 12 May 2025 19:00:51 +0000
Manifest next update:     Tue 13 May 2025 19:00:51 +0000
Files and hashes:         1: 84Ad1KJPc9jhr8WAEOEs6s8tmPc.roa (hash: UeaLHRP7oFc/d7B28fPSHAmNwBiXwzZTNmEOfITVZrU=)
                          2: 9JupkRTr2r1uTL029s1HWzPPE4Y.crl (hash: ws1dU28J5+HeRoWCx95s+gTu+Bu1jRS919R2SwYjVGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:df:0e:fd:1d:83:6c:9a:b8:08:d8:1c:92:16:7f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
        Validity
            Not Before: May 12 19:00:51 2025 GMT
            Not After : May 13 19:00:51 2025 GMT
        Subject: CN=b1c38c4f71c6a714b3c22c6be094d2f9a4832aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:33:bc:0a:40:67:46:14:82:4d:36:f7:38:e7:
                    57:d0:fb:8a:51:9a:3b:ea:b8:bc:fb:a2:19:6f:87:
                    34:fc:c8:cd:74:eb:fe:f1:09:7d:63:5f:89:12:7f:
                    71:cd:0a:38:dc:1f:6b:5f:1f:3e:04:82:c8:74:5f:
                    55:92:eb:b6:cc:4b:c6:99:e3:c1:e8:0b:63:54:60:
                    82:fa:86:5d:7f:c7:3e:84:8a:ca:b8:6c:55:4c:0f:
                    3c:7d:88:13:2e:ac:e7:3b:ad:6e:a3:f2:da:e9:35:
                    a7:cd:61:50:6d:3f:09:16:a6:b5:d4:16:71:3e:62:
                    dc:70:c2:79:7f:c1:b6:3e:50:6c:6f:e7:42:8f:c6:
                    1e:ba:d1:32:62:b9:81:9c:e9:bf:bd:b1:05:f8:66:
                    ea:e2:28:1e:35:71:5b:b2:7a:50:ab:f2:03:cf:0e:
                    69:af:4d:08:61:0d:1d:90:c7:e4:b1:12:c7:43:41:
                    a4:58:00:43:38:ca:66:08:7d:dd:bf:20:dc:40:a5:
                    df:b0:d4:58:87:2b:61:c3:59:4e:32:86:76:80:a2:
                    f8:53:74:d8:25:15:f2:f7:48:ce:f8:0e:98:dc:2a:
                    a1:f2:9c:69:01:54:ce:96:4c:d1:70:e1:2e:c1:1d:
                    17:ea:a2:a6:20:6a:33:74:63:21:da:19:74:8e:36:
                    10:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C3:8C:4F:71:C6:A7:14:B3:C2:2C:6B:E0:94:D2:F9:A4:83:2A:A0
            X509v3 Authority Key Identifier:
                keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f0:ae:4d:6d:03:37:9a:d0:88:33:b7:58:68:ba:e1:8f:f2:
         d5:20:d6:be:a2:9e:d2:1e:33:be:55:8c:48:e7:41:11:f5:4a:
         a7:11:59:cf:1a:41:14:3a:54:16:fd:d1:84:5e:f1:a1:e0:5d:
         5a:18:d1:5b:05:32:2b:d6:f3:02:f6:8e:cc:9e:10:da:57:98:
         df:20:7d:b6:d8:ba:e5:87:2b:ee:1d:bd:8b:b4:cb:97:16:f1:
         bf:e9:7d:e8:ae:11:6d:8b:13:51:99:84:db:e0:0d:24:77:de:
         a5:63:b7:52:63:14:dc:81:be:61:f8:c0:17:fa:80:cc:d4:54:
         30:fb:05:c9:d2:b7:3d:a9:0f:6e:b1:94:73:51:80:83:95:4d:
         68:a9:af:c4:3a:8a:8f:cd:1b:f3:22:c8:83:29:47:85:d0:99:
         ca:5f:dc:36:5c:04:2d:fd:f2:60:31:7e:49:5a:ef:73:78:73:
         29:80:32:98:42:93:fb:cb:c1:e1:d5:21:b1:d0:75:aa:a3:6d:
         89:0a:9a:b1:13:58:32:a0:9a:51:b8:2d:7b:fa:46:fe:23:ee:
         22:ab:bd:79:8f:ec:71:e7:de:37:6e:81:e3:fc:59:e5:d6:25:
         dd:9e:d7:5a:c9:dc:6b:0f:d2:90:2b:76:64:61:21:6f:b1:35:
         54:e7:46:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:00:43 2025 by rpki-client