Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
File:                     9V4Fkwjkaz074E0x_V4Q9U80OQw.mft (raw, json)
Hash identifier:          DHp+elt9y9aAK34hXmJ3kuGuqp1n4BRa+xZv10oH+Gs=
Subject key identifier:   9C:CF:0D:FC:E7:09:C3:C1:80:0F:32:32:7B:00:09:58:99:9C:2D:2E
Authority key identifier: F5:5E:05:93:08:E4:6B:3D:3B:E0:4D:31:FD:5E:10:F5:4F:34:39:0C
Certificate issuer:       /CN=f55e059308e46b3d3be04d31fd5e10f54f34390c
Certificate serial:       0197B74561415EE17F8FE8B4BA5081337AB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
Manifest number:          0511
Signing time:             Sat 28 Jun 2025 16:01:06 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:06 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:06 +0000
Files and hashes:         1: 9V4Fkwjkaz074E0x_V4Q9U80OQw.crl (hash: Ng2tYaHcqmona/laRhe4SmnBXnAJvOrH1mxj0FMNDoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:61:41:5e:e1:7f:8f:e8:b4:ba:50:81:33:7a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55e059308e46b3d3be04d31fd5e10f54f34390c
        Validity
            Not Before: Jun 28 16:01:06 2025 GMT
            Not After : Jun 29 16:01:06 2025 GMT
        Subject: CN=9ccf0dfce709c3c1800f32327b000958999c2d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9c:88:96:4f:f7:a9:1d:c6:a1:e7:dd:31:d3:
                    97:ea:10:9b:d1:38:50:d9:11:d7:e2:ca:bf:15:9e:
                    6a:1a:96:1a:59:89:50:ae:4b:87:83:39:73:df:d8:
                    11:e1:9e:a0:e3:24:c4:c4:29:b0:0e:93:d0:71:9d:
                    8d:20:33:28:e8:73:e9:d4:16:3b:53:7a:43:e7:bb:
                    5a:1f:77:b8:51:2a:f8:11:ad:8b:dd:27:6a:9f:aa:
                    a7:47:aa:88:88:22:56:40:e6:e5:df:f5:ad:f9:eb:
                    e4:68:e8:0e:d5:ab:f2:8b:ff:44:cf:fe:ef:40:98:
                    31:1f:f7:03:de:6d:3b:83:b4:f9:a2:95:5b:2a:b7:
                    2b:12:2b:35:c1:68:2e:9d:e0:2f:1f:98:0e:de:55:
                    e8:76:0f:16:96:3d:ed:b2:e4:ab:29:5d:ee:05:24:
                    a6:66:dd:ce:4c:ed:1b:c2:df:eb:92:fe:f9:47:a4:
                    41:e4:bc:c8:c6:df:51:6c:59:72:07:f1:46:f1:40:
                    bf:90:ef:b3:2e:a2:30:21:f1:7d:c7:33:ba:05:c0:
                    1a:cf:df:9b:fb:3c:50:c1:ee:89:8f:e6:cc:57:84:
                    96:7a:ca:c1:95:9c:5e:6e:d4:4b:6c:7e:33:50:c0:
                    62:74:42:d3:02:42:84:56:b3:aa:ea:54:fb:e5:1c:
                    43:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CF:0D:FC:E7:09:C3:C1:80:0F:32:32:7B:00:09:58:99:9C:2D:2E
            X509v3 Authority Key Identifier:
                keyid:F5:5E:05:93:08:E4:6B:3D:3B:E0:4D:31:FD:5E:10:F5:4F:34:39:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:1f:13:68:af:9c:b1:b2:34:75:ae:ef:1a:3a:08:99:32:20:
         0b:69:ef:cd:79:3e:a7:f3:db:fc:d3:33:8b:72:77:b4:1f:6b:
         6a:61:b1:eb:46:b8:cd:ce:24:5a:32:6e:74:a5:5e:77:f9:65:
         60:82:ed:7c:4a:b9:9e:c9:c4:3b:e1:40:dd:2c:e9:00:b8:f8:
         5c:72:1b:87:4c:92:b1:25:c6:85:1b:48:fe:4e:d8:b6:6a:01:
         45:1b:f2:fd:59:2a:ac:27:f7:79:01:77:5a:3e:31:61:04:b5:
         81:66:20:d4:ee:81:e0:41:56:3d:79:3e:68:eb:6b:ea:eb:ca:
         89:2a:ca:bf:ba:a9:e6:57:c1:4e:7e:da:49:a5:88:70:14:23:
         bd:d8:44:c3:2a:16:76:6a:e4:f5:73:ee:8c:c3:34:bb:c6:10:
         64:4e:68:00:28:ea:4d:f7:56:b2:cf:9b:e1:81:3b:69:f5:a4:
         1b:b8:37:9e:6f:4d:58:e6:9d:cd:1b:bb:05:5a:ff:df:ff:7d:
         bb:63:a6:d0:ac:0c:a7:c3:b3:04:64:15:dc:d7:cc:88:be:e6:
         39:1c:eb:b3:da:7d:e0:96:e4:bc:fe:f4:36:bd:3b:4b:5b:36:
         81:4a:53:0b:03:bb:3c:6d:12:97:6a:1b:84:67:5d:27:a9:c5:
         1c:53:fc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:34 2025 by rpki-client