Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
File:                     9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft (raw, json)
Hash identifier:          iMXUuStifRUs0wRBVfkHzrAgGnNZZv4AJaZ85y4TuBY=
Subject key identifier:   5E:74:D7:C7:F5:6E:D8:41:F7:13:8D:25:73:44:B2:4E:B5:A2:A9:6C
Authority key identifier: F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36
Certificate issuer:       /CN=f6f49bfb2a0b82446060c7fc907810e518705936
Certificate serial:       0197B77CA2DA36B0EF2718667F98FBC2F6F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
Manifest number:          021C
Signing time:             Sat 28 Jun 2025 17:01:28 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:28 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:28 +0000
Files and hashes:         1: 9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl (hash: cSxOWMi/tEVUqvsB/mW30AhSxyH2d8BtIkTsU6h0RKM=)
                          2: jSx6lr1ClHwvX34A8pMwt0RR9b8.roa (hash: 8qaP26J8XC7Mhz3DA86mgKU6vMfpb43EGZW/j662nEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 17:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:a2:da:36:b0:ef:27:18:66:7f:98:fb:c2:f6:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6f49bfb2a0b82446060c7fc907810e518705936
        Validity
            Not Before: Jun 28 17:01:28 2025 GMT
            Not After : Jun 29 17:01:28 2025 GMT
        Subject: CN=5e74d7c7f56ed841f7138d257344b24eb5a2a96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:68:04:9f:47:b3:ae:8e:c8:06:89:8d:1f:f5:
                    03:88:32:84:47:e3:51:d8:e0:49:0e:68:b7:00:cd:
                    4a:3c:45:55:0b:81:92:ca:8b:10:ca:fa:22:fe:40:
                    5a:9a:c6:5c:e2:cb:04:dd:ab:62:41:04:70:f6:af:
                    0c:f4:05:a4:98:31:f0:2f:5e:54:ca:d9:81:ec:53:
                    e2:9f:29:e1:28:80:f5:2a:c6:0d:80:b0:9a:0c:cc:
                    d2:27:74:52:90:bf:f8:e9:6a:9c:61:f4:47:31:80:
                    a5:81:93:05:f9:11:63:a9:3d:e8:d4:a2:c5:b3:c5:
                    b1:d6:7d:10:2d:14:dc:7c:74:9c:88:be:d8:ec:d6:
                    77:a7:60:a3:b3:d6:61:cf:01:60:5f:7b:27:a0:48:
                    25:27:fc:d2:9f:f8:bd:d0:f1:9f:0e:a9:49:94:63:
                    b0:27:8e:6d:5c:80:e9:88:2a:6b:23:d9:60:f4:b2:
                    21:f3:3f:e3:d8:aa:04:52:2b:8b:08:d8:eb:d4:66:
                    db:d6:c2:e9:48:53:48:35:60:de:4a:cc:3f:df:37:
                    da:75:20:25:85:fd:b8:91:b0:21:0d:b4:d9:5f:dc:
                    ac:db:78:e4:cb:42:da:f6:ca:54:a5:a2:6a:bb:b6:
                    bd:de:28:f0:a1:cb:38:de:11:6f:7c:1d:a9:89:7c:
                    b0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:74:D7:C7:F5:6E:D8:41:F7:13:8D:25:73:44:B2:4E:B5:A2:A9:6C
            X509v3 Authority Key Identifier:
                keyid:F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:8d:6f:b2:ce:47:02:75:ab:d6:5b:42:41:f2:ef:fb:48:78:
         05:b6:d2:85:d9:9d:7e:d0:fd:24:d0:96:73:c9:e4:a3:52:01:
         2f:c4:f0:97:e9:0e:f0:37:a9:c2:d2:ce:3b:f4:af:81:97:68:
         f6:eb:87:35:c8:cd:a3:ba:22:f6:aa:74:20:7f:93:3a:77:fd:
         32:51:cf:98:3a:26:76:30:c1:9c:92:16:14:7c:b9:32:38:4a:
         a4:7e:f1:31:a1:ae:c1:c5:a2:bc:18:a3:b5:34:4b:e2:03:38:
         ef:3c:52:6c:11:4d:c0:99:07:2c:ff:a2:8a:96:6b:86:4d:1a:
         77:c3:ae:b6:33:01:e6:0b:89:57:f6:59:bf:b2:f9:8e:18:da:
         4f:6b:d9:0e:7c:50:d9:f8:36:bd:60:1b:39:a3:19:12:ee:37:
         8e:ae:0b:64:15:9d:62:e1:3f:c5:02:4c:d8:a4:2f:b4:94:fd:
         f6:47:00:b8:bf:ec:79:12:d8:1c:2b:fa:bc:7c:42:51:c4:12:
         33:0a:e2:78:cd:d9:bf:67:2c:c1:4b:9d:b9:7d:d8:de:2b:c0:
         a9:37:2b:db:52:90:fe:e1:06:42:0f:d0:4b:d4:56:de:87:e7:
         73:92:1b:fc:9c:6d:22:f3:cd:c9:b8:ff:b5:52:5c:a0:8f:b3:
         be:fd:ce:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:46:23 2025 by rpki-client