Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
File:                     9URgWW1tUyQB3jE9-JA2blN21gI.mft (raw, json)
Hash identifier:          v+pmx8JdO9SEOwNVroBsejOQUN0FXPdLTV/dXo8nnNI=
Subject key identifier:   9F:BC:CB:88:91:87:D7:8C:1B:24:9D:62:66:40:3B:44:A5:8E:36:CC
Authority key identifier: F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
Certificate issuer:       /CN=f54460596d6d532401de313df890366e5376d602
Certificate serial:       0196C3B9915789B0ED701D18B6E841A90B59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
Manifest number:          0509
Signing time:             Mon 12 May 2025 09:00:40 +0000
Manifest this update:     Mon 12 May 2025 09:00:40 +0000
Manifest next update:     Tue 13 May 2025 09:00:40 +0000
Files and hashes:         1: 9URgWW1tUyQB3jE9-JA2blN21gI.crl (hash: 0UOj82VulCI5XXiPsFJUJdvGZCJW4bkqeJhyKLqmV34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 09:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:b9:91:57:89:b0:ed:70:1d:18:b6:e8:41:a9:0b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f54460596d6d532401de313df890366e5376d602
        Validity
            Not Before: May 12 09:00:40 2025 GMT
            Not After : May 13 09:00:40 2025 GMT
        Subject: CN=9fbccb889187d78c1b249d6266403b44a58e36cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f3:f7:bf:1e:aa:27:3a:b0:c0:d1:f9:f6:ef:
                    3b:58:44:44:bd:66:94:1a:09:3e:c5:f0:90:13:9b:
                    02:55:6e:4c:02:b5:07:34:65:89:8b:66:c5:1a:90:
                    50:ca:4a:f2:ef:b8:b1:2a:a2:3f:24:02:f1:39:9a:
                    63:02:d8:50:59:0a:9e:e9:41:65:4c:6e:a1:f1:1a:
                    ec:61:c6:55:d8:5b:e0:76:b2:79:d5:13:4c:9d:bb:
                    ec:d0:bf:d5:aa:5f:10:5f:d1:dc:85:4e:69:2a:08:
                    0d:51:0c:80:e0:7e:f9:9d:c3:fc:1b:11:79:c0:af:
                    81:86:99:a7:7c:4e:54:24:4c:08:5b:34:1e:c1:3b:
                    c3:5b:68:43:ce:4b:b8:53:9d:63:cd:cb:00:60:4e:
                    3d:c3:c9:b5:07:1b:e2:66:9d:20:45:30:16:7c:ff:
                    e6:fd:3a:3b:2d:85:37:16:50:f2:1e:c4:98:ef:13:
                    f6:ff:61:1b:b2:e7:77:02:18:0d:37:13:fc:f2:ad:
                    36:cd:b7:38:aa:dc:0a:e7:2d:4d:af:31:78:b7:2e:
                    3c:7b:7f:5c:ae:05:d5:68:67:7e:70:07:bb:85:b8:
                    90:8d:ac:13:09:72:b5:61:87:81:b1:41:5e:c3:93:
                    3d:6b:55:9b:5a:7d:39:16:7d:f4:11:04:01:da:0a:
                    e3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BC:CB:88:91:87:D7:8C:1B:24:9D:62:66:40:3B:44:A5:8E:36:CC
            X509v3 Authority Key Identifier:
                keyid:F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:85:63:8d:80:33:5c:07:87:c7:c4:59:a5:4c:e9:ec:79:d4:
         7b:a7:c6:48:4e:46:ca:c8:bb:e4:af:05:c3:4f:fb:81:76:1a:
         13:5e:0c:46:c1:24:9e:12:8f:94:89:a4:7a:92:89:95:a8:ae:
         31:d7:60:e4:3d:f0:29:37:25:03:b4:4e:3e:cc:7d:00:19:16:
         4a:43:52:69:3c:2a:a8:c2:01:8b:d2:1e:64:7c:bb:08:e9:78:
         0e:06:c9:3c:e9:6e:6a:26:5c:e9:ba:44:71:01:d7:5f:77:a1:
         1b:4f:cb:8c:9b:81:78:55:cd:3a:3f:7d:69:7e:1f:ac:b4:e3:
         74:a1:33:d9:6a:b7:f8:4d:91:e8:37:ac:5a:75:40:5c:64:50:
         29:33:db:d7:dd:66:af:50:d1:86:99:b2:9f:3e:95:95:e5:98:
         4c:87:15:44:51:6b:50:85:08:16:01:12:f6:0a:a4:ef:05:3c:
         77:1f:a0:81:54:d6:d0:57:1b:2c:32:19:5b:a6:9f:c0:6b:02:
         92:0b:16:59:4d:8b:c3:58:c3:f9:68:d1:ce:16:08:fd:78:70:
         3c:6b:25:f1:d1:4c:98:5e:ae:3c:56:b2:99:25:cb:1a:d8:0e:
         11:bb:50:6c:8a:63:68:93:ea:18:d7:2e:f9:82:a1:fa:3c:34:
         2a:d5:b4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:35:15 2025 by rpki-client