Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
File:                     fG9Mjzo3f0bFUiAJZ4841hVxxso.mft (raw, json)
Hash identifier:          IjBf7YOlHByFm3owgr1gLQbsMLaoaAu7AjEidfq58bQ=
Subject key identifier:   2C:2D:26:8B:D8:71:D6:79:89:3A:77:14:6E:04:11:BC:78:20:49:BA
Authority key identifier: 7C:6F:4C:8F:3A:37:7F:46:C5:52:20:09:67:8F:38:D6:15:71:C6:CA
Certificate issuer:       /CN=7c6f4c8f3a377f46c5522009678f38d61571c6ca
Certificate serial:       01969DF5E11D87B93C9BE862508F45B06CEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
Manifest number:          099A
Signing time:             Mon 05 May 2025 01:00:58 +0000
Manifest this update:     Mon 05 May 2025 01:00:58 +0000
Manifest next update:     Tue 06 May 2025 01:00:58 +0000
Files and hashes:         1: B7oKCLtj5wVT7Rx672od7NSTVbM.roa (hash: zBd0U1lEA6sR+ArBNpdCg/lk4ok0wNXK1hGjWgT7oxA=)
                          2: fG9Mjzo3f0bFUiAJZ4841hVxxso.crl (hash: 2TSt5DFz0Cp99GUC7NJZ+aU8/KB7XOWuOEEnWAI/2Cw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:f5:e1:1d:87:b9:3c:9b:e8:62:50:8f:45:b0:6c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c6f4c8f3a377f46c5522009678f38d61571c6ca
        Validity
            Not Before: May  5 01:00:58 2025 GMT
            Not After : May  6 01:00:58 2025 GMT
        Subject: CN=2c2d268bd871d679893a77146e0411bc782049ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:94:e6:9c:a1:ce:d7:a8:1a:6f:48:b3:b8:f3:
                    14:86:92:1c:d4:57:58:3a:67:6f:d3:56:cf:5e:df:
                    60:45:3b:af:cf:11:50:82:04:45:3f:61:7a:73:fa:
                    0e:11:68:49:4c:af:11:e0:7f:4f:a3:bd:75:ee:4a:
                    49:5a:db:7b:66:e7:2b:d0:34:c5:05:d1:3c:45:42:
                    1e:af:7e:06:f2:82:10:6c:5c:25:85:84:f1:c8:76:
                    e9:a3:f8:37:dd:bd:4d:12:d3:53:63:c6:1d:e6:ae:
                    74:ed:cd:b3:57:99:af:77:d1:73:7a:cb:33:92:3c:
                    46:12:60:e2:72:bd:b9:a4:3f:6e:59:35:a4:c9:a2:
                    7d:18:b6:43:f6:c9:d7:4c:13:4e:17:6e:18:5c:09:
                    17:d7:77:46:ea:c6:ae:c3:5d:c0:03:2b:56:a6:83:
                    02:b6:ca:37:63:6b:8c:db:f8:81:62:47:98:b5:67:
                    b0:46:dd:4f:64:b2:50:c6:5b:d4:ca:4c:42:39:59:
                    15:3a:bd:e7:17:6d:b7:72:bc:72:80:93:57:22:d1:
                    bd:2f:f3:81:87:1a:7f:40:34:b9:99:d0:6e:1a:7d:
                    d1:9f:f5:4a:65:a2:75:72:4a:47:43:0e:c5:7d:3e:
                    1e:59:6c:4c:ea:27:2f:83:8e:ea:de:a0:90:be:a0:
                    53:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2D:26:8B:D8:71:D6:79:89:3A:77:14:6E:04:11:BC:78:20:49:BA
            X509v3 Authority Key Identifier:
                keyid:7C:6F:4C:8F:3A:37:7F:46:C5:52:20:09:67:8F:38:D6:15:71:C6:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:41:f9:77:be:0d:7f:05:b3:0d:5f:af:5b:a2:04:39:34:da:
         5a:4b:01:9c:09:91:8e:ff:ca:9a:78:39:ab:5c:dc:9a:29:44:
         e9:3b:06:26:94:56:96:67:94:3b:67:55:87:f5:25:da:55:60:
         b5:8f:f7:63:ed:de:af:59:a4:8b:e6:59:d0:63:8e:2c:19:77:
         fc:b9:12:f7:c9:11:13:fd:eb:4a:d4:5c:40:0e:84:cd:94:0f:
         e1:c4:6c:92:9f:1e:3e:ac:a5:af:ce:35:e9:e5:c1:63:35:aa:
         52:c9:fe:4a:73:46:2c:b4:29:61:e1:0c:8a:a9:60:4e:f2:39:
         7a:69:c0:79:53:94:42:47:cf:3a:25:87:14:b4:2d:7d:9a:95:
         3c:a0:37:af:49:a0:33:8c:48:84:27:1e:db:79:f7:9a:cb:e8:
         e5:76:47:92:1f:e6:ef:61:0a:45:ca:f5:97:b7:69:d6:a9:06:
         d3:17:79:74:92:5b:8c:00:00:82:64:35:f1:58:3f:12:cf:79:
         7d:a1:ab:70:cd:59:36:61:92:ff:3e:10:86:d9:1f:4c:02:bc:
         96:10:af:71:6f:a8:1d:dd:f2:40:07:ca:62:07:82:0d:16:10:
         65:40:38:07:7e:dc:3b:3c:ee:a1:ee:6f:42:3a:a2:22:c2:51:
         6d:69:39:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:46:07 2025 by rpki-client