Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
File:                     Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft (raw, json)
Hash identifier:          vTXcXlXxsjbnpvO+aGVLmvI4wS948WagWy3bBVnKJvI=
Subject key identifier:   EE:83:01:7B:AC:62:C2:A5:90:D4:94:87:87:E4:00:1B:E9:83:2E:EF
Authority key identifier: 5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
Certificate issuer:       /CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Certificate serial:       0197B77C0017ED8D00270A35FD6715C31EBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
Manifest number:          0F97
Signing time:             Sat 28 Jun 2025 17:00:46 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:46 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:46 +0000
Files and hashes:         1: Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl (hash: Tu2gwrCgYIn7x8vV3CLrmzmb3DM8kf+UsR7fFGlZP00=)
                          2: wonoA_cs_njK19k2rpw4egFrSTU.roa (hash: ng5AEw7xNqDcHFkEECYFEyho12TTUkJenLRXIkEgt5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:00:17:ed:8d:00:27:0a:35:fd:67:15:c3:1e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
        Validity
            Not Before: Jun 28 17:00:46 2025 GMT
            Not After : Jun 29 17:00:46 2025 GMT
        Subject: CN=ee83017bac62c2a590d4948787e4001be9832eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2d:af:9a:3e:57:26:5d:a0:0c:2a:1a:fb:e3:
                    13:44:85:ec:90:49:46:28:99:39:bb:34:c1:2a:48:
                    87:d3:23:f9:9a:d8:7c:e1:89:2b:26:a1:38:17:86:
                    c1:26:f0:fd:8e:a3:8c:0d:30:7f:db:da:f0:de:f1:
                    45:99:62:fb:7a:3d:43:ca:95:61:4d:8d:31:56:50:
                    3b:b9:83:c2:5d:23:04:17:19:3d:eb:0d:e2:5d:22:
                    bc:e3:52:66:f6:6b:41:46:7e:ae:e4:c0:36:5d:ce:
                    df:2d:d0:8b:e0:40:31:b1:c5:1c:2b:1f:fc:dc:93:
                    e0:a2:09:d0:65:bc:87:6a:c1:71:d1:26:6e:bb:c5:
                    58:a6:01:60:d1:90:50:c9:86:42:be:33:78:34:3c:
                    b4:ed:f1:7f:8b:00:fd:27:a1:e3:cb:70:dd:d1:91:
                    b3:be:d2:e8:c3:ac:20:8b:64:02:29:67:37:bc:87:
                    3c:70:a2:7e:55:0a:96:a4:ea:da:72:ff:fb:97:e5:
                    fc:b3:56:50:41:27:83:25:87:c4:ec:c2:ea:59:fa:
                    31:90:7d:70:fd:dc:b9:75:f1:72:53:ae:1e:8a:ca:
                    99:df:1b:1a:0b:49:df:fb:97:80:d0:59:1c:14:e5:
                    a7:63:df:02:6f:3c:6f:24:31:b7:43:9b:27:cf:42:
                    60:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:83:01:7B:AC:62:C2:A5:90:D4:94:87:87:E4:00:1B:E9:83:2E:EF
            X509v3 Authority Key Identifier:
                keyid:5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:9c:fe:33:fd:a2:59:56:99:c4:06:59:20:99:6d:18:c8:90:
         f2:50:74:17:58:0f:13:0f:86:9f:75:dc:06:d1:74:d9:14:02:
         a8:81:00:36:d1:0f:f5:a2:d4:ea:1d:f7:23:5f:c9:45:92:83:
         8d:f9:82:80:e3:92:db:79:8e:be:00:3e:97:49:42:0c:92:b5:
         bd:4a:bd:97:18:75:31:07:fe:14:aa:9f:09:6c:11:90:ea:ce:
         25:8b:d2:e7:41:76:f2:93:10:cb:de:9f:af:18:f7:e4:f5:64:
         01:8f:59:a0:5b:15:32:ab:26:72:6b:02:d9:2e:ed:44:0f:ad:
         43:9b:2e:48:90:3c:ef:9c:6c:ff:66:f8:c0:e5:b7:41:5e:b3:
         66:6a:d1:30:dc:de:73:95:60:59:9c:9c:6a:29:d7:28:44:f3:
         a4:c8:61:1c:3d:eb:d5:94:ff:a9:61:aa:af:6d:db:fa:00:09:
         6e:25:a2:58:79:84:87:3f:8c:b0:51:9d:24:3d:7c:06:26:d9:
         b1:8a:3c:0c:49:83:05:76:65:63:1d:6c:04:eb:83:9b:98:17:
         c2:08:b9:34:f7:14:c2:a5:2c:c2:25:d4:fe:2c:00:37:f6:f5:
         50:80:f7:81:47:e0:3a:d9:52:ac:23:61:28:b5:23:19:86:c4:
         9d:a0:1d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:14 2025 by rpki-client