Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
File:                     1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json)
Hash identifier:          XMbhaouJpI7ti02i2W0Vf9yFx544pXRICL8P4bIONMY=
Subject key identifier:   01:39:99:C2:F6:80:4F:94:29:0D:19:FC:EB:A2:85:69:6C:DE:D9:C4
Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
Certificate issuer:       /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Certificate serial:       0197B6D751C7CD8C5ADFFA6D762A3799875E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
Manifest number:          069E
Signing time:             Sat 28 Jun 2025 14:00:53 +0000
Manifest this update:     Sat 28 Jun 2025 14:00:53 +0000
Manifest next update:     Sun 29 Jun 2025 14:00:53 +0000
Files and hashes:         1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: w6GA2rZTZZcwY5Tx1TjvPaAOAT3ASyCyWJz1Ll5UQF0=)
                          2: goyOFyNzCSnjNoSGUslWBJblZKU.roa (hash: gOANPYh3QzN79F/MQE5xUnJrm2gWdrunUVxAKHrrHlk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:51:c7:cd:8c:5a:df:fa:6d:76:2a:37:99:87:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
        Validity
            Not Before: Jun 28 14:00:53 2025 GMT
            Not After : Jun 29 14:00:53 2025 GMT
        Subject: CN=013999c2f6804f94290d19fceba285696cded9c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bd:3c:6f:ab:e8:9a:4a:da:3a:0b:86:10:8c:
                    d0:92:d5:19:7f:60:08:d3:5c:90:a4:bb:b9:44:c2:
                    14:fb:25:3b:cc:df:39:38:7a:17:5a:d7:31:5e:32:
                    56:7f:ac:a3:d1:2d:eb:48:a9:ed:86:77:71:e3:d2:
                    f6:3a:86:05:26:02:24:94:2d:81:b9:79:ef:1a:29:
                    38:9a:8d:57:0b:c5:8f:cb:35:a5:98:c1:48:10:d7:
                    39:0e:ff:df:d3:f5:1c:3d:50:62:63:3f:3b:cc:8f:
                    7b:56:16:31:ea:26:d3:d2:1c:33:06:4f:d1:4e:32:
                    03:4f:f2:d0:ab:2b:99:00:9c:63:91:23:b8:ae:c0:
                    50:b2:3d:dd:0f:43:ea:68:0b:79:d7:24:df:12:41:
                    8d:38:11:e4:9a:20:c9:69:00:85:01:78:67:c7:a4:
                    3b:e6:98:78:88:24:30:dc:46:f5:c5:c1:08:33:49:
                    63:5a:95:31:7b:cc:cf:2a:41:ce:fd:0b:5f:2d:54:
                    43:ad:85:0f:52:74:6d:7a:8a:a1:d2:a9:3f:b6:89:
                    91:6c:d1:b3:8c:4f:ce:c1:38:81:27:b1:42:19:39:
                    19:be:25:56:c0:84:46:e2:80:68:fa:52:a7:9a:9d:
                    85:d1:f1:b3:63:de:ef:ff:96:88:38:f1:f3:65:66:
                    45:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:39:99:C2:F6:80:4F:94:29:0D:19:FC:EB:A2:85:69:6C:DE:D9:C4
            X509v3 Authority Key Identifier:
                keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:12:40:9e:f4:3a:b0:24:14:98:17:bc:89:8f:86:f7:8e:f9:
         eb:84:89:37:a2:a3:fb:4b:87:f2:cf:25:69:42:0b:30:65:7d:
         68:f6:1c:b4:35:95:bc:db:ac:37:90:4d:b7:45:32:4c:79:41:
         34:73:fe:59:0c:05:bf:72:bd:6e:a4:5d:89:58:9a:cf:45:74:
         59:94:94:c9:17:06:f6:bf:79:53:75:9a:53:bb:47:45:b7:b4:
         47:83:9e:5a:94:80:2e:d3:24:6d:4e:d2:ce:63:d4:92:e0:5e:
         9e:50:eb:00:30:a6:b1:32:4f:17:0b:97:0d:b5:45:d1:19:60:
         4c:f5:e0:0d:5c:a3:a6:cc:81:70:4b:f8:9d:89:cd:3d:d5:d9:
         9f:78:4e:a6:e0:e6:e0:cd:46:6d:08:28:11:46:46:15:8c:da:
         b3:f1:14:5d:e8:2f:ba:51:a6:f2:1a:9a:7c:27:b0:d9:65:82:
         65:e5:6b:1e:82:c5:b7:44:b8:6f:b1:d2:7e:e5:72:b4:37:2a:
         a1:d6:88:e8:0c:66:a5:d5:ff:93:b9:56:d1:ec:ea:e2:0c:b4:
         63:a2:cd:91:a8:f8:0d:ca:95:90:a7:c6:04:e5:d8:17:e4:cc:
         c6:91:cc:95:a5:d6:3f:c4:aa:0f:d7:cb:ed:4c:4f:7c:0c:88:
         82:36:6a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:34 2025 by rpki-client