Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft
File:                     c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft (raw, json)
Hash identifier:          eg/5IZ820WyvurmszIRLMPcOqV5ecRZfLv1ryLDC/fo=
Subject key identifier:   00:4F:36:6F:82:A1:F6:95:A0:38:1B:EA:F6:99:8C:3E:30:EF:EF:30
Authority key identifier: 73:D3:13:67:60:85:64:D8:78:3B:B2:42:48:6E:93:D6:50:6E:7F:95
Certificate issuer:       /CN=73d31367608564d8783bb242486e93d6506e7f95
Certificate serial:       0197B74563D433F448997EDF10AB96EFA14D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 16:01:07 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:07 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:07 +0000
Files and hashes:         1: c9MTZ2CFZNh4O7JCSG6T1lBuf5U.crl (hash: GKZZwGerMePycRZq1vojIdBlMI72gZdwpIlfeDIOCLU=)
                          2: zXpgIfivUxV3ksiBOIvLcsg5wsg.roa (hash: kEoJUet4XPH+HygffLp7TrLFhJPdEY2uJaOE3uj/HMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:63:d4:33:f4:48:99:7e:df:10:ab:96:ef:a1:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d31367608564d8783bb242486e93d6506e7f95
        Validity
            Not Before: Jun 28 16:01:07 2025 GMT
            Not After : Jun 29 16:01:07 2025 GMT
        Subject: CN=004f366f82a1f695a0381beaf6998c3e30efef30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bb:8c:00:97:d4:40:1f:9a:be:d4:02:a4:d0:
                    48:94:45:9c:97:08:19:4b:be:58:1b:b0:cc:3a:87:
                    1c:dd:9c:5f:2d:9b:6f:dd:ca:f0:f4:f4:99:ba:36:
                    00:d0:c9:a8:50:c1:50:57:db:f6:39:18:9f:38:67:
                    d1:56:04:fd:8c:ab:d1:f6:31:7c:98:86:9b:6f:c7:
                    d0:ac:87:d8:b5:d0:89:5c:32:ef:49:1d:d5:fd:bd:
                    d4:0c:4f:63:11:eb:cc:c8:2b:76:e3:ed:d3:c2:6e:
                    00:12:fd:35:06:bd:14:03:66:3a:0d:fe:6f:83:f1:
                    26:63:3d:49:f4:82:2f:a8:33:2a:6a:14:4b:b2:f9:
                    ce:4e:24:b2:20:3b:c7:be:09:88:23:df:bb:ec:41:
                    8f:45:4a:0f:de:a9:a4:d1:a0:d0:ff:32:5d:59:a3:
                    13:9f:11:aa:6a:8e:17:41:8d:c5:a5:17:79:77:66:
                    72:a6:4f:79:9e:b7:11:53:05:db:7c:d6:b0:1d:c7:
                    f6:25:e0:5c:e0:75:56:1e:91:de:8e:21:4d:da:3c:
                    f6:de:2c:52:03:31:76:84:9e:af:3b:42:eb:96:ef:
                    ea:1c:ee:75:61:29:6a:59:35:39:3e:69:45:25:ab:
                    a3:5a:e6:08:57:d4:28:0b:b3:6d:e5:e5:0f:fb:51:
                    04:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4F:36:6F:82:A1:F6:95:A0:38:1B:EA:F6:99:8C:3E:30:EF:EF:30
            X509v3 Authority Key Identifier:
                keyid:73:D3:13:67:60:85:64:D8:78:3B:B2:42:48:6E:93:D6:50:6E:7F:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:42:b1:77:63:b0:ab:2d:8a:de:a3:71:62:79:e4:66:e0:3c:
         83:a2:86:8a:93:3d:a1:1d:8c:af:57:10:50:4e:33:96:33:41:
         28:77:86:d6:98:87:1a:d2:11:7c:43:bf:d1:b8:75:7b:ab:69:
         fc:e1:a3:26:16:70:34:6c:ff:5d:4d:1a:94:c9:c1:48:09:57:
         5c:01:14:b7:0b:0a:d9:33:f1:37:38:34:06:a3:3c:86:36:78:
         3a:93:25:a5:3e:29:c9:9b:40:83:f2:a7:d0:9f:cb:b3:a5:c2:
         50:c8:13:1c:7a:bc:21:20:72:51:4b:b0:21:7a:69:6d:ee:7c:
         4f:c6:87:38:51:21:5e:97:f8:60:10:89:c8:6e:d1:8a:df:8b:
         24:99:50:4c:a2:5e:2d:ff:25:60:59:c0:74:71:ab:1a:f2:ff:
         fb:bf:ca:55:9b:be:bc:17:01:b4:32:8e:45:aa:6f:d9:a9:bd:
         73:3f:0c:cd:16:81:9e:d8:0e:d1:95:f0:89:79:b5:5c:88:e5:
         62:7a:af:22:4b:04:29:21:56:f0:5e:53:ae:3e:9d:39:7a:57:
         e2:6f:6c:68:8c:38:97:6b:10:d7:27:11:4b:2f:5a:2d:53:50:
         75:98:ba:ec:03:97:af:95:e0:90:98:ed:b8:2e:cb:04:5e:0c:
         8c:e8:82:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:28:11 2025 by rpki-client