Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
File:                     1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft (raw, json)
Hash identifier:          /7aKYBe9N6JWKNRuKUi49MTPAQ5c84XDUrOwTfpk3ok=
Subject key identifier:   97:50:27:1E:A2:D6:1E:E7:EE:C1:62:9F:82:1D:3A:45:98:56:FE:FC
Authority key identifier: FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
Certificate issuer:       /CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Certificate serial:       0197B8905CE178DAF856A034F89537C68336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
Manifest number:          0610
Signing time:             Sat 28 Jun 2025 22:02:38 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:38 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:38 +0000
Files and hashes:         1: 1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl (hash: Npt50kuekglEd7gUqtnXQ9PrfhX3HczhaiWmMBFHhj4=)
                          2: NZJDMNeawRRaR2kN6M6VUEMWS6s.roa (hash: 4yyzbuml8orMhWCVhBPIpnlBdZcJZlvRc7XP5PPxwGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:90:5c:e1:78:da:f8:56:a0:34:f8:95:37:c6:83:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
        Validity
            Not Before: Jun 28 22:02:38 2025 GMT
            Not After : Jun 29 22:02:38 2025 GMT
        Subject: CN=9750271ea2d61ee7eec1629f821d3a459856fefc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e2:be:b1:3c:02:19:62:77:7c:ec:1f:a2:99:
                    ba:de:6d:58:f1:a1:1a:8e:f7:be:55:41:4a:ff:fc:
                    0c:6b:e4:31:31:71:dc:73:b4:b4:cb:17:d0:de:21:
                    09:9d:01:15:1e:50:da:fb:56:fb:f6:06:f9:25:9d:
                    72:95:8e:5c:b4:41:9a:6a:ea:55:a5:15:80:24:59:
                    77:99:59:b5:a9:8a:4d:2b:f2:e9:9f:ba:89:f1:b4:
                    40:82:bb:97:c9:a1:a9:ff:80:80:ae:31:1f:47:07:
                    9e:65:20:75:27:48:d1:29:2d:0a:20:d2:a1:fd:fe:
                    3a:c9:5d:bc:8e:6d:b7:8f:7a:98:30:f2:31:a8:68:
                    63:72:22:e4:4b:c6:2b:26:08:91:d5:25:17:89:26:
                    8f:81:8e:7d:e0:d7:84:24:66:8b:55:2b:1e:85:86:
                    8f:6d:cc:5e:ba:82:b8:f3:64:04:48:ff:4e:91:47:
                    d8:0d:49:37:05:dc:04:8b:02:aa:48:1f:86:ac:5b:
                    56:03:67:5e:29:d8:5d:a8:55:45:69:ea:07:81:d2:
                    96:65:0b:4c:9f:d1:1f:af:b2:37:a5:0d:51:0b:84:
                    6f:c8:82:23:78:e6:fa:bd:79:c8:d6:c2:e9:fa:d4:
                    a6:15:50:c2:97:f8:9f:dc:69:5c:e8:c3:63:7f:f6:
                    c5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:50:27:1E:A2:D6:1E:E7:EE:C1:62:9F:82:1D:3A:45:98:56:FE:FC
            X509v3 Authority Key Identifier:
                keyid:FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d2:65:53:85:e4:bc:18:d0:4f:97:d2:36:d5:08:6d:f3:a3:
         93:91:6b:94:bb:66:c9:e5:b7:c4:d6:dd:ee:b8:31:2f:a7:ed:
         8d:69:7d:61:c4:a5:bd:6d:e3:66:27:1d:cf:53:c6:c3:76:54:
         aa:ff:fd:79:b1:05:65:20:1d:b8:a5:e3:69:20:a7:98:d8:d7:
         16:f8:d5:69:ef:d6:ef:90:f0:f5:ec:52:3c:87:73:f5:f7:78:
         fa:8a:d3:20:67:37:f0:87:7a:6f:de:c0:ce:08:3a:33:c2:b0:
         71:84:2f:92:cc:6f:61:54:8e:c3:2a:80:ca:e7:22:e8:71:d8:
         db:3f:91:79:68:21:5d:b8:10:c5:89:af:1e:ec:86:fa:35:b5:
         a8:cc:9f:32:97:1e:68:cb:3f:37:aa:f7:e4:c0:ee:8f:03:cf:
         81:fa:c1:08:c8:59:ea:e4:59:0e:f5:a9:e4:e9:e4:8f:30:3e:
         4e:7c:bb:1d:f3:e8:94:7b:ef:d0:d4:38:e6:49:c5:09:36:49:
         53:eb:6a:8c:d4:a8:b4:33:0a:cd:98:50:a4:ed:2a:cd:91:52:
         a0:55:6e:3a:08:e5:75:3c:76:fc:89:9f:5a:60:a0:38:4b:7e:
         d3:b5:9e:89:35:84:27:d7:22:41:d9:1a:eb:9a:71:3d:75:f4:
         4e:a4:50:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:45 2025 by rpki-client