Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
File:                     N9IJppWeI1T3POLyuUEib4MpDIw.mft (raw, json)
Hash identifier:          uAxaWuXyLYEeUcK3R5/yWFJSleNifEHwSglbT6eJgKw=
Subject key identifier:   0F:5C:FD:49:4B:1B:A3:04:3C:45:A0:B3:20:94:CF:29:74:69:C1:21
Authority key identifier: 37:D2:09:A6:95:9E:23:54:F7:3C:E2:F2:B9:41:22:6F:83:29:0C:8C
Certificate issuer:       /CN=37d209a6959e2354f73ce2f2b941226f83290c8c
Certificate serial:       0197B6A0F2C3B831CDD1EDBC3CA41935F545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
Manifest number:          6A
Signing time:             Sat 28 Jun 2025 13:01:30 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:30 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:30 +0000
Files and hashes:         1: N9IJppWeI1T3POLyuUEib4MpDIw.crl (hash: iUl+3h6FYySVfTz/KuZP612eF9ys8MadaX9eDSVbQ9E=)
                          2: p02sjha6oluTWKotOKPITJ53VlU.roa (hash: rLFuslHglQh990YEEpEUg7xz9pfaxlb0KsezlTb7ZC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:f2:c3:b8:31:cd:d1:ed:bc:3c:a4:19:35:f5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d209a6959e2354f73ce2f2b941226f83290c8c
        Validity
            Not Before: Jun 28 13:01:30 2025 GMT
            Not After : Jun 29 13:01:30 2025 GMT
        Subject: CN=0f5cfd494b1ba3043c45a0b32094cf297469c121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c3:4b:fd:8f:65:cd:29:b6:7f:cf:16:f8:39:
                    bc:b8:36:f9:f2:78:4b:80:e0:13:a7:b7:db:05:1a:
                    92:11:89:e4:ef:39:9a:a6:6e:26:17:f4:50:0b:7a:
                    5e:79:63:04:5c:ce:62:c7:24:ae:f9:f5:50:56:0d:
                    b1:fe:75:bc:96:d7:b8:3a:e9:c2:f0:b8:f8:72:63:
                    88:f3:c8:2c:83:f9:76:c1:4f:42:68:b3:b8:9e:e8:
                    1a:38:87:2d:da:9d:66:d3:72:35:3b:3b:68:d5:03:
                    a1:69:8f:62:5b:ff:b3:06:24:41:ff:36:88:9e:4f:
                    f2:da:8d:87:f3:4f:63:26:cb:dc:65:aa:7d:9d:28:
                    3b:b3:16:60:ba:6c:a3:41:d7:84:95:b8:22:d9:45:
                    bf:12:f1:82:48:ac:16:a5:02:19:ca:a5:0d:1c:b8:
                    87:4f:f8:9c:31:3a:19:62:31:bb:6d:a4:b5:a3:97:
                    fb:02:dd:b7:8e:22:72:b5:86:aa:68:8f:8e:30:f1:
                    b6:ba:d8:70:fe:5b:8c:2a:c7:da:7c:52:5a:d9:d7:
                    b0:77:15:59:35:cf:a1:37:dd:c5:46:00:ac:0b:ba:
                    2e:b2:9b:7b:d0:89:8c:a5:73:5d:d4:34:3b:7d:2a:
                    55:ef:91:f1:02:db:5c:6a:69:57:bf:41:56:87:87:
                    ca:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5C:FD:49:4B:1B:A3:04:3C:45:A0:B3:20:94:CF:29:74:69:C1:21
            X509v3 Authority Key Identifier:
                keyid:37:D2:09:A6:95:9E:23:54:F7:3C:E2:F2:B9:41:22:6F:83:29:0C:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:d3:af:72:75:a3:48:0e:5e:4e:a3:85:85:23:dc:29:69:4a:
         56:b3:f4:6f:9b:83:47:7c:ec:f7:db:18:fb:f2:a9:cf:f5:88:
         80:62:b7:25:ff:d0:0a:b6:3b:3e:5b:c9:a4:7e:c9:2b:a1:40:
         dd:3d:8c:c2:7b:9e:f9:e2:fd:57:c5:54:18:82:5b:f3:56:c5:
         26:a2:97:76:b1:95:16:e5:28:15:45:e5:cb:7c:69:fb:86:7f:
         b6:00:e4:cb:cc:b9:7d:f5:8b:0d:e8:e6:dd:0b:7e:48:b1:df:
         31:ce:a5:e8:49:00:f7:e2:5d:f9:e8:18:e3:18:23:74:91:17:
         d6:fc:b9:1b:4d:6a:60:8c:39:ab:43:6c:d7:60:8b:dd:a1:10:
         ce:42:47:ec:39:44:86:f0:10:f4:7c:14:11:bb:3b:e8:cc:a0:
         b6:ba:85:b9:10:53:a0:c7:2c:25:7d:b4:c5:76:31:48:6d:8e:
         3c:56:06:d9:18:a3:6c:4f:c4:bb:7f:5a:e0:fc:28:c7:c7:7e:
         93:49:d5:f0:7a:7b:72:85:02:80:0d:a3:d9:6e:0b:b2:25:18:
         81:2d:93:38:49:b6:c1:de:c5:15:14:22:4b:30:57:e6:13:46:
         51:77:79:e5:8d:b9:aa:0b:28:13:f9:7c:20:53:35:24:f5:f6:
         4b:4e:f5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:22:01 2025 by rpki-client