Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
File:                     m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft (raw, json)
Hash identifier:          OlsK/D4LvB/mz5N5khWryl+iAO5g35I3JfnEoLiAMK0=
Subject key identifier:   6F:BA:BB:2F:AF:2B:B3:27:EC:96:75:62:44:2D:DB:CB:42:AC:59:E9
Authority key identifier: 9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95
Certificate issuer:       /CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995
Certificate serial:       0196C382804F6ECCD9D4C9374F5A82F29D67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
Manifest number:          1538
Signing time:             Mon 12 May 2025 08:00:31 +0000
Manifest this update:     Mon 12 May 2025 08:00:31 +0000
Manifest next update:     Tue 13 May 2025 08:00:31 +0000
Files and hashes:         1: 6gwfZ0imtXXPhJEbNpqe4SziOnE.roa (hash: Pn+V1Yp5GxtDMsze+Fax5FaJ18PgHU1//S1rPV1x8cg=)
                          2: m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl (hash: PN9U4dsuSXXopS1o5OmeX+wHxPeQ3xQh7c1xz8OiBtc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:82:80:4f:6e:cc:d9:d4:c9:37:4f:5a:82:f2:9d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995
        Validity
            Not Before: May 12 08:00:31 2025 GMT
            Not After : May 13 08:00:31 2025 GMT
        Subject: CN=6fbabb2faf2bb327ec967562442ddbcb42ac59e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b6:30:58:f2:a2:a4:4f:48:ed:9e:ff:2c:66:
                    3d:0f:0f:ea:51:a4:02:0a:a4:aa:13:c0:dc:b1:28:
                    5c:cb:1a:bc:52:5d:bb:ed:43:79:a4:5c:51:d9:b5:
                    6c:9a:90:9a:b7:44:65:31:fc:8b:b2:8c:15:06:63:
                    3b:e1:99:05:9e:34:ef:c8:17:2c:2e:85:37:02:30:
                    ef:91:bf:d5:a9:1a:d2:ae:3e:85:2f:ee:59:41:d1:
                    8f:71:7d:61:ad:73:df:bc:10:8d:4b:4a:de:fc:6e:
                    29:a4:bc:2f:0f:ff:32:15:3e:19:be:fd:ad:0e:ce:
                    82:52:be:19:3e:19:c7:3e:f8:6a:dd:37:aa:9e:fe:
                    59:9a:f4:04:7e:4a:69:c1:82:7c:d9:d6:da:d5:8a:
                    0b:28:66:13:a6:da:d0:01:d1:86:e7:2f:d8:d2:5b:
                    6d:ac:49:2f:0c:73:b0:27:ab:8d:1e:fe:98:e3:8a:
                    82:c4:11:46:49:96:71:98:49:bb:9c:fe:2d:c2:45:
                    fd:f0:2a:d1:5f:c1:2d:9b:b6:9c:1f:34:af:e6:06:
                    f6:57:29:6a:bb:03:b7:ec:d7:2b:a4:ba:f9:f3:62:
                    d6:d4:9a:48:22:47:a0:5f:29:3d:4c:49:d3:e1:d7:
                    4b:bb:1e:70:df:5f:f3:82:0b:ad:7a:bd:e0:8d:f3:
                    c4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BA:BB:2F:AF:2B:B3:27:EC:96:75:62:44:2D:DB:CB:42:AC:59:E9
            X509v3 Authority Key Identifier:
                keyid:9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:78:d4:ad:5a:3e:aa:b1:ca:98:11:c8:f6:35:cd:85:1b:e3:
         6c:75:5f:19:a7:2c:8a:cf:7b:05:9a:ce:0d:2f:36:bc:2e:84:
         ec:99:1c:85:e5:82:c8:63:1b:20:b7:36:a8:44:9e:0e:de:f6:
         2c:2d:ab:f6:97:06:e1:09:ed:bd:77:9e:4a:2b:64:d1:07:22:
         6c:27:55:24:49:9b:95:39:79:36:fb:63:f7:8c:91:b8:26:2b:
         1d:7b:41:3b:f5:37:e7:56:c4:91:6d:50:69:de:37:36:11:30:
         f6:e8:31:f5:c8:fb:af:8c:8c:cd:ff:f8:94:43:75:48:3f:bc:
         42:31:41:1b:07:8e:e9:27:c1:a2:78:54:04:57:65:5a:3d:d7:
         d2:be:3c:b9:e4:53:be:af:32:5b:ae:a1:0a:b7:c7:2e:1d:7d:
         17:38:30:75:75:e9:94:8e:e2:e3:43:25:df:a0:35:42:89:26:
         41:04:05:66:e6:3a:95:89:28:ab:97:db:91:59:4e:5a:fc:c8:
         b3:98:cd:df:04:0d:8c:f9:b9:67:f9:32:3d:df:f6:f9:ad:99:
         64:ff:dd:5f:89:ba:a3:4c:fa:d9:1c:94:f5:e4:23:12:a1:0b:
         9a:6a:59:ac:87:46:0b:49:3f:a7:ec:c3:68:59:58:25:d2:8f:
         85:da:e2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:39:01 2025 by rpki-client