Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
File:                     9pGrMkX_iVpy3W_wdDw3e28PiaY.mft (raw, json)
Hash identifier:          ZBUvCO48OyfvYSday+7MnXd5b0lX+g0FbDGryx4fCls=
Subject key identifier:   8B:DD:1F:B6:90:7E:B7:80:38:64:61:A9:66:BA:1E:B2:9A:B4:6A:65
Authority key identifier: F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6
Certificate issuer:       /CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
Certificate serial:       0197B6D72ADC7D33948FDB9493B95AD27772
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
Manifest number:          06D4
Signing time:             Sat 28 Jun 2025 14:00:43 +0000
Manifest this update:     Sat 28 Jun 2025 14:00:43 +0000
Manifest next update:     Sun 29 Jun 2025 14:00:43 +0000
Files and hashes:         1: 9pGrMkX_iVpy3W_wdDw3e28PiaY.crl (hash: j84Ug1BTWBZBc4tSJyW+jccgxu56YOLOUF3tgQ6lwLw=)
                          2: NNs7_agCq4a5LGK9vlJAbRyPMSw.roa (hash: /RavIGbCYx2zogfJiuXee/WpGjlrh9UdwbzPF7/qVAE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:2a:dc:7d:33:94:8f:db:94:93:b9:5a:d2:77:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
        Validity
            Not Before: Jun 28 14:00:43 2025 GMT
            Not After : Jun 29 14:00:43 2025 GMT
        Subject: CN=8bdd1fb6907eb780386461a966ba1eb29ab46a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4e:cb:f9:ae:e7:60:89:e0:58:3b:a9:3e:dc:
                    bb:12:14:0b:0f:03:e2:11:da:f5:b0:a1:49:33:57:
                    5e:96:6b:dc:ea:74:8d:de:37:83:3d:8b:d5:bb:01:
                    da:c2:95:2e:b1:54:db:1a:61:6d:a1:d3:9e:f5:26:
                    32:10:7e:fa:46:c1:42:a6:2a:38:05:4b:16:61:b1:
                    e1:b2:76:c6:65:ce:5d:9b:b6:a0:a2:e5:2b:98:42:
                    86:e8:1e:72:2a:6e:d3:c0:e8:9f:66:18:38:af:5e:
                    a3:d9:be:f2:8a:1a:0d:1f:6a:05:dd:3f:b1:56:9a:
                    ed:ca:f5:fe:cb:b6:c3:18:5d:4e:a7:d6:b2:15:2e:
                    b4:fd:9d:44:b6:d6:cb:65:ed:76:d6:c0:be:1a:82:
                    63:db:ea:44:b0:53:59:0f:42:e4:6a:bf:b9:9e:dc:
                    c0:29:31:10:b1:6d:9a:51:65:85:67:6b:46:f0:bd:
                    c5:3f:df:ff:1c:8f:0a:9a:02:81:f0:fe:6a:1e:d0:
                    c5:49:04:fb:b8:34:2b:d7:05:4f:7c:1e:64:72:df:
                    f8:7f:dc:14:d6:ab:6d:e3:27:7c:9b:eb:1c:83:f8:
                    8d:2e:84:dd:05:7a:18:fc:57:84:85:52:a1:04:e2:
                    a7:98:c3:a0:01:be:24:80:ef:97:44:1f:53:7b:ba:
                    f8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DD:1F:B6:90:7E:B7:80:38:64:61:A9:66:BA:1E:B2:9A:B4:6A:65
            X509v3 Authority Key Identifier:
                keyid:F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:1c:3e:88:b1:5c:f0:ae:41:2d:37:d0:72:f3:5d:d1:f2:e4:
         1b:45:81:a8:c5:fc:92:5b:4f:54:e5:ed:bd:aa:0a:da:98:84:
         39:f8:fc:d2:7b:d7:c4:db:eb:e7:f5:86:ad:a9:e4:7f:67:74:
         d2:20:95:ff:96:89:96:a3:62:64:2e:31:04:0d:31:ca:67:9e:
         4b:40:86:48:3b:64:af:62:53:89:8f:1a:a8:cd:ef:60:22:a8:
         d1:ff:40:ac:6a:e1:88:83:48:eb:c1:27:36:f7:2e:11:a8:f3:
         0b:ba:48:e7:12:47:92:b8:3c:91:41:43:0a:46:12:a3:d8:44:
         ca:59:26:d5:fb:47:fa:46:ae:5f:66:c1:4f:bf:24:3b:31:f7:
         40:43:00:e1:78:18:9a:15:5d:30:c9:70:be:38:96:1a:06:f0:
         6a:9c:01:2a:f9:ff:f7:29:67:f7:82:1d:69:94:a1:4e:bf:04:
         39:3c:0f:36:8e:8a:f1:ee:1d:6e:00:04:92:16:ce:da:07:8d:
         b6:cc:6c:34:45:bd:b7:a0:29:38:0c:c6:b1:f5:15:7f:c5:75:
         d1:53:dd:f2:d7:08:a4:23:ba:45:37:81:69:52:bb:d7:d5:2f:
         61:9f:1b:ec:b9:94:31:4a:be:b2:09:70:fa:22:d6:78:21:9f:
         c3:66:77:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:00:00 2025 by rpki-client