Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
File:                     S91CzNE9f4p8PtpbVQLY1ty7vhE.mft (raw, json)
Hash identifier:          CG+IY6Qfmu8UGML1APOREEuAbUlwWVC5PLBwm8utAzE=
Subject key identifier:   3F:B2:2A:6F:31:A6:E1:F9:C4:BF:75:B5:40:4B:43:71:48:57:F6:98
Authority key identifier: 4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11
Certificate issuer:       /CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
Certificate serial:       0197B88F785F38C9EA3CAA74E30F973AE765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
Manifest number:          0B63
Signing time:             Sat 28 Jun 2025 22:01:39 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:39 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:39 +0000
Files and hashes:         1: S91CzNE9f4p8PtpbVQLY1ty7vhE.crl (hash: 0zhNbgPCO4bRQbVLMg+ZfoDOV9WjmIr9itXuGKGAgPs=)
                          2: oa49XCli4BnhzjMFZt__xzBFHcY.roa (hash: tJwIQtT+Kk475hshkks2qpfV9lu0TNlB3mE3lLaKnow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:78:5f:38:c9:ea:3c:aa:74:e3:0f:97:3a:e7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
        Validity
            Not Before: Jun 28 22:01:39 2025 GMT
            Not After : Jun 29 22:01:39 2025 GMT
        Subject: CN=3fb22a6f31a6e1f9c4bf75b5404b43714857f698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:39:c0:83:da:1a:d1:da:4c:a7:5b:c1:fc:81:
                    11:5f:28:e8:ca:17:9e:22:4a:18:25:96:fa:e9:45:
                    52:64:6e:eb:cc:80:67:90:ac:72:9c:a4:e7:a8:7f:
                    00:26:76:79:dd:da:47:3b:df:d8:0a:b0:f0:31:70:
                    b8:b1:07:90:f0:45:de:85:b6:91:1c:a3:10:00:3a:
                    c0:ca:84:47:d0:27:d3:71:f5:64:68:28:26:6c:5e:
                    d7:70:ae:d9:0a:07:d8:cd:54:fb:b8:4b:46:f7:d2:
                    93:df:b2:b4:e8:69:98:09:c1:e0:5b:55:80:65:d0:
                    29:d0:1c:10:11:35:da:ba:a1:3c:27:ff:00:a5:90:
                    16:fe:ae:d1:f4:35:1a:89:13:f0:8a:20:3d:55:1c:
                    0e:7d:0b:2a:71:e2:36:14:e5:e1:f0:1a:3c:c1:98:
                    fc:33:35:a4:08:6f:ee:50:47:a5:2a:81:25:0a:98:
                    3f:33:78:fd:7b:49:1e:28:98:ec:f0:5f:9b:2b:74:
                    ff:1e:82:8e:51:96:11:28:00:37:85:7a:87:d0:83:
                    11:64:3f:d8:48:5e:14:a1:32:05:be:78:c1:2d:66:
                    8c:48:f6:d0:cd:7a:a5:ba:51:04:eb:27:88:ed:5f:
                    5c:0b:46:27:ac:01:85:c4:c8:06:ea:87:d1:17:27:
                    bc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B2:2A:6F:31:A6:E1:F9:C4:BF:75:B5:40:4B:43:71:48:57:F6:98
            X509v3 Authority Key Identifier:
                keyid:4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:7f:bc:c6:7c:f0:c1:6a:63:05:4e:f6:34:ad:4b:a9:b7:0e:
         0f:1c:4f:55:39:d2:a4:4a:0f:b1:0f:04:ed:9b:23:fa:33:a4:
         c0:f6:b1:12:af:3c:78:15:c6:ef:d5:42:f9:a5:69:4b:d3:72:
         9a:91:19:a6:a5:cf:30:e1:f7:38:13:0c:b0:8a:96:06:60:17:
         61:62:df:55:56:72:de:e8:10:a8:69:59:f9:2a:76:46:26:39:
         b6:56:a0:cd:62:d4:b1:b6:b2:ff:74:e0:48:d3:9c:a8:29:48:
         fb:6d:87:9c:2b:61:46:58:48:80:db:2a:0e:39:a2:11:77:b4:
         fc:ba:11:ad:c8:8f:4c:32:e9:9d:88:52:0c:41:18:0b:84:0d:
         ad:44:be:58:f9:44:c4:7b:6c:f6:da:03:9d:41:bc:aa:79:3b:
         eb:b9:a3:fc:e6:45:88:44:5f:b1:82:26:bf:81:56:1b:c1:36:
         0d:5f:5c:60:73:b4:8a:ea:a1:b0:fb:d9:20:76:ae:2a:bb:46:
         32:e7:3f:6e:77:1c:3d:a9:00:3b:76:03:18:9d:50:bf:c6:f9:
         29:81:c8:bd:a2:79:6e:30:24:d9:ae:db:bf:05:6c:de:fc:fe:
         43:da:19:5a:7a:09:13:25:3b:f1:fc:02:3e:b5:4a:1a:9f:e6:
         1e:41:c3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:49 2025 by rpki-client