Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft
File:                     n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft (raw, json)
Hash identifier:          duFfBGCiNjOeJpIwbz3i9NmSkIA+5DObDKH4HxgHVvc=
Subject key identifier:   5B:AA:7F:56:72:A4:12:29:F9:A9:5E:B1:AB:D1:16:94:46:15:28:24
Authority key identifier: 9F:FE:26:F7:D2:02:9C:F1:93:31:37:01:EA:C3:FC:9B:DB:B8:94:D4
Certificate issuer:       /CN=9ffe26f7d2029cf193313701eac3fc9bdbb894d4
Certificate serial:       0197CB39F3294902EB4693041752DB75781E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft
Manifest number:          0357
Signing time:             Wed 02 Jul 2025 13:01:02 +0000
Manifest this update:     Wed 02 Jul 2025 13:01:02 +0000
Manifest next update:     Thu 03 Jul 2025 13:01:02 +0000
Files and hashes:         1: n_4m99ICnPGTMTcB6sP8m9u4lNQ.crl (hash: wzUdbuZJeeDgnih7vaDBoGPRV3D1rEJW9ezhZTiA2i0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cb:39:f3:29:49:02:eb:46:93:04:17:52:db:75:78:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ffe26f7d2029cf193313701eac3fc9bdbb894d4
        Validity
            Not Before: Jul  2 13:01:02 2025 GMT
            Not After : Jul  3 13:01:02 2025 GMT
        Subject: CN=5baa7f5672a41229f9a95eb1abd1169446152824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:54:c7:4c:de:7c:14:8b:af:fa:e9:a6:51:f3:
                    a2:6e:5f:07:2f:97:d6:f2:47:2a:65:87:a0:38:fe:
                    57:b4:d5:b1:f0:bc:09:27:3f:7f:3d:9b:a3:22:59:
                    83:c9:67:f3:19:95:93:57:a9:6f:a9:78:da:cb:d0:
                    29:3f:bd:4f:12:72:a4:3a:6b:86:2f:76:ff:5f:6d:
                    89:28:09:86:94:f9:3e:2e:51:b6:ab:e4:72:68:ce:
                    1d:25:32:c2:bc:87:52:e6:bc:ef:af:2b:5a:0e:5a:
                    72:f1:f9:4e:17:a6:e1:9b:5d:27:15:c5:23:10:13:
                    c5:10:75:45:0f:1b:ae:59:a8:ea:a7:46:1c:1c:88:
                    db:d2:c0:88:c6:f6:db:a6:f1:c4:45:8f:ed:70:6a:
                    88:4e:4b:19:f9:80:26:46:bf:99:f9:d1:28:57:0e:
                    08:06:a7:e3:ce:34:bf:55:13:f6:a8:ba:6f:5e:c0:
                    73:c2:2c:26:b2:a1:1d:ab:49:d7:08:ed:2c:81:39:
                    7d:49:82:cd:42:c0:f2:59:ef:77:80:32:14:ce:3a:
                    b4:95:28:8f:6d:52:cc:33:62:fc:ee:99:71:94:41:
                    87:48:92:9e:18:e9:1b:65:62:19:bf:11:88:19:bf:
                    c1:9e:7f:05:17:52:98:ae:0c:d4:29:35:9c:20:aa:
                    70:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AA:7F:56:72:A4:12:29:F9:A9:5E:B1:AB:D1:16:94:46:15:28:24
            X509v3 Authority Key Identifier:
                keyid:9F:FE:26:F7:D2:02:9C:F1:93:31:37:01:EA:C3:FC:9B:DB:B8:94:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:c2:3d:de:50:f6:a0:07:74:80:3e:42:c9:e1:5b:e3:28:72:
         50:6c:72:c3:d8:e4:0c:ed:82:ab:99:0d:1c:4b:91:08:e2:46:
         a4:45:be:b5:6d:08:5f:78:52:30:72:e8:7a:25:b4:46:16:f2:
         4e:6d:5e:93:29:37:a8:59:a6:cb:3f:9e:30:56:ee:86:af:32:
         f6:3f:f7:dd:78:ff:e0:96:98:ff:f1:5b:19:87:03:5b:5b:44:
         28:49:96:75:dd:e1:32:44:7e:63:11:b4:19:1e:5b:a5:35:88:
         98:e1:96:78:cd:8b:e2:b3:32:69:a4:c3:db:08:2a:31:99:06:
         87:52:74:ec:d2:a0:9e:e4:e5:9f:da:14:d7:5e:83:f4:5c:00:
         8a:0b:b4:35:00:04:d5:cb:dd:66:2f:e6:04:e1:cb:b5:d4:f0:
         6a:b4:28:bf:cc:a0:94:7b:ea:56:ac:b7:a2:45:68:fe:7a:d1:
         6c:d3:59:3d:a8:71:70:a9:e7:87:b8:8f:ed:10:6b:a4:82:63:
         28:b9:12:d6:3e:e6:5a:b5:07:1d:c0:70:21:dc:ed:b5:fc:35:
         31:50:51:a5:34:b7:02:e1:43:5c:a6:be:20:57:1d:3d:d1:81:
         36:05:a1:98:7f:d8:00:4a:38:d3:fe:c2:51:57:50:21:2f:4d:
         c2:c5:a0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:43:39 2025 by rpki-client