Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
File:                     9vwoeVAOHrgIVXBc-ENeA2NRN94.mft (raw, json)
Hash identifier:          jfwR4HIu47Kr1ZIZxQJBmJRQ6XY/ZZy1bCVEDotS1es=
Subject key identifier:   37:5D:2B:AD:EE:6F:74:B7:CE:89:DB:C0:F6:DB:03:E9:3C:59:F1:A9
Authority key identifier: F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE
Certificate issuer:       /CN=f6fc2879500e1eb80855705cf8435e03635137de
Certificate serial:       0197B6A0AD2C6D9A1136AFC9DD5C3F4EF561
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
Manifest number:          0607
Signing time:             Sat 28 Jun 2025 13:01:12 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:12 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:12 +0000
Files and hashes:         1: 9vwoeVAOHrgIVXBc-ENeA2NRN94.crl (hash: yeZ26DM6IdJs/l8KPCzAiUr532r0tnxAXcJaRqTATZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:ad:2c:6d:9a:11:36:af:c9:dd:5c:3f:4e:f5:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6fc2879500e1eb80855705cf8435e03635137de
        Validity
            Not Before: Jun 28 13:01:12 2025 GMT
            Not After : Jun 29 13:01:12 2025 GMT
        Subject: CN=375d2badee6f74b7ce89dbc0f6db03e93c59f1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:45:b7:c3:f2:0f:09:f3:b1:92:e5:07:06:64:
                    1b:b6:17:7b:ca:0a:c0:16:f0:c6:43:a7:4b:e6:b4:
                    43:cd:b9:c5:00:cb:f3:08:fc:f3:6b:b6:2d:38:05:
                    ec:4b:31:a0:bd:12:44:3d:f0:9a:57:85:74:ea:c7:
                    3d:7a:af:6f:a3:e3:56:09:7d:96:e3:3c:fc:c6:0a:
                    86:80:41:ef:b0:99:a4:6d:e1:dc:49:4c:6b:e9:de:
                    ad:9d:6c:de:fd:06:9d:8e:bf:0a:f7:0c:f5:60:13:
                    28:49:51:0c:af:2b:30:d4:21:34:df:98:9b:a2:bd:
                    85:ad:ba:99:ac:a1:eb:22:c2:48:97:aa:04:eb:bd:
                    99:6d:7d:f8:f4:ca:62:44:42:5e:12:0e:4a:a2:62:
                    f4:bb:6b:54:c4:58:d5:11:80:d9:1f:2f:2b:28:31:
                    f6:e5:0e:22:eb:af:83:89:cc:2f:ec:c5:6e:99:00:
                    18:84:2e:bb:76:c2:83:ef:9b:9e:a4:66:17:f2:4a:
                    8e:7c:0e:f8:8c:ba:73:a1:2d:df:31:f6:cf:ec:72:
                    26:37:af:ec:b3:30:54:f5:74:6e:b6:33:77:41:7e:
                    4f:92:0c:0e:b8:c0:89:ea:7f:23:c4:a9:70:ef:f0:
                    67:d4:6c:4b:2a:4c:24:e4:41:97:ed:b8:76:37:eb:
                    80:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5D:2B:AD:EE:6F:74:B7:CE:89:DB:C0:F6:DB:03:E9:3C:59:F1:A9
            X509v3 Authority Key Identifier:
                keyid:F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d7:61:4a:5d:60:4e:52:66:63:69:cf:f0:1f:02:e9:8b:82:
         27:9f:b0:9e:13:d0:3b:c1:ff:b2:15:ff:99:e3:4c:e7:3a:fa:
         3e:ba:a1:04:dd:97:05:c3:0a:7b:3d:b8:be:dc:95:83:42:12:
         2e:75:df:18:03:5f:d1:d5:b8:d3:5c:7c:0b:12:22:48:ac:9d:
         3c:34:1b:fb:8a:37:ee:5f:e6:85:7d:fe:6e:2b:bd:e3:b0:1d:
         00:9a:2f:95:e5:f6:57:0b:1d:22:68:0a:e6:bf:ef:dd:f5:c3:
         18:51:7b:72:b4:8e:cc:f6:24:41:de:e1:7e:6d:22:15:61:fc:
         f0:77:bd:89:13:dc:db:ba:85:9c:6d:3a:c9:72:e8:e5:e6:18:
         cd:91:bc:f8:07:cb:8d:70:e6:06:b2:07:d8:25:dc:2d:30:81:
         7d:f6:5f:d6:d7:a6:e5:86:a8:6d:f0:24:f3:78:98:9f:df:33:
         3b:d4:c9:41:8c:65:80:4e:a1:51:16:a2:76:dc:74:8e:cb:34:
         00:73:41:7b:32:78:4e:62:ad:14:32:c0:62:f5:8a:61:df:a6:
         f5:9a:da:49:1d:e4:66:97:fd:37:e5:d5:ff:39:00:ce:e3:b4:
         27:89:91:58:6f:a7:98:8c:bb:68:42:2a:d1:b3:3e:73:b7:04:
         65:31:3c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:49 2025 by rpki-client