Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
File:                     1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft (raw, json)
Hash identifier:          xOM7MitYJI0WRLlKlJ/+PYslUtkef2V++ukSFhkcxcg=
Subject key identifier:   DD:EB:36:AD:BA:A8:11:1E:39:54:8D:9C:EB:7B:E5:2E:38:98:5B:A6
Authority key identifier: F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B
Certificate issuer:       /CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
Certificate serial:       0197B6A0E1B9E2683ED2CDECADF919241D83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
Manifest number:          04B9
Signing time:             Sat 28 Jun 2025 13:01:26 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:26 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:26 +0000
Files and hashes:         1: 1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl (hash: nFm4M+V2kYI3p4DolNeVxl6Qks8K25hzr3CsZQ27c9c=)
                          2: 9QHkwH3XoDFhii5_H5-wevfnn0w.roa (hash: vBY1ZnWKVkF95bYClA+BXEDvlx1Nx1rI/kqfnvMGLFw=)
                          3: NHqj8wB10WSekKQpmh-HseccI8I.roa (hash: L+izevOgWXTJAUEusaUxSyDXId3hMIswTW9GC9CMwnw=)
                          4: VDPu88hH8S8YAOXUCG9WApGM4Ak.roa (hash: 4CZLCtvGc/kQTFKa66ISm8BXViC73GORAMW68kpOvho=)
                          5: oQ8sIcgXpXuSUG7cNHtxBRazqc0.roa (hash: AjGNR5wRMBSzjpjmL0iwZdQfVi3IKmsNzSO+kwX6G8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:e1:b9:e2:68:3e:d2:cd:ec:ad:f9:19:24:1d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
        Validity
            Not Before: Jun 28 13:01:26 2025 GMT
            Not After : Jun 29 13:01:26 2025 GMT
        Subject: CN=ddeb36adbaa8111e39548d9ceb7be52e38985ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:61:31:9d:d2:f2:c2:6b:5f:7a:ae:ef:2b:f5:
                    99:66:bc:a9:02:48:71:8c:a0:33:42:f8:e7:b2:44:
                    e8:51:bc:74:dc:ba:07:cb:86:bc:46:18:77:72:3b:
                    84:f1:48:7f:1c:40:73:2d:3d:8e:b9:5d:1f:69:88:
                    dd:a2:ba:11:19:4b:13:9a:99:63:ae:95:fd:d7:e0:
                    a3:a5:c7:5c:4f:dd:ef:af:be:0c:9b:05:30:72:c6:
                    64:94:d2:12:7f:fe:9e:69:d2:c2:9c:3a:2d:69:a6:
                    38:9b:2b:0e:ed:ca:c6:1c:54:42:f8:32:dd:5d:9c:
                    ad:d7:b3:7c:bc:8e:b1:57:98:86:d1:cc:0b:32:8d:
                    70:55:73:8f:c8:56:68:98:4c:fe:b4:2f:20:47:dc:
                    78:1f:4b:d3:11:7e:9f:bd:14:0a:1d:1b:b9:24:ca:
                    d3:3e:cc:c1:c3:9f:49:21:e9:e8:df:94:b9:f8:48:
                    60:68:15:7c:56:09:05:c7:0e:2e:c6:aa:b9:77:fb:
                    16:ec:04:63:3f:6a:15:c6:16:2d:fa:4f:7b:62:0e:
                    e8:0a:2d:02:dd:3a:1e:57:61:77:b8:37:27:db:43:
                    ed:f8:f3:58:e4:f6:8c:7f:7a:2d:bb:89:49:13:65:
                    17:1f:95:0c:3c:7d:29:09:46:ce:91:49:00:89:02:
                    df:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EB:36:AD:BA:A8:11:1E:39:54:8D:9C:EB:7B:E5:2E:38:98:5B:A6
            X509v3 Authority Key Identifier:
                keyid:F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:3d:33:07:17:cc:b8:84:da:1c:b3:1e:56:cb:5f:fa:59:07:
         d0:ba:03:8a:b8:fb:c6:1e:ca:59:bb:49:06:fb:3b:fb:03:02:
         43:47:57:6f:ec:b3:47:4a:e6:59:09:89:fc:32:70:9c:87:cf:
         c5:90:55:9d:e4:08:4c:a3:98:eb:15:a8:8f:9f:54:63:49:08:
         41:91:ec:dc:b3:f9:55:fc:8a:5d:8d:6e:24:17:af:0d:18:ad:
         c7:4a:b8:7a:8e:94:73:3c:f2:13:fb:c4:5f:e0:93:fe:6e:05:
         a2:31:0a:fa:66:16:77:dd:81:7c:df:7b:26:87:3f:88:ff:b5:
         58:04:a8:d3:9a:f0:e6:8c:84:b6:fd:7e:63:37:bf:d0:07:34:
         f4:9b:22:ad:fa:c5:1e:71:4e:f3:e2:e2:ad:53:4c:b8:70:da:
         25:8a:02:c9:25:56:e6:df:7d:fc:80:d6:ec:31:cf:3e:17:be:
         01:bc:13:a3:02:ca:dc:87:40:1b:59:0e:aa:1c:4a:ca:1a:54:
         0a:36:91:a4:65:47:51:c4:2c:cd:0b:ca:f9:ba:f3:e7:59:32:
         20:e5:36:26:1b:91:9e:08:76:57:60:d5:c6:10:78:90:b2:88:
         49:61:0f:11:cb:1f:ac:6d:5d:c2:6e:17:ba:f2:e0:ac:35:04:
         99:76:c9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:24:41 2025 by rpki-client