Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
File:                     9r15bwtjNc_hKKXPm5fudoCC7Y0.mft (raw, json)
Hash identifier:          a/cNFZqFpqEYjGgU5036CCUcfai3ZZH00Noyu7Ro0ME=
Subject key identifier:   33:B6:25:2F:AA:F4:01:26:9B:F8:BA:EA:7E:5D:73:7E:01:F9:F8:2F
Authority key identifier: F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D
Certificate issuer:       /CN=f6bd796f0b6335cfe128a5cf9b97ee768082ed8d
Certificate serial:       0197B6A0D02CA7239313D7D359C7B82AEB20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
Manifest number:          AD
Signing time:             Sat 28 Jun 2025 13:01:21 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:21 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:21 +0000
Files and hashes:         1: 9r15bwtjNc_hKKXPm5fudoCC7Y0.crl (hash: 9orr2xxdZy/TPQDLsRGtxPmk2nTWFsTE6+qIruzUklo=)
                          2: RIbTLj7txNwoYxh7oe27Ga8iD9g.roa (hash: b58BSl0OG9Cy3uXrPooEMPlzPzUnf3IVg7gnhdmepqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:d0:2c:a7:23:93:13:d7:d3:59:c7:b8:2a:eb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6bd796f0b6335cfe128a5cf9b97ee768082ed8d
        Validity
            Not Before: Jun 28 13:01:21 2025 GMT
            Not After : Jun 29 13:01:21 2025 GMT
        Subject: CN=33b6252faaf401269bf8baea7e5d737e01f9f82f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bd:b9:0d:db:fe:97:65:06:96:c2:dc:d0:72:
                    db:56:4b:14:31:46:ad:f6:23:38:3a:c4:3c:74:80:
                    11:7d:df:38:28:10:32:46:31:13:a3:9d:ae:37:70:
                    4c:99:47:19:84:c9:53:16:19:74:14:69:94:54:ed:
                    58:3e:fb:4f:e2:5f:95:fc:29:ca:8b:31:7b:fd:f5:
                    f0:9b:87:60:01:a1:bc:ce:21:eb:61:34:fa:aa:11:
                    90:3f:c3:67:4d:26:9b:58:bf:7d:bc:f8:1a:f1:5d:
                    bd:b3:1b:5f:f5:fb:0d:78:ba:bd:36:3d:a5:78:3e:
                    e3:72:cc:3c:8b:b0:b1:fe:35:e0:d1:68:f6:0e:3d:
                    2e:85:ff:3d:b3:f4:23:6c:ca:a7:47:fc:ef:f1:10:
                    07:22:8c:2a:fe:bb:03:96:3a:e0:7c:82:5f:27:de:
                    48:06:d9:63:a2:d8:f6:bf:a4:6a:45:6c:33:cb:9c:
                    28:6e:e2:e4:bc:e4:8b:c8:95:4d:f1:7c:d3:fa:54:
                    73:a9:e8:47:ed:df:c1:e4:30:48:88:ae:6d:25:66:
                    fd:38:e5:ec:0a:cd:ed:74:ed:2b:d6:87:34:8f:b3:
                    fe:67:06:3f:34:7f:e1:f6:c4:60:6a:da:a6:6e:37:
                    18:a2:84:bb:27:42:23:c7:1a:42:90:dd:03:d3:3a:
                    08:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B6:25:2F:AA:F4:01:26:9B:F8:BA:EA:7E:5D:73:7E:01:F9:F8:2F
            X509v3 Authority Key Identifier:
                keyid:F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:dd:e3:f7:26:7e:4d:dd:52:51:b3:fc:fb:90:af:1d:07:c0:
         76:19:6a:f7:7a:d8:6c:99:07:d2:df:40:1a:2b:49:b7:d9:dd:
         95:45:de:3c:25:4b:d6:01:17:12:32:ea:ab:1f:a6:06:87:1b:
         74:13:5d:ed:83:a4:da:0c:e5:01:b7:9f:ae:50:8f:90:cc:8a:
         0b:c8:43:8c:96:82:04:72:15:35:d1:89:0c:58:54:6c:3e:7f:
         75:2b:77:97:c5:27:ba:fc:91:e8:f7:cf:41:5d:38:ec:ac:93:
         ef:62:9f:ba:5f:96:7e:91:dd:69:b0:23:ab:9c:3c:55:7a:b9:
         62:44:e3:d9:a7:59:98:a6:eb:03:5c:7f:1c:d4:64:58:44:1d:
         e4:b8:b0:48:03:a3:3f:9e:1e:3b:3d:27:38:ff:a0:a4:21:d2:
         df:47:e5:0b:c5:4a:9c:be:f7:34:83:6b:90:23:e3:e1:e5:25:
         e7:10:21:41:88:df:98:71:bd:68:7b:88:ef:37:95:54:9c:f8:
         e9:ba:0e:57:59:64:40:e8:e9:cf:a0:e4:1a:f7:b0:48:9c:35:
         65:25:b4:3b:99:8f:69:39:ba:d9:62:a8:a5:d1:43:53:84:e8:
         20:b5:16:77:c5:e4:68:e7:61:7c:d0:7c:5c:69:a9:02:e7:56:
         f3:f3:b4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:07 2025 by rpki-client