Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
File:                     9pglYdLaF5Avg-_-EySZ-C1S8WM.mft (raw, json)
Hash identifier:          p5TbATqFTikPC0/UxwS9bjtbEoW99WXjjvkoY+JS48U=
Subject key identifier:   F6:F8:22:54:D6:69:26:EE:9A:DD:F8:C2:48:FD:38:5A:E3:09:3C:E5
Authority key identifier: F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63
Certificate issuer:       /CN=f6982561d2da17902f83effe132499f82d52f163
Certificate serial:       0196CCF34810F7909AB98309ADF63718D369
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
Manifest number:          12F5
Signing time:             Wed 14 May 2025 04:00:17 +0000
Manifest this update:     Wed 14 May 2025 04:00:17 +0000
Manifest next update:     Thu 15 May 2025 04:00:17 +0000
Files and hashes:         1: 9ab4gsm8HWV3453txi9GuHhETfI.roa (hash: +RCpHHVjRUNbeQhE7D5a86WvNpwACKkVCiWoO5pNIb0=)
                          2: 9pglYdLaF5Avg-_-EySZ-C1S8WM.crl (hash: jYsS7W4kKWQXZWEtOioIWx1URPyfWsGKWUTVs4gdah0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:f3:48:10:f7:90:9a:b9:83:09:ad:f6:37:18:d3:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6982561d2da17902f83effe132499f82d52f163
        Validity
            Not Before: May 14 04:00:17 2025 GMT
            Not After : May 15 04:00:17 2025 GMT
        Subject: CN=f6f82254d66926ee9addf8c248fd385ae3093ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d8:02:da:ad:06:e6:7b:58:01:07:76:b2:85:
                    00:4d:8d:a4:0e:43:27:ba:ed:02:52:90:d7:10:aa:
                    b8:8f:6b:6d:39:7e:60:28:b6:88:8e:06:98:65:4d:
                    79:35:58:16:9b:93:4c:aa:a4:cd:32:da:1f:d1:74:
                    51:4d:34:00:ae:03:78:b7:b0:46:21:17:e6:00:77:
                    c8:4b:74:b2:54:c4:1a:5c:ee:08:d3:4f:84:af:31:
                    fd:88:62:1d:56:78:04:c5:6b:25:bb:97:56:b1:20:
                    dd:0d:1d:ee:99:b3:57:bd:70:81:38:e2:c9:9b:10:
                    7d:6a:c3:cb:5e:89:3d:b2:3e:c1:df:29:6b:fc:0d:
                    d0:34:36:88:66:ed:cc:d4:f2:6f:f0:ca:bf:21:46:
                    25:d7:89:86:db:25:7c:3c:9d:35:78:6f:08:00:f4:
                    c4:f2:08:e6:55:14:92:e7:23:23:91:f2:bc:c7:4d:
                    04:eb:c6:a2:84:cf:fe:40:dd:63:0d:ee:10:f1:41:
                    66:0d:09:f6:f6:59:d1:cd:47:d5:98:b6:be:21:da:
                    b4:e9:f6:e0:77:fa:b4:56:43:27:d6:0d:13:c7:07:
                    89:e8:e6:13:15:d8:8c:d0:b4:cc:9c:49:4e:be:9e:
                    3e:53:1e:16:50:69:6e:9d:bc:8e:8e:e3:a5:de:00:
                    af:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F8:22:54:D6:69:26:EE:9A:DD:F8:C2:48:FD:38:5A:E3:09:3C:E5
            X509v3 Authority Key Identifier:
                keyid:F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:7c:91:3e:10:bc:c3:b9:c0:c0:7d:a5:8c:40:29:c6:44:90:
         cc:82:1a:99:a9:11:3e:a6:ba:3c:21:c8:a1:b4:ca:36:42:87:
         2e:55:49:cb:42:97:50:78:53:94:08:79:5f:aa:49:14:42:2a:
         7a:92:ea:5b:42:99:ae:bc:a5:f6:5f:e1:cd:e2:d9:c1:14:68:
         4a:fe:0a:fd:39:bc:25:0c:29:54:da:12:95:04:b9:5c:80:01:
         33:c2:41:6e:b9:be:88:0d:e0:65:0c:2d:b6:55:e1:da:9e:0e:
         05:2c:ac:3b:74:5f:f4:d4:4b:e0:ff:a0:67:00:14:b5:0a:f3:
         f7:55:5c:ad:1c:47:9c:2a:8b:ce:ff:0c:04:78:1f:47:d7:b2:
         c2:9c:e3:7a:7d:5d:87:ce:a0:c0:96:44:f9:e2:c9:90:d4:b1:
         a9:ca:ec:2c:32:4d:e3:52:4b:5e:e2:61:3f:66:ed:1f:a6:18:
         45:44:51:bc:5b:a7:d7:6e:6b:a6:76:c5:90:04:bd:63:5b:d5:
         d4:d0:63:bf:5b:2e:38:dd:61:d7:9f:26:66:80:0e:41:f2:ae:
         75:bd:30:15:3d:85:0d:76:4a:8c:56:ba:eb:f1:48:fb:e6:38:
         4a:69:1b:3a:b7:f5:e1:48:5b:2a:1f:a1:cb:8e:8c:ff:23:36:
         e6:2c:db:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:29:32 2025 by rpki-client