Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
File:                     9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft (raw, json)
Hash identifier:          MC6c83OtjH1F56j592yBqdFsV+5e244tRW3z63Fo9hA=
Subject key identifier:   81:F4:A0:1B:B0:5A:F0:A2:1E:3E:C8:0A:B6:EF:FD:0E:E9:C3:74:CE
Authority key identifier: F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
Certificate issuer:       /CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Certificate serial:       0197B70EE55EFBFD1500F09B445784AF4B89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
Manifest number:          0C96
Signing time:             Sat 28 Jun 2025 15:01:36 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:36 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:36 +0000
Files and hashes:         1: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl (hash: hZUKxeBf05AS82Y0avWu/J4XwGHNe84O+uKh+8LHw14=)
                          2: lTwG7fexEhfG1KlVMWVQwuwbbtc.roa (hash: bfD7+ofvPCOaA8CmUpbLhJtSVYv9giSBukJUfQkg6wo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:e5:5e:fb:fd:15:00:f0:9b:44:57:84:af:4b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
        Validity
            Not Before: Jun 28 15:01:36 2025 GMT
            Not After : Jun 29 15:01:36 2025 GMT
        Subject: CN=81f4a01bb05af0a21e3ec80ab6effd0ee9c374ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:94:62:98:6d:7b:fc:3b:cf:a0:41:bb:f3:34:
                    f2:52:73:5c:64:8c:6c:d8:54:cd:75:87:17:a3:ba:
                    a2:bd:01:b9:38:00:3e:c3:6b:c4:5a:f5:9b:d6:22:
                    1f:28:c8:1e:43:26:b0:8c:33:22:ee:0b:a9:97:55:
                    1e:b2:59:a0:d0:99:f6:74:eb:0a:13:f7:f5:9c:7f:
                    27:cf:54:f0:1f:df:bf:62:aa:4b:6b:64:29:4a:59:
                    73:b8:15:ae:d3:25:eb:53:ac:ec:80:c8:59:ba:51:
                    3a:71:8a:06:51:a2:bd:6a:78:9d:61:5b:8d:84:e4:
                    f3:b7:f8:31:ee:11:ce:7d:25:0c:f0:9b:f5:6a:d5:
                    d5:5f:98:bd:38:c6:46:06:06:9a:3c:2b:f3:35:8c:
                    3b:57:de:e2:59:cc:95:6c:48:60:76:fe:e0:cc:3f:
                    e0:2a:c9:31:7b:59:15:ef:1e:92:6a:95:bc:01:67:
                    d0:44:6b:af:10:b0:8a:79:f4:1a:ed:0a:d4:5b:67:
                    19:12:88:1e:7f:57:01:4c:1b:4d:33:c9:f0:40:80:
                    e7:eb:c2:f7:61:10:04:63:5b:ad:ae:37:55:2d:4b:
                    43:6b:00:3d:5d:8a:cc:d4:91:58:a6:b4:9a:6a:6c:
                    f3:4b:3a:11:b8:76:2e:0e:9c:18:e9:b8:a4:a9:1a:
                    ce:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F4:A0:1B:B0:5A:F0:A2:1E:3E:C8:0A:B6:EF:FD:0E:E9:C3:74:CE
            X509v3 Authority Key Identifier:
                keyid:F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:92:39:54:b3:e0:e1:d3:ac:38:25:16:4a:0c:27:ab:a7:2b:
         6e:7a:c5:fc:1c:0c:d7:50:13:0c:44:fb:f8:55:ce:e3:d4:8e:
         0f:89:40:58:22:39:4f:38:e6:32:57:bc:9b:b4:2e:29:f0:33:
         e6:75:54:23:e5:f1:05:eb:1e:bf:e1:6e:8f:a1:78:84:e5:cb:
         c4:d5:53:66:19:9c:14:48:f1:27:47:b9:cf:96:05:ab:94:63:
         93:bb:25:9a:0f:92:21:46:5c:5f:cb:22:11:7a:16:13:ca:ee:
         93:b1:23:22:a6:12:28:01:71:b8:98:ba:d3:d7:d0:f0:02:a6:
         39:58:bf:63:39:1b:21:de:8c:d7:39:92:be:0f:d6:f2:bf:13:
         83:8a:9c:07:16:be:f3:ac:3c:53:21:f4:50:20:22:e3:74:a4:
         f0:b5:1c:44:77:e5:a8:88:aa:e1:5b:99:ae:b4:43:de:9c:ab:
         78:a5:bf:c3:9b:e0:68:e1:da:e8:57:4f:2a:4c:1a:cc:9e:45:
         ce:8b:1b:04:05:55:de:dc:2b:67:80:f7:b5:27:91:9e:3c:36:
         cd:b3:24:ec:72:72:35:f7:a8:ee:84:c6:6a:c1:41:d6:03:12:
         ae:00:d0:5b:54:77:2f:36:72:41:c0:ff:80:2a:7b:58:86:d3:
         3c:71:ac:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:14 2025 by rpki-client