Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
File:                     d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft (raw, json)
Hash identifier:          DZsPnQaMxLavILupkyGQbtdmGlghaOs8vWRzaM6jA2U=
Subject key identifier:   7C:B7:8C:9C:83:F0:92:C1:AB:F5:CB:08:01:52:DE:E1:86:9E:03:2A
Authority key identifier: 77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2
Certificate issuer:       /CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2
Certificate serial:       0197B96A7B085AB4633BAA4D5F987A8D5883
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
Manifest number:          0E88
Signing time:             Sun 29 Jun 2025 02:00:52 +0000
Manifest this update:     Sun 29 Jun 2025 02:00:52 +0000
Manifest next update:     Mon 30 Jun 2025 02:00:52 +0000
Files and hashes:         1: cV_xuUl9XuNAw2Is6z6ZV4oiM48.roa (hash: +2riVPNmAsQH9xrBeRoOTXvYeuCg2sjzB0s7i/rn9hw=)
                          2: d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl (hash: hr7bwpyYNyY0Qpvkr7clOV8wpjm5HfJcDLF7M88kiTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 02:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6a:7b:08:5a:b4:63:3b:aa:4d:5f:98:7a:8d:58:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2
        Validity
            Not Before: Jun 29 02:00:52 2025 GMT
            Not After : Jun 30 02:00:52 2025 GMT
        Subject: CN=7cb78c9c83f092c1abf5cb080152dee1869e032a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9f:fa:ed:06:a4:b6:8b:fe:ee:86:42:90:a2:
                    fa:2a:80:5a:d3:59:0b:40:df:e4:c3:5e:fb:3f:f2:
                    13:18:f4:c2:0a:6a:5e:ce:73:e1:9b:65:c1:98:bc:
                    b8:f8:b7:d1:9c:16:44:0f:f2:d6:24:b3:ad:9d:59:
                    e9:08:6e:70:0a:8d:26:79:dc:6e:d5:c8:a0:1e:d5:
                    16:87:e5:80:3e:04:e5:04:b0:da:e4:b7:2e:27:a3:
                    9b:5b:5b:c8:b3:93:80:ea:71:f0:84:4f:31:49:5b:
                    8c:f9:03:08:9b:81:af:e6:27:05:14:a9:7c:cd:4d:
                    e8:fd:26:1c:51:d0:ae:d1:58:84:8c:8c:5f:b9:bb:
                    3e:25:e3:bd:96:13:21:ca:47:8b:f8:28:b8:0a:dc:
                    77:35:de:c2:86:d8:c2:db:4c:29:5c:b1:37:91:25:
                    e9:65:1a:ef:ba:98:e4:27:c5:b9:56:ed:50:64:60:
                    81:74:5e:2c:99:95:a8:3a:cc:77:6e:04:b7:36:2b:
                    3b:85:a8:48:3e:e0:2c:b7:8b:ba:6d:a0:66:e4:ca:
                    86:c0:de:53:2c:c9:e0:ae:f2:42:b2:2f:76:38:ca:
                    fd:b4:14:e2:2d:4a:22:9c:3a:7e:23:8b:b7:35:08:
                    09:df:ac:02:b6:f7:a4:e2:42:be:60:10:ac:12:75:
                    c4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B7:8C:9C:83:F0:92:C1:AB:F5:CB:08:01:52:DE:E1:86:9E:03:2A
            X509v3 Authority Key Identifier:
                keyid:77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b9:ec:ce:40:a4:0b:31:e6:f4:40:9c:76:05:a4:ce:aa:78:
         6b:da:5b:6b:eb:40:b5:6c:96:b6:cf:52:ee:f8:5d:28:35:c0:
         d6:6a:60:ba:37:be:49:87:d7:f8:23:30:9d:1d:b4:44:ed:a0:
         7a:f2:8c:9e:6d:d2:9f:c2:f8:c5:f3:32:6c:1c:4b:a9:ef:2f:
         2a:c6:79:4d:22:2f:7b:d8:c1:be:4b:d4:de:69:92:a7:74:55:
         a1:85:c1:25:84:12:6b:ed:e9:8e:7d:4a:81:6c:cd:2a:70:7d:
         e4:e3:ee:b5:40:2f:74:d6:6d:74:a6:fc:63:f3:35:2f:fa:35:
         67:c0:1c:b4:25:62:22:65:dd:18:18:81:4e:05:8b:fc:bf:9f:
         c0:33:43:90:99:e7:28:06:72:00:cd:b9:d3:6b:9e:5a:39:ab:
         7b:a0:54:0c:4b:f5:70:96:14:23:9c:e0:48:28:97:32:a2:1b:
         8b:b6:e4:d8:3c:5b:08:04:4c:5b:a0:9e:7e:0d:7c:3b:76:e1:
         52:a5:e2:59:ca:8e:a2:9a:0b:72:dc:1a:00:c2:bc:42:a7:b6:
         46:f7:85:fb:17:b0:4b:08:94:ae:bb:13:4e:68:8e:4b:c5:12:
         74:6a:e6:5b:65:94:93:ca:6b:c0:fc:05:94:21:1d:4f:92:6e:
         09:35:14:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:12:52 2025 by rpki-client