Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
File:                     9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft (raw, json)
Hash identifier:          eawx+7HZzdE8K+XPThLPrPS70PDaY6k7wMNA4YwtBnQ=
Subject key identifier:   05:FC:8A:1B:AE:DD:29:0E:3E:E4:F0:0C:A6:C5:B2:60:9D:0D:D7:BE
Authority key identifier: F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B
Certificate issuer:       /CN=f5cf73b3e45f772fae1b915690b317344c3f442b
Certificate serial:       0196BBC9174E33AB7B1C860EBE80DECE2E9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
Manifest number:          0BC4
Signing time:             Sat 10 May 2025 20:00:40 +0000
Manifest this update:     Sat 10 May 2025 20:00:40 +0000
Manifest next update:     Sun 11 May 2025 20:00:40 +0000
Files and hashes:         1: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl (hash: EF+XjF3fZMH32mwC02MoXDIB+79nYKi+w4GxZcq2Tx0=)
                          2: g4B1jDEDEnpyKjOUdwNXtiRBKVo.roa (hash: 7UWQudX+rqrs+vIGMtBiZa4lyOkbMuzxNBR2/83QsfI=)
                          3: mFCab-YMnaPwjq0SGjjSKVSwCvs.roa (hash: NwTUf2FCA+SWI7PlbFVRLa9grCf7O5GxOtog8KpH75E=)
                          4: v7xbsCROsO2MbuE9UwU0B__Qrug.roa (hash: jCAaO9QdtJabTsyOLEVBcqZmMxtQhkEo4Y5qTf+e+S0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 20:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:c9:17:4e:33:ab:7b:1c:86:0e:be:80:de:ce:2e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5cf73b3e45f772fae1b915690b317344c3f442b
        Validity
            Not Before: May 10 20:00:40 2025 GMT
            Not After : May 11 20:00:40 2025 GMT
        Subject: CN=05fc8a1baedd290e3ee4f00ca6c5b2609d0dd7be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:13:1f:ff:f9:11:58:44:6b:c0:3f:02:7b:28:
                    42:3f:f3:bb:2b:4a:54:f4:35:9e:18:e8:08:07:7e:
                    22:ab:5b:d4:55:90:06:48:63:2e:a3:4a:4d:e6:a3:
                    13:42:74:5c:77:01:4b:5f:7b:89:4a:d7:a3:b9:3a:
                    31:a0:26:4b:f0:53:20:5d:af:e9:1f:dc:c2:87:50:
                    46:1a:dd:26:c5:54:dd:07:8a:9f:95:6a:60:ca:12:
                    b7:ec:d9:92:84:43:1f:e8:5c:35:0f:fb:ca:57:e5:
                    da:c9:93:45:d6:f9:88:41:60:52:94:90:32:46:16:
                    d2:16:89:e4:2f:a4:9a:79:49:58:17:4b:c3:24:63:
                    c7:c9:00:ac:a3:fa:67:9c:81:e5:f8:c9:67:9d:90:
                    cd:e3:1a:dd:7c:22:cc:74:19:a6:3f:17:4a:32:bf:
                    18:17:49:c1:13:2f:2a:30:fb:79:6c:3c:31:c5:3e:
                    7f:e5:4e:cb:18:34:4c:b4:74:a0:9d:02:d5:63:87:
                    ef:52:38:54:ba:0e:14:40:e2:c0:15:a5:6b:53:fb:
                    2c:1b:0e:c2:57:9d:a1:e9:7f:07:1f:50:95:58:3e:
                    76:78:8c:a7:d4:4a:5a:d0:e9:c7:06:f7:ff:4b:df:
                    19:17:31:93:c0:f7:2c:03:49:40:57:32:40:78:fc:
                    dd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FC:8A:1B:AE:DD:29:0E:3E:E4:F0:0C:A6:C5:B2:60:9D:0D:D7:BE
            X509v3 Authority Key Identifier:
                keyid:F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:94:aa:e1:1a:87:57:2c:12:96:13:44:e2:01:9e:79:bf:d2:
         b4:31:9e:97:b1:d7:7e:3b:ec:fa:92:da:c6:20:40:d1:c4:86:
         bc:ea:3a:83:9b:6e:f6:79:7a:86:d1:ed:20:cc:b1:42:22:e5:
         99:6e:61:92:5a:78:c5:7f:84:ac:7d:63:6e:f0:66:b2:91:5b:
         de:8f:5b:a6:ff:af:79:f3:45:ef:1d:3a:7a:36:30:0e:32:4d:
         b2:23:76:d8:8c:e6:b5:b8:19:88:6c:ab:21:a7:77:10:fd:ed:
         fb:1d:d8:f6:99:c5:83:f1:ab:84:2e:2e:ee:29:7b:62:aa:13:
         b2:3e:04:13:f2:78:23:e0:44:bb:a1:6a:83:c3:b3:22:eb:09:
         e1:1f:52:6a:5d:7b:56:88:af:d7:d4:62:ca:39:6f:69:13:87:
         69:40:eb:01:d1:cf:28:5a:8a:2a:92:37:25:30:e8:9a:8d:e3:
         9e:03:ff:51:fb:84:1e:c2:b0:af:62:bb:a7:f7:21:b3:a6:45:
         c6:0d:ba:0b:ed:74:df:d1:84:9a:b6:3d:24:a4:c4:cf:8d:04:
         3b:d8:44:9d:16:32:d7:68:04:c8:d5:8f:99:1e:16:4c:4f:4e:
         96:76:bf:e3:05:fc:a4:d8:08:37:10:93:e0:a2:43:a6:51:8e:
         f3:73:47:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:33:41 2025 by rpki-client