Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
File:                     9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft (raw, json)
Hash identifier:          D5hTMUpsfyoNAntc/3okoTP8yF7JIQups3womShEqOA=
Subject key identifier:   D3:DD:0A:3F:40:E5:19:EF:6A:DC:54:60:7A:F0:D7:3F:58:40:88:9F
Authority key identifier: F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8
Certificate issuer:       /CN=f4c9baa4429da786591b72525852e6d97b32c1e8
Certificate serial:       0196C26FF2E9FFCDE814FA21EA9E80E751AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
Manifest number:          1224
Signing time:             Mon 12 May 2025 03:00:38 +0000
Manifest this update:     Mon 12 May 2025 03:00:38 +0000
Manifest next update:     Tue 13 May 2025 03:00:38 +0000
Files and hashes:         1: 9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl (hash: dRUYq4Gvw2iTwSYCC51jqMCvdadcupz4Piy0RWTV/U0=)
                          2: FhvwZmZbFQ5_XSu4XdZkFej3jvE.roa (hash: ld2MBpkdINa/HpitEI9hE8KrLNtvxY4fg+rJ1pVUK1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:6f:f2:e9:ff:cd:e8:14:fa:21:ea:9e:80:e7:51:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4c9baa4429da786591b72525852e6d97b32c1e8
        Validity
            Not Before: May 12 03:00:38 2025 GMT
            Not After : May 13 03:00:38 2025 GMT
        Subject: CN=d3dd0a3f40e519ef6adc54607af0d73f5840889f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ba:b2:28:09:48:68:37:32:82:d4:58:54:35:
                    43:fb:c0:90:6f:fe:cb:8c:4c:3d:c6:29:f6:f4:3c:
                    20:aa:ba:89:b8:a1:60:73:cc:96:16:43:77:21:c4:
                    6d:29:d7:49:59:6e:2d:d7:7e:7f:89:98:fa:f8:64:
                    6e:29:2c:cf:8c:68:e0:a9:96:8c:a0:22:48:e6:62:
                    3d:ae:e0:34:7e:01:8e:87:eb:57:84:e9:9c:e7:65:
                    92:39:bf:33:68:60:3e:d4:70:ef:ba:7a:00:d4:b3:
                    e7:16:de:b4:9c:7f:bc:c2:61:4c:41:e6:a7:6d:c0:
                    d5:76:9b:a1:bc:89:57:6c:b0:14:e9:66:89:da:a8:
                    cb:d1:03:34:8e:22:c9:97:b6:06:4c:d6:ef:fe:80:
                    1b:a7:ff:43:31:59:af:e6:f5:17:2b:4e:e9:f6:5e:
                    0c:cc:7f:c6:40:ec:be:74:c0:33:92:f8:18:85:0b:
                    98:77:2f:08:8f:ea:22:f4:95:a4:88:74:fd:63:9d:
                    08:e5:84:be:07:ff:a6:9a:00:05:bc:5d:52:ab:6a:
                    1d:cf:66:8b:4a:b0:4e:1c:98:57:38:31:1e:2d:8f:
                    69:77:79:2a:67:9f:0d:62:0f:6b:21:83:d1:1b:07:
                    1c:01:93:0f:2c:1a:0b:57:18:1e:bc:a8:a3:b6:79:
                    e9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DD:0A:3F:40:E5:19:EF:6A:DC:54:60:7A:F0:D7:3F:58:40:88:9F
            X509v3 Authority Key Identifier:
                keyid:F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:96:e2:8a:28:e7:56:69:cb:65:8b:5b:bb:e1:87:da:fc:21:
         96:75:b8:b0:57:c4:72:9f:2e:6e:e0:9b:b9:bc:94:84:39:20:
         1c:c4:44:74:2f:76:25:18:e2:55:17:ae:57:0d:40:88:d4:2e:
         16:73:1e:ff:d1:1d:30:d0:12:b9:96:cd:e2:58:27:1a:76:e4:
         f1:cd:ad:ad:f6:1c:c8:22:67:04:17:86:87:78:32:d5:89:bc:
         84:ad:0b:99:43:c2:ae:ce:4f:34:cb:52:48:bf:ba:4d:3c:b7:
         2c:cf:69:94:f0:5a:3a:71:0e:1f:bd:25:7d:49:99:6f:91:ea:
         37:be:c4:42:ef:99:4b:42:54:01:e0:69:da:4b:de:c9:76:96:
         ef:ca:d0:bd:4f:c6:b1:a4:34:8f:fe:09:1a:d6:f0:7a:90:dd:
         57:78:b6:84:cd:33:29:26:6d:ae:5f:ca:e0:6a:38:c6:f5:24:
         cf:84:a3:08:dd:b2:3f:0e:64:3b:d6:fc:ce:41:68:6f:08:34:
         32:59:eb:23:d4:18:5a:47:66:0f:80:0f:05:42:2b:88:77:1d:
         06:1c:4d:c0:b8:76:ab:ac:7e:2b:6e:21:5f:85:79:f6:6a:1c:
         6c:7e:d8:a7:10:fe:03:8b:bb:14:3e:f6:0c:b2:64:92:43:87:
         0b:50:1f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:46:06 2025 by rpki-client