Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
File:                     9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft (raw, json)
Hash identifier:          /ITVLgQDDs+6yKJo61PF+hmAE/gL+Ucm6d6vF5X2goQ=
Subject key identifier:   3D:82:CF:58:A2:A0:31:C6:D0:19:DF:72:99:CF:96:6D:85:98:18:C1
Authority key identifier: F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93
Certificate issuer:       /CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
Certificate serial:       0196ADD67335A1C9A7CC127298127A594E80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
Manifest number:          0976
Signing time:             Thu 08 May 2025 03:00:34 +0000
Manifest this update:     Thu 08 May 2025 03:00:34 +0000
Manifest next update:     Fri 09 May 2025 03:00:34 +0000
Files and hashes:         1: 9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl (hash: +cM6G79o4m1tRw5m8ucLif9TWQeHw94gmAitu4DVFe0=)
                          2: Ecb-mPJB0EgEtmCxBO-R8Q4l8Pc.roa (hash: gJwQTQJlZO5UonEbd+MqbZuAtcvQedjepcRUTfg3vec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ad:d6:73:35:a1:c9:a7:cc:12:72:98:12:7a:59:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
        Validity
            Not Before: May  8 03:00:34 2025 GMT
            Not After : May  9 03:00:34 2025 GMT
        Subject: CN=3d82cf58a2a031c6d019df7299cf966d859818c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:10:f9:06:a0:cf:cb:b0:56:01:da:46:1b:cc:
                    b3:d6:e9:92:75:7e:3d:58:5d:2f:c2:da:33:45:b6:
                    5d:fd:96:b4:76:56:29:b7:fe:68:b9:71:a8:83:df:
                    63:e2:21:80:ac:01:9c:7a:fc:07:f6:75:a4:06:e0:
                    f3:30:ba:89:90:37:b2:67:a0:ad:d9:0b:97:73:84:
                    59:f7:8f:8e:58:8b:58:49:5c:72:e9:a9:40:e3:7d:
                    f1:e3:6a:63:9c:4c:d6:6f:94:fc:47:c0:d8:fe:26:
                    b6:39:18:80:df:20:88:50:bb:fb:b0:f2:27:75:a8:
                    79:60:e5:4f:53:97:51:7e:0c:c3:15:7c:c3:99:e1:
                    42:33:71:c9:97:79:8d:10:e5:71:b5:5e:9e:b4:c3:
                    4c:6b:15:07:c3:b1:fb:99:c9:4b:4a:1e:ae:68:74:
                    b7:f3:de:e2:d7:3b:71:4d:b3:2f:a9:b4:93:cc:29:
                    42:da:b4:e7:18:9a:07:a3:0d:c9:2e:d7:48:78:85:
                    39:4b:7c:e5:8a:c0:ee:20:38:61:b0:8f:72:f3:0c:
                    bb:5c:fe:e4:46:d7:49:c5:3c:d4:0e:bc:30:2e:fc:
                    83:3c:d8:9e:83:c9:f3:49:27:0b:5d:e6:6d:a2:75:
                    09:c4:0f:6c:c8:4a:7c:f4:19:8f:bf:c8:23:8a:1d:
                    51:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:82:CF:58:A2:A0:31:C6:D0:19:DF:72:99:CF:96:6D:85:98:18:C1
            X509v3 Authority Key Identifier:
                keyid:F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:ff:01:75:c2:09:4e:96:fe:33:95:19:a7:72:87:f1:f6:e2:
         b6:b3:dc:91:82:9b:51:ef:67:12:aa:a3:74:b7:d2:32:ab:97:
         59:9f:e9:a0:5a:7c:6f:18:c0:8b:a4:99:f2:59:79:65:c1:7d:
         4f:ad:1e:5a:7d:bc:e8:52:8f:af:0e:c1:c8:62:5f:71:10:5a:
         75:b4:d7:fd:ab:07:e9:64:80:71:45:48:aa:1e:6c:5a:4f:9f:
         07:12:c0:9a:ed:49:02:1d:a1:64:5f:36:38:b8:0f:3f:b4:a0:
         21:80:71:35:7b:db:1e:ee:71:92:a2:af:85:08:00:0d:27:a2:
         e8:1e:2d:59:9e:cc:7c:22:75:f7:14:dc:12:6e:8a:ea:ea:16:
         87:f2:2d:60:92:74:4d:8d:42:64:a0:57:08:8d:52:47:99:57:
         92:c8:97:a4:05:02:83:52:1f:62:a9:20:d1:15:2d:f2:bd:d4:
         aa:ef:74:c5:84:22:3f:04:89:b4:e7:53:d1:fe:27:73:b8:9b:
         1f:20:19:c1:46:3d:51:00:d5:6c:0d:4d:21:eb:13:80:a3:d4:
         d1:cf:c5:44:ba:1c:25:2d:a9:13:74:da:d8:a8:99:3d:73:78:
         9f:ce:24:78:26:b3:70:95:8e:98:18:5b:f7:e9:90:5e:30:2a:
         9b:15:2c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:19:15 2025 by rpki-client