Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
File:                     9vwoeVAOHrgIVXBc-ENeA2NRN94.mft (raw, json)
Hash identifier:          3L6zT8nM9vWm7u/ZA66Mo26/zGITk+F9ctNEOsEF5lI=
Subject key identifier:   EE:53:DB:67:5C:22:D4:2E:EF:A3:16:B0:76:E7:AB:D5:9F:F3:95:DE
Authority key identifier: F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE
Certificate issuer:       /CN=f6fc2879500e1eb80855705cf8435e03635137de
Certificate serial:       01984965936582914938E6DC47FF53CFFDBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
Manifest number:          0653
Signing time:             Sun 27 Jul 2025 01:00:50 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:50 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:50 +0000
Files and hashes:         1: 9vwoeVAOHrgIVXBc-ENeA2NRN94.crl (hash: R1ey6xtYJ92btHhWolr3+Cgw3gUolqpil06OVm+o6cU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:93:65:82:91:49:38:e6:dc:47:ff:53:cf:fd:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6fc2879500e1eb80855705cf8435e03635137de
        Validity
            Not Before: Jul 27 01:00:50 2025 GMT
            Not After : Jul 28 01:00:50 2025 GMT
        Subject: CN=ee53db675c22d42eefa316b076e7abd59ff395de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:93:67:f4:0f:95:de:0c:2b:ab:02:87:73:17:
                    fd:4f:5c:16:f7:d9:d6:1e:8a:db:fd:bc:51:59:b3:
                    c9:f0:38:33:91:08:a5:07:f1:ba:e6:25:b6:62:3f:
                    f3:b1:3a:58:da:16:5b:74:9f:51:34:d9:e5:47:1b:
                    d2:24:e8:bb:35:bc:7a:94:ed:1a:ef:95:1e:4d:1c:
                    5c:13:1f:7d:95:ad:49:01:eb:43:dd:b4:ca:df:d7:
                    6e:c4:69:78:da:f9:ed:05:44:df:20:ad:97:48:72:
                    61:16:8b:d2:e3:88:4d:fe:88:e7:54:56:2c:64:a0:
                    cd:d5:51:57:eb:da:29:04:ba:e4:fe:a9:bb:98:5c:
                    a2:f9:d0:af:96:e7:e5:fd:af:b2:7f:02:26:3c:18:
                    ab:a9:48:97:df:b6:e4:a0:95:2f:56:8b:a4:7f:e4:
                    e3:84:3e:4c:b7:94:0a:7d:d0:a0:68:d0:93:2a:5a:
                    75:8b:0f:95:4e:57:5d:4d:be:24:8e:e7:bf:c5:4a:
                    9e:e9:3e:15:66:eb:86:c3:c4:a2:0c:6c:6a:d7:42:
                    82:3b:49:ac:39:2a:f0:93:a2:9e:6e:f0:4c:40:5b:
                    74:e3:68:20:41:c3:81:d4:8c:ca:63:49:8f:dd:12:
                    e4:fa:94:cd:fc:76:6e:d7:ca:d9:08:20:87:74:85:
                    38:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:53:DB:67:5C:22:D4:2E:EF:A3:16:B0:76:E7:AB:D5:9F:F3:95:DE
            X509v3 Authority Key Identifier:
                keyid:F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:30:c7:f2:7f:7f:c1:41:b1:b5:46:a4:69:16:6d:6c:a5:45:
         79:83:ac:44:c8:cd:00:cd:0c:12:a0:eb:5e:0d:00:83:bf:b7:
         af:32:0a:3d:a7:d3:09:99:ae:dc:25:8c:44:24:a8:d8:2a:8e:
         1b:88:ae:19:e2:e4:b1:61:06:38:03:d3:3b:2a:24:35:52:23:
         43:a1:d3:71:09:d0:dd:05:14:97:5f:9a:a4:c1:91:7a:19:20:
         d1:4c:f5:41:3f:1e:4f:bf:cb:fe:a1:68:5c:57:6e:2d:07:45:
         9c:f2:5f:fc:42:f0:03:0f:94:ef:0f:10:03:3e:c4:f2:79:9f:
         4b:fa:b1:86:8d:90:ff:1f:70:6c:bd:a0:a2:c3:5a:8b:b5:d9:
         01:55:b7:18:1a:6b:90:92:af:82:55:9a:f0:a6:95:9a:a3:85:
         96:8c:7b:dc:d7:6b:7e:a9:22:d2:72:cd:e5:1a:58:47:44:1f:
         35:5e:c1:69:d5:55:0d:74:2a:2d:9c:ba:4c:97:36:55:81:ff:
         89:c5:4a:7a:44:fc:1f:9d:59:d5:e1:0f:81:5d:a9:50:20:8f:
         d7:38:fe:24:5b:2d:f0:b2:d0:01:a7:31:65:63:ac:4a:a1:be:
         b2:69:60:ea:7d:2f:a8:14:d8:1b:57:a1:be:8e:c2:09:77:0d:
         68:0a:8d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:40:31 2025 by rpki-client