Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
File:                     v_9Blln1TfN4eStgLACSw1OYjsg.mft (raw, json)
Hash identifier:          rnCunnE1yl1yCffY2RR7kM2PSON6A5howEzz8Jq2DRA=
Subject key identifier:   7E:6A:85:6C:9D:4B:D8:24:31:64:38:79:6C:0E:6D:DB:B3:11:17:23
Authority key identifier: BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
Certificate issuer:       /CN=bfff419659f54df378792b602c0092c353988ec8
Certificate serial:       01975EA6A9F87605DD14DBE6F90F32D3A9BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
Manifest number:          09CC
Signing time:             Wed 11 Jun 2025 11:01:10 +0000
Manifest this update:     Wed 11 Jun 2025 11:01:10 +0000
Manifest next update:     Thu 12 Jun 2025 11:01:10 +0000
Files and hashes:         1: Pbu77IMqgBIggCHuoPCgPeA-JYI.roa (hash: MfbYLWDGe0vBfVw8/15weNnWm0f+1AXVR3Lu2ooMJ2Q=)
                          2: SJ31osOZq8GAkUzTcgDMle6L-Ko.roa (hash: OpBd6e9+J397K48R0gJPVRSyhgNBftdRPHKKbxpf8EI=)
                          3: TLegbcgI8kzdZX0LyaY_jBKsLjM.roa (hash: jfnT8EG89ibu6lVDZPQfuHKOWHv4n9hSUWRGapOkR0I=)
                          4: v_9Blln1TfN4eStgLACSw1OYjsg.crl (hash: EpGOlijYSJA5gJXt6dD1vqXNmMrd+Mb/xQa+8d2KfRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5e:a6:a9:f8:76:05:dd:14:db:e6:f9:0f:32:d3:a9:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfff419659f54df378792b602c0092c353988ec8
        Validity
            Not Before: Jun 11 11:01:10 2025 GMT
            Not After : Jun 12 11:01:10 2025 GMT
        Subject: CN=7e6a856c9d4bd824316438796c0e6ddbb3111723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b9:57:45:47:d7:14:9a:ef:56:94:c2:b8:e5:
                    47:a4:15:4c:ad:43:d1:b1:3c:2e:04:af:f5:29:c9:
                    10:5c:1d:55:dd:fe:b4:d2:93:a1:d7:e8:af:61:b9:
                    5a:a7:fc:ed:49:f6:1a:b3:10:b7:5e:40:2c:77:bc:
                    9f:fa:0c:11:94:6e:87:07:2b:c8:38:ca:4a:7b:72:
                    df:90:c2:56:d1:85:f3:c3:bd:40:b0:8f:3f:7f:38:
                    2e:01:ba:9e:60:f5:ba:18:21:cb:0f:c3:a2:7f:a0:
                    3c:d8:5a:5b:a6:1f:ea:99:2e:04:09:cc:7f:58:96:
                    8c:a8:ff:c8:af:4a:fa:08:e4:f8:52:ac:dc:a4:68:
                    c1:22:cb:a9:ef:6e:e0:82:fb:42:86:f7:3a:a0:07:
                    1a:58:7b:1e:c3:79:bb:b4:d5:fa:13:b8:b6:d8:fa:
                    2d:2b:af:0b:f3:d3:38:8f:83:b9:e2:9f:d8:50:94:
                    a3:74:11:36:85:79:9e:10:b1:76:c6:09:d0:0d:d2:
                    7a:25:3c:8f:f7:85:c9:03:84:2b:bd:45:0f:3c:a2:
                    9a:84:18:b3:e7:a9:00:0a:3d:9c:13:be:ac:27:b0:
                    1c:8e:25:c8:0c:13:b4:03:6b:06:68:a7:a2:cf:69:
                    90:46:9e:b4:15:c1:c5:b9:6f:54:05:c2:c1:1d:41:
                    13:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6A:85:6C:9D:4B:D8:24:31:64:38:79:6C:0E:6D:DB:B3:11:17:23
            X509v3 Authority Key Identifier:
                keyid:BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:00:20:34:be:57:15:22:39:61:ac:1b:79:57:2a:86:61:1a:
         93:b1:56:ae:3c:7a:bb:d4:ba:6d:08:36:28:0e:b9:ba:1f:be:
         8b:3d:d2:d9:7d:f4:4c:e6:47:49:c8:e0:6a:52:5e:42:17:35:
         af:34:dd:2d:e7:ac:19:a3:aa:f5:cc:27:8e:ee:3e:f5:e6:99:
         b7:cb:3a:a8:45:f1:aa:bc:6d:ec:0a:73:a3:34:33:35:69:b4:
         12:77:e5:57:1c:cc:d7:9d:6c:d6:03:e4:c4:25:59:12:eb:93:
         1d:f6:a0:35:93:cf:f8:a1:95:76:b7:a9:67:b4:c4:60:95:2f:
         bc:0c:90:30:c2:95:a9:80:0a:2a:6d:f2:ac:7d:b2:e8:ab:d1:
         bd:b0:3e:9c:c7:df:a5:10:f3:88:d8:09:e9:f0:b9:41:16:24:
         e7:ea:13:f4:0b:99:30:25:e1:0d:fb:d1:5e:31:61:e4:50:85:
         6e:ed:ce:62:21:06:96:04:54:62:e8:ed:65:55:99:c0:0b:cc:
         35:de:df:01:5f:98:e8:b6:b2:73:fd:8a:66:b7:11:e7:78:37:
         6a:aa:e8:a2:86:51:39:0a:5f:7a:24:4e:0e:bb:1b:62:0c:f3:
         03:b5:fa:76:e2:1b:7e:aa:41:6a:dd:f6:a6:e8:9d:fb:cc:b2:
         57:f0:68:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:00:48 2025 by rpki-client