Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
File:                     1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json)
Hash identifier:          fIgnWdoC/31AHOzgVc8yRyULEBNwQzzMnqPiX6xvkWs=
Subject key identifier:   1C:72:FF:3B:63:F7:5E:DD:65:5E:3A:13:D9:12:79:98:7B:52:24:02
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Certificate issuer:       /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial:       01975158EE22195EAF1D070FE8110854F4A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
Manifest number:          15A9
Signing time:             Sun 08 Jun 2025 21:01:11 +0000
Manifest this update:     Sun 08 Jun 2025 21:01:11 +0000
Manifest next update:     Mon 09 Jun 2025 21:01:11 +0000
Files and hashes:         1: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: 0zUR1Ros8urLVhQ6C0jXKjBqIO+sq9nVb/c5SFTWj64=)
                          2: 2Ksn55yLgCkUTD5aLOt0Y8z_PQA.roa (hash: YGbzAqhxgCQickL+xdM1b5h2KIGE4igLXR/EObDj07M=)
                          3: 6ZeRNkK2gfkBTq-HCKi4E0wDn0g.roa (hash: EG2r/8KWDUcCkyQHYwdunKSI5bgRdtrDYdyzMOQ6sPg=)
                          4: 7zkL6is6uiT0K6jbnHgG4_foxLs.roa (hash: 7s5RovPfiSb41Rd6Pj/MwhULMmTO5+df4JKH36bwQEY=)
                          5: RDfRFkINmnxAYr0i5lo-RrZfvvM.roa (hash: OK1hJOOaClcL1ul04CJbPRYEerL2hSCv/3xJn1BxpKo=)
                          6: gwNf7hRUcUlc_WP0obY5q2dBbnQ.roa (hash: rRyAeqxP/tdvl1xFzDmcY8amsglq1slf48aSCQfMHSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:58:ee:22:19:5e:af:1d:07:0f:e8:11:08:54:f4:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
        Validity
            Not Before: Jun  8 21:01:11 2025 GMT
            Not After : Jun  9 21:01:11 2025 GMT
        Subject: CN=1c72ff3b63f75edd655e3a13d91279987b522402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:99:ea:d5:65:c8:8c:53:7c:e0:3a:63:ce:c6:
                    63:4a:8b:4e:b8:2c:8b:c7:52:09:79:69:08:2b:0a:
                    ce:ed:34:d3:fa:08:75:cb:ff:2d:56:0b:9f:2e:73:
                    6a:07:3f:e0:32:24:9e:d6:69:e6:0a:11:af:11:82:
                    0c:8d:b7:a9:6b:75:a2:47:f3:04:93:c3:13:13:16:
                    ba:8d:5d:01:fe:80:c1:69:d1:a0:d1:35:f5:88:88:
                    aa:2f:d7:67:b6:40:97:84:99:d1:c0:bb:ac:7d:ec:
                    9f:a3:18:11:64:cd:d0:05:1b:60:05:59:75:21:65:
                    de:ba:1b:da:08:65:02:50:54:e1:c3:b9:b3:92:a3:
                    1f:87:f9:9e:28:da:0d:82:68:a1:e8:67:6a:ff:04:
                    3a:94:bb:78:59:9b:e0:5d:8f:62:58:e9:af:d9:24:
                    7e:ae:42:23:dc:96:72:56:62:c5:0c:8d:4e:f1:1f:
                    45:b4:48:43:23:7b:25:3a:e2:ec:4d:5a:ea:87:87:
                    27:c2:fc:24:03:88:1c:05:df:50:52:fb:c2:19:a9:
                    6b:fd:6c:66:41:c8:95:3d:73:01:37:84:95:ab:62:
                    95:4a:02:db:39:3f:4e:4a:06:a9:4d:65:24:76:17:
                    30:1a:c4:00:ed:ab:88:78:66:11:64:c1:a4:bb:20:
                    70:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:72:FF:3B:63:F7:5E:DD:65:5E:3A:13:D9:12:79:98:7B:52:24:02
            X509v3 Authority Key Identifier:
                keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:21:72:cd:ba:41:53:07:fd:d7:71:ff:0b:82:41:ed:61:51:
         66:84:1e:ba:6f:98:c1:ca:a0:b1:9d:c1:ef:88:5d:93:74:49:
         96:a5:2d:fe:87:9c:81:09:07:0a:8b:f3:17:d3:a2:1d:59:19:
         aa:1d:d2:e2:23:f5:73:7a:83:45:52:40:b1:bb:3a:50:9f:7a:
         c2:36:2a:c2:a5:f1:d4:4d:8a:39:39:87:85:07:e1:5c:66:a4:
         dc:3b:b7:4f:ab:06:8e:1b:65:bd:02:6a:54:d1:ee:71:df:37:
         90:ce:b8:29:7c:7e:19:b8:49:34:43:86:98:36:15:72:22:3c:
         c9:20:d4:6a:45:ff:c2:be:3b:b2:80:05:f4:02:c2:3c:ce:08:
         56:59:99:10:5f:c8:1a:c5:6f:bc:f7:77:17:10:31:2d:b2:60:
         86:ec:e6:31:08:59:66:13:8c:b8:ab:6a:d1:d3:67:92:1b:38:
         76:84:90:6b:ba:cf:6b:20:d1:a3:d1:f3:81:51:0a:20:8d:28:
         c9:8e:04:65:1e:36:09:d2:96:aa:71:e8:79:1a:bf:41:ec:fb:
         14:42:42:f8:62:49:a4:94:c1:7e:c9:a4:2c:97:76:a6:9f:ce:
         16:00:f8:73:06:17:ac:ee:24:25:51:6b:50:de:00:01:0d:f0:
         1b:20:98:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:26:24 2025 by rpki-client