Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
File:                     9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft (raw, json)
Hash identifier:          TWiA3Jxrq+2EiUUgwJjy8f6HJBTFMIzQMNWpeIhy/gc=
Subject key identifier:   9B:2B:C4:2B:E1:D5:6B:AB:C6:8B:D2:0C:6F:76:DF:8A:14:B6:A2:0D
Authority key identifier: F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
Certificate issuer:       /CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Certificate serial:       01964D471F7519922C27564B33A15D9D7B3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
Manifest number:          0403
Signing time:             Sat 19 Apr 2025 09:00:28 +0000
Manifest this update:     Sat 19 Apr 2025 09:00:28 +0000
Manifest next update:     Sun 20 Apr 2025 09:00:28 +0000
Files and hashes:         1: 9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl (hash: 8Q/qfCH3Bp4Q9vaIcc8hXVcJt3bTlSBxcQkCqnlN++M=)
                          2: hmRzovRV4UHybR1HxVtSJMOLDCw.roa (hash: OsQ6iHBOvn0+b51MYRo/b13uIhsZ7r4gypQoB9TbMVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:47:1f:75:19:92:2c:27:56:4b:33:a1:5d:9d:7b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
        Validity
            Not Before: Apr 19 09:00:28 2025 GMT
            Not After : Apr 20 09:00:28 2025 GMT
        Subject: CN=9b2bc42be1d56babc68bd20c6f76df8a14b6a20d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c7:4e:3e:75:d3:08:39:39:9d:7a:cb:6d:44:
                    7c:13:3b:e5:ec:da:fd:bf:a8:1a:60:df:80:79:19:
                    2f:99:62:b1:57:23:4a:63:fe:cb:2c:0d:19:96:38:
                    cd:4e:f2:9d:d5:77:10:52:b5:ae:50:c6:ff:d4:a3:
                    43:f0:aa:cb:25:08:52:92:79:9b:a9:8c:f5:31:95:
                    c0:e0:97:44:57:06:ed:19:9d:cb:37:7b:53:f6:28:
                    a8:d5:a8:66:97:91:cd:30:65:0b:2a:a6:65:b1:d4:
                    f5:45:d9:c8:ed:d0:6a:d0:0f:2b:65:af:d7:0f:97:
                    97:58:9c:75:bd:fd:6d:ca:38:4a:0a:02:15:bb:1d:
                    84:2c:50:a3:61:2b:0e:1b:8b:63:0f:8a:4b:63:43:
                    96:d6:bd:9c:e7:98:67:61:fa:c6:e5:b2:04:3b:99:
                    6e:a9:38:94:aa:c8:eb:98:b7:d9:7f:a4:4d:60:33:
                    e1:81:ab:7c:b1:e4:24:09:17:a7:f9:d9:73:c3:48:
                    f6:2e:24:b7:33:69:1c:e2:f1:ed:8c:9f:90:71:a0:
                    cb:74:9c:ce:3f:67:6b:7d:7e:ca:59:d4:9a:74:0f:
                    bf:b6:b5:8c:b5:64:0f:94:b5:12:91:d5:cb:24:1d:
                    9b:95:fc:82:d6:34:cf:e0:54:51:f3:d3:f5:02:97:
                    a4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2B:C4:2B:E1:D5:6B:AB:C6:8B:D2:0C:6F:76:DF:8A:14:B6:A2:0D
            X509v3 Authority Key Identifier:
                keyid:F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d3:40:4e:29:48:6d:9a:96:03:79:9e:0d:fe:f4:54:f8:33:
         e2:f7:7a:83:43:97:33:31:19:77:70:fa:75:0a:ad:cb:70:ea:
         25:05:ef:cb:2a:27:39:0f:24:71:f0:a3:73:e8:cf:98:ae:b7:
         d2:c7:b8:85:25:1a:c7:5e:83:a6:cf:a0:dd:6c:8e:a3:02:7f:
         82:bf:af:36:09:a1:60:33:00:e9:c9:cf:75:b1:0d:f4:a0:4f:
         27:27:56:25:53:0f:3b:a3:ac:3a:fa:46:ff:6b:4e:6d:e8:3b:
         0d:59:d7:e8:14:4c:d7:b7:03:84:99:29:53:8f:09:8b:32:27:
         f7:ad:37:eb:e7:69:af:41:eb:47:fd:35:7a:30:b8:f8:bf:89:
         2d:5b:32:78:36:da:7b:e3:05:98:0c:3e:79:74:14:6b:06:c4:
         04:5d:c3:d5:c0:83:01:df:aa:8c:6e:88:76:c1:bb:13:ee:c9:
         8f:aa:07:09:97:8b:97:42:ee:08:19:3e:42:2a:e9:71:c3:0c:
         3c:78:cf:a2:fc:14:39:0a:13:b2:67:b6:ce:c2:4b:32:86:7c:
         63:ba:d4:94:82:f3:96:db:db:de:04:71:92:cc:28:cb:d1:1e:
         a6:cb:c9:d9:13:58:0e:53:c0:22:e4:90:0e:f3:20:ff:1e:cf:
         17:1e:be:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:21:27 2025 by rpki-client