Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
File:                     9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft (raw, json)
Hash identifier:          fCMf7fvmg+eoSu+Vh7i0SxRkTBZT4cNbej78hlT4sF4=
Subject key identifier:   7D:3E:1F:68:89:AD:83:65:DC:CC:E4:FE:00:1E:B0:72:83:04:14:C7
Authority key identifier: F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
Certificate issuer:       /CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Certificate serial:       01975158C34BDEFEDD02602B47DDAB6898FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
Manifest number:          0502
Signing time:             Sun 08 Jun 2025 21:01:01 +0000
Manifest this update:     Sun 08 Jun 2025 21:01:01 +0000
Manifest next update:     Mon 09 Jun 2025 21:01:01 +0000
Files and hashes:         1: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl (hash: AKzSF3I8lpeq3Qzn/sgmKL7G2NraaDYMomRFlqEGuZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:58:c3:4b:de:fe:dd:02:60:2b:47:dd:ab:68:98:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
        Validity
            Not Before: Jun  8 21:01:01 2025 GMT
            Not After : Jun  9 21:01:01 2025 GMT
        Subject: CN=7d3e1f6889ad8365dccce4fe001eb072830414c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b4:c1:dd:4a:30:56:2e:eb:06:a8:9c:5e:31:
                    b8:cd:b2:41:41:95:d8:a2:77:a2:7e:32:2c:6b:98:
                    0f:8b:45:91:d4:fb:b7:63:80:cb:15:df:50:5a:aa:
                    7b:05:da:5f:3a:c1:16:16:b2:5d:f2:42:fc:0b:39:
                    9c:a0:0f:e0:b7:cb:85:53:c6:67:38:19:5d:86:79:
                    d4:50:86:f4:10:ce:8e:a9:c5:13:4d:81:02:19:65:
                    3e:e5:9b:56:23:da:b8:e2:4e:37:54:1b:9b:4f:6b:
                    e2:cc:b1:67:3a:25:c8:3f:22:19:6a:92:a6:6a:31:
                    b8:28:d0:e0:f3:8b:e4:c1:b8:03:dc:2b:bc:d1:c8:
                    44:0a:c4:71:20:42:de:e2:fe:b8:fe:35:23:1e:45:
                    d4:d6:36:95:2d:02:54:9c:d4:d8:c5:b3:a0:ca:56:
                    21:ac:52:c8:23:c5:cf:41:25:4e:5b:c3:c1:c0:f9:
                    7b:be:6b:dd:94:c8:47:99:ae:ad:b3:e4:37:94:24:
                    2e:53:6f:d0:51:1c:85:17:b9:53:aa:bb:23:be:af:
                    6e:84:f0:29:f2:5e:69:3d:ef:8a:9c:20:7e:1d:bd:
                    1b:bd:09:d9:36:01:da:9a:03:68:4c:60:65:67:ee:
                    3b:24:e8:5f:b9:6e:76:2d:64:c1:ab:90:f2:16:b6:
                    c7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3E:1F:68:89:AD:83:65:DC:CC:E4:FE:00:1E:B0:72:83:04:14:C7
            X509v3 Authority Key Identifier:
                keyid:F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:76:18:20:39:07:ad:fc:fc:ed:60:bd:aa:4c:c5:28:4e:a6:
         11:03:1d:94:b9:be:4f:2c:67:ef:55:82:07:e1:a2:53:28:18:
         c5:4a:fe:00:1e:38:10:e9:3e:68:04:0f:c7:4d:4d:c9:f6:45:
         9d:61:8b:f5:01:51:01:33:a1:f8:2c:9a:b3:75:6d:ef:07:9d:
         18:77:e3:fd:12:64:07:25:bf:98:52:df:2d:2d:4d:9c:b4:57:
         8e:80:db:9d:f7:04:92:87:86:ba:ea:a2:c7:f8:26:1f:5d:75:
         c0:64:08:4a:10:6c:b7:89:c1:a3:67:cf:66:b6:71:d7:5a:ac:
         0d:42:5a:ba:97:21:cb:52:e8:b9:d1:dc:f5:92:e4:98:44:43:
         d8:e9:dc:ee:50:49:c2:45:47:af:b7:4a:4b:8c:a9:d1:40:b2:
         50:99:03:5c:00:f5:62:03:dc:4d:05:11:71:77:d8:56:7a:28:
         69:c1:d1:07:4a:40:b4:f8:40:ee:fe:54:6a:1c:9d:4b:8e:00:
         15:36:df:ab:f4:86:47:74:c7:8c:ba:03:b5:30:30:05:27:29:
         56:2c:51:71:69:e8:61:b9:01:70:1c:9c:7e:2c:de:78:ac:63:
         b3:86:95:2c:76:fc:bf:a6:5b:46:e7:eb:1f:fc:33:7b:89:42:
         99:5d:95:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:55:04 2025 by rpki-client