Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
File:                     r9v0VgEKm9FJQcoskcpTPn71F4o.mft (raw, json)
Hash identifier:          cwQITU980b3FmIGZuIT4BeHtn/KbIb8+BMGLStr4JMw=
Subject key identifier:   2F:55:7A:9A:37:9F:73:BE:7A:BD:77:C9:B5:E6:1D:D5:00:DA:8D:68
Authority key identifier: AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
Certificate issuer:       /CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Certificate serial:       01974A7AF3B7DA799DD1D93DEF4147A63860
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
Manifest number:          0E55
Signing time:             Sat 07 Jun 2025 13:01:01 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:01 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:01 +0000
Files and hashes:         1: ajkzuEH8FnXzD6y9WqgTkvcAyWQ.roa (hash: ezeCzHTBFnMMCDhX8NkCA6ybD9xQfKuL+xUd+x4C3b4=)
                          2: r9v0VgEKm9FJQcoskcpTPn71F4o.crl (hash: rwTAFu/Fd0QSUzGPn4AaTPeRDRjzt20pTyDmLBmqOT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 13:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:f3:b7:da:79:9d:d1:d9:3d:ef:41:47:a6:38:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
        Validity
            Not Before: Jun  7 13:01:01 2025 GMT
            Not After : Jun  8 13:01:01 2025 GMT
        Subject: CN=2f557a9a379f73be7abd77c9b5e61dd500da8d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fd:86:f0:55:ff:29:d7:15:2a:37:fa:1b:07:
                    bf:84:ee:f9:93:f5:40:64:b5:06:36:b8:13:71:72:
                    49:45:59:f8:c7:3f:c8:08:96:1c:cb:44:a2:b4:ac:
                    2d:8d:c4:58:c0:3b:73:bf:fc:c4:96:6d:58:3b:3d:
                    8a:c9:8e:41:8c:6a:6c:99:73:5d:88:08:61:6f:7c:
                    ea:24:06:ba:34:2d:6c:f8:72:ba:90:86:b7:e6:cc:
                    9e:72:b2:89:27:0f:02:8b:bc:d1:15:ed:f9:01:aa:
                    37:13:88:b2:91:07:bd:88:f7:2f:27:16:02:8a:0e:
                    72:5a:be:08:73:c5:31:f3:66:4d:e3:7f:25:dc:61:
                    5b:47:f0:d1:f5:03:16:13:64:78:48:c5:10:dd:07:
                    c3:23:74:b3:18:c3:57:25:97:97:64:28:57:45:18:
                    70:54:5e:3b:d8:54:16:ba:89:01:13:65:e6:09:61:
                    94:9f:4e:39:db:a6:06:57:b1:22:a3:b1:5c:ba:93:
                    a7:34:c4:3d:8a:37:f2:50:2b:59:06:ca:44:e1:29:
                    72:12:00:27:28:a7:cb:48:79:70:98:82:26:75:15:
                    d2:fb:90:95:16:f2:6c:86:d2:b8:e3:5f:36:42:23:
                    63:2f:a2:3e:31:b0:94:30:8e:71:18:18:a5:4a:6a:
                    68:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:55:7A:9A:37:9F:73:BE:7A:BD:77:C9:B5:E6:1D:D5:00:DA:8D:68
            X509v3 Authority Key Identifier:
                keyid:AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:5d:cb:8b:2f:2b:52:e0:e3:2d:38:46:be:b9:06:93:31:a9:
         75:4d:85:96:97:98:7e:26:9e:79:53:75:f9:dc:27:b2:ff:e2:
         d8:b5:82:5b:37:30:52:3f:e2:41:12:9a:94:02:3b:cd:0e:71:
         5e:30:02:e4:fa:98:b4:18:65:a1:4c:50:76:b8:fc:a9:b3:b2:
         b0:2f:5b:ba:99:22:b3:84:54:cc:55:2f:c3:4c:4d:05:44:72:
         1b:ee:f6:66:e5:44:04:8c:dc:87:5d:75:e1:87:d1:fd:e0:18:
         b6:fe:58:86:84:40:91:e4:3d:4b:63:6f:99:de:e4:04:17:16:
         d4:b7:27:de:3e:13:aa:1e:71:a1:5e:87:3a:26:ba:05:fe:6b:
         78:ee:8e:ac:de:a6:12:42:1f:72:f0:ac:08:98:c2:0d:1d:8d:
         d3:6e:c5:f4:23:2e:32:2f:06:bd:fe:ab:ef:6c:fa:1c:85:c0:
         95:10:6e:8f:04:35:49:a8:34:2e:58:19:d8:20:b0:e5:9c:9b:
         35:49:81:90:76:ed:df:27:df:4f:05:99:20:ce:3c:72:4d:85:
         8d:17:de:d4:b4:b5:e1:fc:40:54:a2:8f:d7:89:68:9e:4f:93:
         26:10:8c:79:3c:25:22:a6:01:15:10:a0:d5:97:e2:78:87:2d:
         0b:53:e5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:02:38 2025 by rpki-client