Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
File:                     9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft (raw, json)
Hash identifier:          pUKv+ag2qD1KyJSvXJcG3ImmhEjm82CLpeySB+rWPQ4=
Subject key identifier:   2B:7D:DB:4E:F4:07:85:FC:F6:77:BE:D3:18:6A:61:95:BF:E1:31:92
Authority key identifier: F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
Certificate issuer:       /CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Certificate serial:       01974D0DF60C4F796C7948BF00C9E683A837
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
Manifest number:          1597
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
Manifest this update:     Sun 08 Jun 2025 01:00:49 +0000
Manifest next update:     Mon 09 Jun 2025 01:00:49 +0000
Files and hashes:         1: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl (hash: 8p9g3lbmw+0G3J0YwOqA9l1m4KYxjEBZf+kP+SxrFRw=)
                          2: Rq5qhuZJL_f0RiemcCNo1CeBLZg.roa (hash: QjHh1mk02MSSyzdrymnZqYJyNlwN9P8BOUPtrzzXBu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0d:f6:0c:4f:79:6c:79:48:bf:00:c9:e6:83:a8:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Jun  9 01:00:49 2025 GMT
        Subject: CN=2b7ddb4ef40785fcf677bed3186a6195bfe13192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0a:9e:97:89:91:07:27:28:78:8d:bd:04:91:
                    1e:a2:aa:99:7b:6c:0c:36:32:89:e2:70:74:bc:70:
                    b7:89:73:86:72:1a:43:13:a6:19:83:7b:49:a1:42:
                    da:d6:16:1f:39:4d:09:9e:8e:b1:81:e9:30:9e:6f:
                    d0:f3:fa:4b:eb:9d:67:95:7f:25:10:f2:16:e9:e4:
                    e1:59:d8:77:02:06:0f:c5:ea:1f:26:2f:73:2a:16:
                    e3:5b:40:78:f8:4a:20:bd:5c:cc:63:70:7c:94:6c:
                    f2:ad:3b:83:5a:40:a5:14:61:d0:1c:57:f2:c9:bf:
                    10:87:84:e9:60:32:83:dc:4b:88:41:d7:ff:24:16:
                    18:cb:02:c4:f5:2c:61:c3:3d:50:2a:82:10:03:c5:
                    52:ed:89:07:a7:ec:66:bd:3d:8f:a3:7f:23:ab:ce:
                    f7:8c:af:97:d9:69:eb:15:2d:7d:89:23:57:0c:63:
                    48:91:33:b4:16:c4:af:fd:74:a3:55:14:71:30:4e:
                    a6:46:01:cc:5c:e2:fd:39:fe:ef:dd:15:c5:9e:e2:
                    79:91:e4:8e:80:2c:c7:e5:d0:75:46:b4:91:b0:9b:
                    a3:c6:a4:ef:7d:f6:78:b6:0c:4c:5b:35:f8:18:a6:
                    71:66:ae:03:75:af:8c:fd:33:42:55:3e:d4:85:f1:
                    ef:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7D:DB:4E:F4:07:85:FC:F6:77:BE:D3:18:6A:61:95:BF:E1:31:92
            X509v3 Authority Key Identifier:
                keyid:F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f5:47:62:48:a2:3a:a2:32:44:e9:25:d3:c2:08:d2:de:59:
         f8:11:9d:b1:fc:e1:9e:c0:ca:19:06:1f:2f:d7:a4:4b:8a:8e:
         fa:91:08:9d:13:40:e6:4f:d1:23:6d:96:8b:17:e0:53:48:44:
         a1:02:e9:52:d8:ab:25:75:47:79:a9:e3:ed:2b:3b:00:21:17:
         05:da:11:ca:31:f2:c8:fc:5f:93:25:f1:7a:23:28:e7:e9:d1:
         6e:7b:39:f7:63:dc:78:74:e6:34:41:24:39:11:23:cc:49:20:
         a2:15:32:70:4f:39:c7:27:75:c1:b2:95:22:05:b0:8e:a2:77:
         c0:40:50:a8:9c:e0:72:2e:29:25:ef:23:1b:3f:ce:a9:ce:17:
         bc:47:62:51:db:57:cf:05:31:8f:ce:a7:f6:4d:9e:7f:05:24:
         66:f3:db:f9:28:f5:16:2b:86:19:19:bc:9d:fd:d9:fd:b5:62:
         46:c2:fa:e3:30:af:9f:63:8b:4d:19:39:60:cc:7b:b4:ad:8c:
         80:41:f7:77:32:e2:9c:db:bf:81:35:6c:e4:56:08:c7:f5:50:
         02:d9:71:af:3b:40:e0:c8:3d:76:99:35:55:dd:7f:78:d7:20:
         c6:c8:af:cb:6e:1f:d7:0f:8d:82:fd:ef:96:fe:bf:3d:3b:58:
         df:24:b7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:25:46 2025 by rpki-client