Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
File:                     m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft (raw, json)
Hash identifier:          HrAu8uVKScFBGlOJ1FMZ9wZWPoitwTdqd+LtTNuOc+k=
Subject key identifier:   7A:0A:D5:DB:D5:EA:3D:54:0D:18:38:60:DC:5E:D8:EE:C3:35:AA:67
Authority key identifier: 9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5
Certificate issuer:       /CN=9be4717112fec119f6cfcace7cc4434fb47df8f5
Certificate serial:       019745C2A1FE52AC1833AA2521FC926A72D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
Manifest number:          10CD
Signing time:             Fri 06 Jun 2025 15:01:12 +0000
Manifest this update:     Fri 06 Jun 2025 15:01:12 +0000
Manifest next update:     Sat 07 Jun 2025 15:01:12 +0000
Files and hashes:         1: QEBRn3jAI_lp2ryrgLPg_-qD0_w.roa (hash: 4DrVU+ddF+HESS/HTUefXV0kpzIAWWdGYlZL3aihd10=)
                          2: m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl (hash: j50ht/mzBnR9BogsN7n/4q03pvwM4ZC5+ZfkNLr0whk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:c2:a1:fe:52:ac:18:33:aa:25:21:fc:92:6a:72:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be4717112fec119f6cfcace7cc4434fb47df8f5
        Validity
            Not Before: Jun  6 15:01:12 2025 GMT
            Not After : Jun  7 15:01:12 2025 GMT
        Subject: CN=7a0ad5dbd5ea3d540d183860dc5ed8eec335aa67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a0:a8:7d:17:8a:56:91:6a:df:55:56:c1:a0:
                    d8:e4:da:ea:7a:23:6b:5b:83:a9:84:f0:99:14:24:
                    57:36:e2:b1:1c:5f:f2:4c:ad:fb:84:ec:b4:eb:e5:
                    3f:03:4c:c9:8a:28:cf:a4:72:d1:5b:64:f2:75:45:
                    74:c9:22:76:b9:7e:e3:83:3d:77:fc:93:8d:09:af:
                    a0:26:25:b0:5f:9a:4f:c6:71:cc:a0:85:b4:b4:6c:
                    34:82:9b:c6:8d:7f:7b:61:33:ec:fb:fd:43:8f:50:
                    4a:0a:29:a0:d2:56:60:02:9c:68:ad:c1:78:c1:eb:
                    55:0b:c8:56:a8:4c:08:39:ad:d9:d3:37:e3:e8:98:
                    05:63:52:81:8d:1f:37:54:2b:f5:45:5e:1e:67:ec:
                    7c:5d:f1:95:71:ca:af:8f:fe:5e:b8:e8:7f:58:14:
                    eb:af:5b:da:27:9b:d3:10:88:94:d6:a5:a3:8e:6a:
                    df:0a:50:0f:45:f2:84:44:92:c8:c3:be:70:7c:27:
                    32:3c:3e:eb:ec:75:0b:32:12:77:5e:5f:22:7c:4d:
                    1d:83:79:95:e0:e2:9b:f9:ae:3f:9e:74:f0:1c:b4:
                    0d:62:cc:dc:f1:ba:f6:2d:cb:28:e4:66:63:76:6d:
                    fc:d5:87:0c:ab:f4:74:03:ea:e2:53:7f:0d:44:a2:
                    d8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0A:D5:DB:D5:EA:3D:54:0D:18:38:60:DC:5E:D8:EE:C3:35:AA:67
            X509v3 Authority Key Identifier:
                keyid:9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:21:75:bc:1d:d5:95:e1:44:da:01:b8:ad:c0:ae:3e:31:97:
         59:66:ef:ef:c6:fa:85:89:91:c1:3f:0a:3a:6f:dd:71:fc:0b:
         d4:ec:7e:0e:57:12:34:8b:27:5e:82:bc:5e:54:c2:8f:10:00:
         28:98:4f:fa:0f:82:7a:c7:90:3a:8f:fe:c6:bb:4d:51:46:85:
         89:41:96:9f:4d:72:0d:b3:88:fe:f7:cc:e7:8c:8a:d6:d4:f3:
         50:f8:83:ca:f5:32:95:38:06:68:31:cc:47:6a:29:e3:02:13:
         66:b7:42:09:bd:0e:78:a0:ea:c6:77:90:09:6d:81:8a:1f:aa:
         93:e4:f5:27:26:8b:70:24:6b:db:dc:e0:64:81:24:ad:f9:97:
         c0:88:87:03:6e:a4:0d:e4:71:03:01:4c:c4:7d:0f:69:4a:5e:
         ca:89:b5:30:74:a1:4d:d1:d5:65:25:91:23:16:24:89:59:53:
         2e:d2:c4:7c:8c:44:08:ef:42:f9:68:39:0b:8d:50:e4:50:91:
         fe:d2:42:f7:7a:b6:43:27:c2:35:08:6e:50:2f:9c:c0:a6:e2:
         3c:3d:e7:1b:3a:62:cf:33:b7:ae:b8:54:19:54:24:cb:49:24:
         b7:0e:a3:ee:b8:5b:b7:99:f5:41:a2:2b:a2:c2:e8:18:b3:e1:
         ee:88:c0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:18:51 2025 by rpki-client