Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
File:                     c_9LHL6vndddO17z7pp11XmfcoA.mft (raw, json)
Hash identifier:          xSuJAXy2yAa8mn2F+EORCN5ysnXLny6AvMqFWQBhVh4=
Subject key identifier:   BA:C1:4C:8D:FC:20:A9:9F:72:49:C5:F1:0C:76:D2:5C:95:82:77:54
Authority key identifier: 73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
Certificate issuer:       /CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Certificate serial:       019759B694EE4C4F468FB170F423AEEC41A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
Manifest number:          09C7
Signing time:             Tue 10 Jun 2025 12:00:27 +0000
Manifest this update:     Tue 10 Jun 2025 12:00:27 +0000
Manifest next update:     Wed 11 Jun 2025 12:00:27 +0000
Files and hashes:         1: ag-XVm500Ink_y9Z543W0cYT2e4.roa (hash: LTklb1ptuKPn0530SuHC20oeHYTlb0YVhREmYDi0qn8=)
                          2: c_9LHL6vndddO17z7pp11XmfcoA.crl (hash: CvXEL6rUwdFdYZhEcD5pJg+Q5fsNQ58/vRKFKBOo62c=)
                          3: xqtuxbgfgKOQAXDLHhW5kYSASLM.roa (hash: Akx0xbIbgUFrWIKc+N3GbCju1aCG4ckavEzXznoEvO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 12:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:b6:94:ee:4c:4f:46:8f:b1:70:f4:23:ae:ec:41:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
        Validity
            Not Before: Jun 10 12:00:27 2025 GMT
            Not After : Jun 11 12:00:27 2025 GMT
        Subject: CN=bac14c8dfc20a99f7249c5f10c76d25c95827754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d5:30:00:02:ae:75:4f:f1:6a:22:53:06:0d:
                    3c:02:ed:0f:6f:b3:73:d9:ff:2d:33:54:88:a7:31:
                    21:b0:2f:14:83:8a:11:b8:2f:16:21:d7:cc:8f:7b:
                    51:9f:fd:9f:52:6c:dd:57:c5:2f:02:af:5e:8d:41:
                    e6:9f:5f:7f:b4:7a:d2:81:cb:8c:3a:56:98:5d:12:
                    52:17:d0:9a:18:1c:c2:72:94:b3:00:25:ae:42:84:
                    e6:d2:7f:07:b1:b3:21:d2:de:51:3b:0a:e9:0e:15:
                    bc:ab:47:9b:e8:77:91:af:e6:ad:e9:83:dc:1d:7b:
                    5d:4e:30:31:df:1c:b8:18:78:4c:ec:a7:7b:19:c5:
                    f4:06:ab:fc:16:ee:c0:49:e7:c1:3d:27:69:65:fe:
                    dd:53:cd:89:f9:19:70:b8:90:df:ab:56:c8:49:7b:
                    3a:f1:fa:32:f9:81:f2:d1:4d:0e:1c:4e:85:70:39:
                    ea:0e:48:f9:f3:09:98:64:34:f9:1d:02:b1:25:d7:
                    36:73:d8:fe:e8:ed:5e:bf:25:36:77:3b:2d:1e:81:
                    92:c1:47:3c:87:37:35:99:cb:17:18:cd:26:0c:5a:
                    f0:b0:23:94:12:09:fe:48:98:d9:fb:4c:6a:62:92:
                    a5:ae:00:5d:14:42:30:5d:b9:7d:49:db:f2:9a:1b:
                    77:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C1:4C:8D:FC:20:A9:9F:72:49:C5:F1:0C:76:D2:5C:95:82:77:54
            X509v3 Authority Key Identifier:
                keyid:73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:30:ee:50:e0:d0:7f:96:03:ee:bb:f0:92:9b:e0:61:5b:c2:
         55:29:ef:2e:a0:c3:39:3d:01:e5:6d:36:20:c7:80:bc:08:db:
         00:cc:a0:e9:e1:89:fc:3d:2a:bc:f3:d0:69:bf:fd:f3:16:95:
         79:c9:ac:8c:76:82:72:02:ac:4a:30:b8:33:b6:0c:6c:bc:10:
         2d:6c:37:85:0b:90:66:14:88:54:f6:fb:4f:e6:9a:94:92:71:
         5d:0d:2f:2d:6a:d2:a1:15:d5:cd:3b:5f:df:a5:cb:c3:f9:dd:
         fb:13:b1:0e:20:48:4c:da:b0:02:70:ae:23:b7:db:97:ac:bd:
         d7:dd:bf:94:81:c6:9d:37:1b:75:65:66:a1:4b:04:4b:98:4b:
         98:03:9d:54:0a:7f:36:0f:cb:51:db:5b:13:2c:89:4c:0c:41:
         95:a6:0d:bf:22:ba:4b:d5:86:c8:a0:a8:09:5a:d4:2a:6e:7a:
         c4:c1:f7:ac:46:1c:42:e7:25:ae:55:c0:db:05:75:fb:9e:52:
         ba:63:23:3e:54:9b:42:49:c1:1d:54:99:9b:c5:fd:ce:d1:3d:
         74:de:fb:ee:38:a5:f8:00:80:7b:f5:7a:86:82:a6:db:e7:14:
         3d:86:4c:6b:23:c3:a4:4a:06:e9:1f:8e:54:b8:47:d6:a8:22:
         a3:50:52:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:41:26 2025 by rpki-client