Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
File:                     9URgWW1tUyQB3jE9-JA2blN21gI.mft (raw, json)
Hash identifier:          hmrzLKlADTlRU6J1mjFGCmSHAOV1SseJG13MFXXTZw0=
Subject key identifier:   6A:F4:3A:5A:D9:56:C1:60:A7:78:6F:BC:70:E7:52:C8:3D:F9:F0:76
Authority key identifier: F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
Certificate issuer:       /CN=f54460596d6d532401de313df890366e5376d602
Certificate serial:       0197586D343A98F3BEADC87EC0F36C4EAD2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
Manifest number:          0556
Signing time:             Tue 10 Jun 2025 06:00:41 +0000
Manifest this update:     Tue 10 Jun 2025 06:00:41 +0000
Manifest next update:     Wed 11 Jun 2025 06:00:41 +0000
Files and hashes:         1: 9URgWW1tUyQB3jE9-JA2blN21gI.crl (hash: NgKkbc/O8/lDwTOUWkyhRgvLPvlNpKrJVp85wt1DtGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:6d:34:3a:98:f3:be:ad:c8:7e:c0:f3:6c:4e:ad:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f54460596d6d532401de313df890366e5376d602
        Validity
            Not Before: Jun 10 06:00:41 2025 GMT
            Not After : Jun 11 06:00:41 2025 GMT
        Subject: CN=6af43a5ad956c160a7786fbc70e752c83df9f076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3f:cc:7a:bc:1d:0e:62:6f:c7:29:f9:56:0e:
                    12:6f:43:06:9c:33:0c:b3:9d:39:b7:e1:97:69:e6:
                    81:f2:2f:18:17:80:5a:a3:c0:29:a8:ce:d9:32:76:
                    39:35:48:66:c6:11:30:71:9d:2c:7b:b0:de:2a:b3:
                    25:30:c9:2a:62:2d:ad:20:f1:6d:52:c6:da:13:16:
                    f8:90:46:18:db:2a:ac:77:1f:b4:07:97:6a:9d:d7:
                    f2:5b:e1:bd:ae:ca:bf:83:18:e3:97:9d:78:1c:15:
                    d2:9b:e9:76:fc:44:9f:95:44:77:2f:0f:28:6d:c7:
                    6a:53:2f:74:17:63:6c:7f:a9:72:9f:be:2f:9b:d8:
                    cf:15:40:68:0b:18:cc:d7:e6:36:7b:37:20:55:89:
                    35:ea:cb:b1:4a:cf:38:ee:b5:fe:0d:74:86:aa:60:
                    2c:99:35:09:2a:93:4d:a1:39:12:4c:bc:91:85:48:
                    e8:61:a8:3d:a7:f3:81:8d:07:51:e5:5c:c3:25:1e:
                    9b:b2:c5:91:16:ac:5d:9b:fe:13:61:ec:dc:81:62:
                    26:22:fb:c6:71:48:b0:14:77:73:1b:36:af:a9:89:
                    2a:2c:f0:28:18:cb:53:e0:c2:6b:56:5c:b5:b1:1b:
                    cb:18:5b:92:10:d5:75:83:d4:c6:ab:29:33:82:5c:
                    1f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F4:3A:5A:D9:56:C1:60:A7:78:6F:BC:70:E7:52:C8:3D:F9:F0:76
            X509v3 Authority Key Identifier:
                keyid:F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:03:27:0a:af:e4:20:f1:1a:aa:d3:a2:a0:10:37:2f:28:f8:
         05:57:21:4d:e7:48:df:62:db:fa:e9:d1:04:1d:a4:75:55:80:
         04:49:a9:72:59:0a:07:46:72:07:4d:ec:28:3a:05:de:a3:89:
         22:16:15:c9:92:56:2d:76:13:a5:25:6a:bd:79:eb:28:e6:f5:
         b6:81:a6:ca:f3:e3:90:66:89:ed:cb:a7:2e:6b:27:f3:cc:d8:
         94:15:d2:8e:1e:78:bd:4c:2f:b7:f9:2a:91:05:de:e7:ac:9b:
         72:57:98:d8:6f:22:bb:b1:02:cf:44:43:55:29:3a:50:fb:87:
         96:db:51:94:fe:44:61:9a:2b:63:41:34:88:fb:d5:e5:6c:c0:
         79:b0:8a:83:e5:e8:12:fb:dc:75:24:a1:2c:b0:3c:fe:67:6d:
         dd:1f:07:29:72:f7:0e:b3:ae:c3:2c:ff:64:a1:ce:05:f5:85:
         06:28:cf:eb:05:d3:e2:69:79:eb:2c:a0:58:fb:73:7b:12:4a:
         14:3c:8d:df:8d:78:82:6d:e5:a2:78:e3:bc:9d:5f:ba:04:c4:
         ba:ba:ec:2f:83:a2:17:b4:1e:09:4d:48:76:92:e6:2e:72:ac:
         67:e9:01:99:74:3f:91:60:23:43:dd:fd:96:a1:62:68:0f:4b:
         1e:49:65:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:27:42 2025 by rpki-client