Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
File:                     9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft (raw, json)
Hash identifier:          RZhTwEEA6ebgTS/lcSrgZ4GBnmlQhwTTmzJWIKmspf0=
Subject key identifier:   C6:5F:70:4F:F6:0F:1A:A9:AA:29:38:A6:73:BA:26:61:DB:DE:FC:48
Authority key identifier: F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F
Certificate issuer:       /CN=f69fb24ce67c211297b065c67f1b8209b9944b0f
Certificate serial:       019578343856A062A48198C34A54F3935E97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
Manifest number:          AE
Signing time:             Sun 09 Mar 2025 00:00:42 +0000
Manifest this update:     Sun 09 Mar 2025 00:00:42 +0000
Manifest next update:     Mon 10 Mar 2025 00:00:42 +0000
Files and hashes:         1: 862AzXPpO4q0TZw2prtOswI6C3U.roa (hash: UvMXTudocwR1LdtSYifhkjBcDLnzk1IebtQXMqpmBY0=)
                          2: 9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl (hash: P/TxXcEfLzx0oUnWXcBVNJQ//oTu1oScqlHMD5udp6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 10 Mar 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:78:34:38:56:a0:62:a4:81:98:c3:4a:54:f3:93:5e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69fb24ce67c211297b065c67f1b8209b9944b0f
        Validity
            Not Before: Mar  9 00:00:42 2025 GMT
            Not After : Mar 10 00:00:42 2025 GMT
        Subject: CN=c65f704ff60f1aa9aa2938a673ba2661dbdefc48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:69:25:a2:ab:14:b5:b0:af:5e:ec:a2:b8:9b:
                    49:e6:46:6d:7a:9a:fb:1c:b1:c8:34:c3:48:0b:18:
                    e0:00:3e:57:7b:ae:45:ba:a8:3f:8a:fd:f0:1c:50:
                    23:73:d4:f6:db:6b:fb:2a:72:13:c4:78:1c:c8:c0:
                    da:91:b2:16:39:ed:cd:3b:72:c0:25:16:49:65:7d:
                    88:40:f5:e0:0e:5d:80:da:35:d3:ec:2c:2c:c8:04:
                    24:89:10:ff:eb:f0:a6:d6:c9:8d:cc:d1:14:29:b7:
                    4a:f3:4f:1f:a3:7a:2a:7a:9f:02:48:49:c2:ca:69:
                    95:b6:5b:fd:5e:26:7c:b5:ae:b6:38:46:7e:10:cb:
                    44:31:ce:08:08:6d:5d:f1:fe:71:45:8e:f6:d4:7d:
                    0a:86:53:ae:f3:86:8d:b1:1b:e9:f6:c1:41:dc:f2:
                    4a:cf:8c:f1:fe:9e:1c:47:80:65:ee:7d:87:1f:d8:
                    66:16:4a:32:60:67:97:8c:36:b0:b0:24:ea:8d:3f:
                    1f:c2:63:02:86:e8:50:40:6b:da:c3:6e:67:ac:42:
                    bf:07:3d:fa:6d:be:8e:65:fc:31:8d:cd:b6:4b:d5:
                    a6:4d:77:d6:5e:9a:d4:c4:7c:28:2e:59:a3:6f:61:
                    c1:c2:ab:79:0c:15:3c:d9:75:a9:7e:94:6c:27:76:
                    37:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5F:70:4F:F6:0F:1A:A9:AA:29:38:A6:73:BA:26:61:DB:DE:FC:48
            X509v3 Authority Key Identifier:
                keyid:F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:e8:e1:84:0e:c3:e6:43:b1:19:c3:c1:26:40:77:4e:72:af:
         02:70:49:2e:77:39:bf:83:b6:75:e5:87:c5:dd:83:a0:8c:60:
         55:23:b5:18:10:11:6a:8b:66:c4:76:62:ac:ab:a4:5a:45:06:
         de:be:ca:f4:1f:4a:14:a2:c9:54:24:21:7e:22:c9:2b:47:30:
         18:05:70:4c:2f:eb:68:41:7a:55:78:f7:50:85:b2:be:1b:e7:
         d7:1f:a0:a6:bf:8a:d8:4e:f2:a0:fe:8f:3e:8b:11:59:f9:68:
         f2:41:74:42:5f:3e:62:c0:36:d8:a5:e4:ea:df:80:4d:7a:e9:
         43:dd:3b:d8:34:8b:cc:d1:10:4f:3e:c7:18:38:b5:62:24:a2:
         67:f8:56:fb:f8:3e:5c:62:e1:70:5b:92:e5:c9:e1:f7:7f:20:
         b1:0e:32:3a:15:f4:26:74:8c:fd:b4:24:1e:ba:90:11:d1:e9:
         4e:4e:fb:4b:c7:9e:8a:99:7e:75:7f:5d:d5:64:e9:60:9c:a9:
         7c:13:d6:55:24:8f:36:ee:c4:a1:00:51:f4:58:73:9d:8e:1e:
         79:b8:be:b1:c0:e8:b5:ff:3b:48:75:d9:14:c2:c5:cc:5f:97:
         22:e5:a6:9c:59:f9:11:4e:58:ed:dc:c6:03:7f:87:23:e1:fe:
         34:2e:cd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:16:41 2025 by rpki-client