Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
File:                     9YgvM_dIDcx7h2N66nY2gonXXC0.mft (raw, json)
Hash identifier:          GFGL7ul9lrLbSyqUnqqqtVfsHRQgI70SbDlhkSxp27c=
Subject key identifier:   BA:97:09:15:D3:E4:98:DD:0F:4E:73:6A:12:66:89:D1:69:0F:75:73
Authority key identifier: F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D
Certificate issuer:       /CN=f5882f33f7480dcc7b87637aea76368289d75c2d
Certificate serial:       01974931172A8D9B2C9ED4F5043A05710685
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
Manifest number:          0295
Signing time:             Sat 07 Jun 2025 07:00:43 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:43 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:43 +0000
Files and hashes:         1: 9YgvM_dIDcx7h2N66nY2gonXXC0.crl (hash: lTOwYiooZFlHMmZrsX7w8UONQlTyBoCe6F+avvsZleM=)
                          2: QOEcWjHe4NVCZVw1toczwOnDbvg.roa (hash: EaeTTrx2jGMXQlq6vQvVplBMXhi0x7kTgcTmmy7+jJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:17:2a:8d:9b:2c:9e:d4:f5:04:3a:05:71:06:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5882f33f7480dcc7b87637aea76368289d75c2d
        Validity
            Not Before: Jun  7 07:00:43 2025 GMT
            Not After : Jun  8 07:00:43 2025 GMT
        Subject: CN=ba970915d3e498dd0f4e736a126689d1690f7573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7a:31:34:c1:b1:89:e4:96:08:3a:84:92:0d:
                    32:09:30:f3:1a:0c:1f:eb:7d:d0:34:98:e0:45:84:
                    fb:4b:4e:a4:34:60:96:74:72:64:1a:11:ab:6a:da:
                    63:06:ea:f5:d8:62:7d:80:5a:97:23:d3:67:07:69:
                    71:b7:f7:ca:73:5a:d0:31:88:1c:5f:14:49:f2:5b:
                    3e:0d:ee:e4:9a:34:b0:20:96:a9:62:13:4c:01:62:
                    8f:a9:c8:17:ed:f1:c2:5a:40:c2:b2:6e:c1:fd:66:
                    c9:55:4b:bb:53:8e:cc:d0:6d:6e:ef:d2:07:cd:78:
                    8d:c4:2d:55:6f:ea:e4:db:8f:68:dc:71:4a:d4:9d:
                    bf:a2:a3:86:b2:79:86:67:29:c2:72:99:b7:e7:fe:
                    d3:60:b3:16:0c:30:09:4e:00:8b:12:d3:22:1d:5c:
                    07:23:57:1b:46:5a:5b:e3:41:82:ed:05:cd:45:70:
                    db:00:30:1e:75:80:0a:78:64:5e:9e:a4:f5:40:0c:
                    23:b5:b5:d3:c7:df:fd:92:e2:3e:e3:86:59:e8:cc:
                    3a:b7:c5:48:86:ff:00:42:27:db:c7:3e:76:f3:b8:
                    26:1c:fb:99:4f:df:f0:5e:11:14:79:3c:c6:08:3d:
                    bb:54:bb:24:ad:d3:6f:46:ef:fe:08:9c:8f:3a:75:
                    a4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:97:09:15:D3:E4:98:DD:0F:4E:73:6A:12:66:89:D1:69:0F:75:73
            X509v3 Authority Key Identifier:
                keyid:F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:6f:23:99:68:3d:03:3a:96:30:d9:4c:1e:99:6e:cb:6c:6a:
         b4:0e:21:9c:2c:7b:8b:f0:0a:c1:94:57:6d:af:5a:10:dd:ad:
         7a:56:ab:b2:e2:37:30:98:b9:6b:f4:c7:b5:fe:06:a2:6f:31:
         a3:e9:5c:07:2b:3e:54:b4:8b:23:be:f2:b7:74:2c:25:84:b9:
         53:60:e0:6f:55:70:3a:64:17:08:fe:53:b9:97:f9:4e:87:20:
         99:51:cc:0d:80:8a:72:e1:c0:e8:90:84:5c:ed:80:36:fe:e8:
         96:b5:f0:aa:69:80:f8:d1:13:a3:dd:8f:b6:a8:7d:40:77:e7:
         a8:80:1c:99:a6:bc:27:3d:32:32:41:b2:07:43:30:e9:09:fb:
         35:7e:5c:6a:c6:aa:1a:b9:a1:7b:e9:d2:c6:80:d4:43:54:c5:
         65:df:e5:d0:d6:57:94:b6:61:57:15:6b:f4:c3:94:88:4c:d4:
         bf:f8:7b:ad:a1:74:a3:55:43:1e:4d:56:50:84:9c:b4:74:d4:
         ea:88:44:69:a7:12:49:73:f5:a3:a3:73:81:8d:48:ab:40:24:
         bf:8f:75:f6:9e:bd:43:5f:82:8c:d2:cc:41:ca:8e:94:58:34:
         95:a4:83:fc:d9:80:65:05:9a:cd:fc:10:4d:a3:e2:87:de:7f:
         db:b6:f7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:56:06 2025 by rpki-client