Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
File:                     1-c9m7XQoo55j8NJzYDf0McQao08.mft (raw, json)
Hash identifier:          XVrfAJtU/JMXjpLLc8OBOEZ/ucIVMTdgks+4HmmGbUM=
Subject key identifier:   57:5B:61:76:1A:88:D3:D1:51:14:B4:FF:CD:1B:19:D5:96:AB:E6:4E
Authority key identifier: F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
Certificate issuer:       /CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Certificate serial:       019755A33425E70B45506DD1A75ADEF6A3C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
Manifest number:          1583
Signing time:             Mon 09 Jun 2025 17:00:48 +0000
Manifest this update:     Mon 09 Jun 2025 17:00:48 +0000
Manifest next update:     Tue 10 Jun 2025 17:00:48 +0000
Files and hashes:         1: 1-c9m7XQoo55j8NJzYDf0McQao08.crl (hash: 5rZZrhO6yYjNfxIDy9o64w/OCVKBpfS4tAu0cbkMPBg=)
                          2: rbOZFLBJLeiBgSg-ywSTHEPc89w.roa (hash: Wz1ZKiJOk56RIdFfsa2AALc0JqTjfQEXp/iXAbjA7+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 11:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:55:a3:34:25:e7:0b:45:50:6d:d1:a7:5a:de:f6:a3:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
        Validity
            Not Before: Jun  9 17:00:48 2025 GMT
            Not After : Jun 10 17:00:48 2025 GMT
        Subject: CN=575b61761a88d3d15114b4ffcd1b19d596abe64e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4c:5a:c5:b9:b6:4c:0c:1c:76:79:ce:6a:9e:
                    99:04:aa:c2:af:d2:d4:1e:a5:44:32:2b:8e:8a:24:
                    8c:d9:be:08:89:b6:c4:44:90:2e:9e:5c:1a:f1:d2:
                    02:e4:62:14:45:73:a4:16:33:67:19:6b:8b:06:d9:
                    62:ae:5c:9b:4d:c6:34:e0:d2:e1:5e:12:ea:ad:48:
                    da:09:63:94:0f:71:fd:26:0a:30:d2:94:ce:cd:3d:
                    e7:ab:e0:45:bf:3a:6f:6d:09:5d:fe:dc:f3:a3:fd:
                    79:f3:04:5d:60:8b:9b:4b:90:a3:f4:5e:bc:1c:07:
                    65:e5:8b:67:8f:7a:eb:01:d0:98:5c:23:20:be:cf:
                    b8:da:c9:88:7d:a5:5f:f7:c8:a2:a9:b6:c4:63:9c:
                    20:c6:61:cf:8e:63:14:99:e3:c6:02:08:f5:18:f2:
                    0d:89:b5:a4:16:8e:fa:dc:96:72:43:58:d4:d1:d9:
                    db:f8:5f:5f:1c:20:56:2d:07:b3:f9:89:71:f7:47:
                    86:f7:bb:05:84:3b:0a:bb:9b:1f:01:2d:0f:4e:c6:
                    a7:b5:d9:b3:7c:72:9f:3e:ef:fd:b1:9f:a7:8a:17:
                    d0:66:81:68:54:ec:2f:0b:28:2e:55:d7:75:09:2f:
                    de:fb:a3:5d:fb:6b:84:4d:d0:4f:95:15:31:aa:1d:
                    8a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5B:61:76:1A:88:D3:D1:51:14:B4:FF:CD:1B:19:D5:96:AB:E6:4E
            X509v3 Authority Key Identifier:
                keyid:F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:0f:a6:8c:03:aa:99:5a:93:18:20:40:9a:18:35:c5:25:15:
         81:cc:fd:67:45:93:84:03:ea:fe:31:44:a5:56:8b:59:aa:1e:
         b2:48:b0:e6:d3:3b:f2:dc:6d:24:00:57:83:ad:cf:ad:d5:d0:
         71:ac:98:2c:36:e1:82:07:9a:56:2c:eb:49:3f:47:ef:42:fb:
         8c:3c:b3:3e:5d:6d:37:35:c2:5d:27:b5:ff:d4:36:f4:f7:82:
         90:ab:5b:f6:c4:19:2f:25:65:b7:24:09:37:fa:55:c9:12:14:
         c0:8f:49:35:79:9c:d6:1f:d8:62:c7:38:56:b0:02:18:38:0f:
         bb:e0:6b:b8:d6:3c:36:ac:8a:be:3e:d5:a0:b8:b7:b1:53:6b:
         58:d9:86:13:12:d1:02:3b:c3:cd:43:9c:c0:70:88:aa:b5:cc:
         7d:77:e4:4d:98:17:3a:c2:59:4a:ed:c9:bb:70:a8:04:d2:63:
         88:74:c7:58:5c:56:a5:12:03:af:0d:9f:5f:e7:c6:d6:d2:f4:
         97:dd:d5:b4:43:30:39:f3:e1:74:af:08:00:43:f3:91:54:19:
         58:60:bc:7f:01:7f:92:d4:8f:8e:a1:74:33:d4:0d:20:9c:af:
         30:de:83:8f:08:cd:0e:b7:d4:2b:39:e3:4a:74:6a:bc:62:23:
         06:c9:51:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:42:38 2025 by rpki-client