Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
File:                     9M3Ux8i_hxhwMKZEcCColvQeSZM.mft (raw, json)
Hash identifier:          CkfjIJzTTpyRaQOC217q2ZwZ263eDbc3COo1pVZPN+0=
Subject key identifier:   30:4D:73:69:73:15:5B:6F:B3:40:E9:DE:E0:33:45:92:49:CC:BC:11
Authority key identifier: F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93
Certificate issuer:       /CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
Certificate serial:       019750468B1F4C6E8D1C3352BC2B67FE6F8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
Manifest number:          120E
Signing time:             Sun 08 Jun 2025 16:01:29 +0000
Manifest this update:     Sun 08 Jun 2025 16:01:29 +0000
Manifest next update:     Mon 09 Jun 2025 16:01:29 +0000
Files and hashes:         1: 9M3Ux8i_hxhwMKZEcCColvQeSZM.crl (hash: 8lCJZuQbDd39pLcP3+TSLEJIQP4lvfOUccMGH0j/gA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:46:8b:1f:4c:6e:8d:1c:33:52:bc:2b:67:fe:6f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
        Validity
            Not Before: Jun  8 16:01:29 2025 GMT
            Not After : Jun  9 16:01:29 2025 GMT
        Subject: CN=304d736973155b6fb340e9dee033459249ccbc11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:96:00:23:5e:2b:60:27:37:3f:71:38:4b:d5:
                    0a:aa:38:1f:ad:97:21:64:2e:36:27:68:50:20:61:
                    9a:f1:c6:3b:fc:be:97:aa:dd:a6:bd:9b:9d:7a:58:
                    0c:72:78:75:21:1a:15:4d:2a:fb:0f:84:3f:e0:57:
                    1e:62:4f:5b:d5:0d:3a:92:3a:36:fa:27:83:e8:86:
                    82:75:a7:80:40:50:74:b7:52:57:d8:35:9f:92:93:
                    23:03:0d:37:90:f6:ab:f0:f8:99:10:4d:f9:09:50:
                    05:db:bb:2f:f9:06:c7:ca:9f:60:ff:29:fb:fd:7f:
                    54:a5:05:88:7a:64:24:a2:dc:f0:5b:69:1e:22:ed:
                    82:24:13:b3:1a:0f:97:37:68:f0:ed:c0:40:ec:99:
                    f4:fd:33:63:70:4e:10:3b:7c:84:d3:a3:4c:62:5a:
                    7e:95:9c:09:ee:a6:4e:28:31:73:f6:51:26:98:8b:
                    5f:62:1d:28:56:06:53:c6:7b:a3:4f:61:3a:95:82:
                    4a:d1:6a:07:cd:d6:f6:95:03:12:b6:75:fc:9c:69:
                    f6:b7:72:b3:2e:91:dd:d8:84:9f:ba:dd:d1:cc:7d:
                    72:e8:5b:69:22:d3:54:21:ee:ea:2f:80:91:7f:96:
                    66:1f:48:a3:cc:1d:0f:ec:fa:55:f8:ce:e8:36:81:
                    9c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4D:73:69:73:15:5B:6F:B3:40:E9:DE:E0:33:45:92:49:CC:BC:11
            X509v3 Authority Key Identifier:
                keyid:F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:13:3a:a1:68:6d:79:a8:91:ef:be:31:89:e6:84:64:0a:da:
         3a:7c:ff:2a:97:10:0b:57:c8:d6:a6:8a:25:09:76:ef:88:ac:
         e2:86:6b:76:20:62:93:78:09:d1:83:9b:6b:10:b0:23:06:d5:
         38:a2:6e:0a:cb:c4:c3:9f:24:d9:9a:c1:63:7d:4e:28:2c:35:
         a9:48:b7:40:5c:81:14:f5:2c:6b:ae:30:00:a8:f4:2b:97:29:
         2d:90:1c:f8:66:25:e2:32:cf:aa:33:58:d8:16:f3:4a:16:29:
         1b:99:f0:71:39:88:d0:dc:5a:c3:9b:1b:96:f4:cc:c0:e6:88:
         e7:b7:16:a4:65:0e:76:5d:44:09:42:ac:16:d5:1d:90:28:1b:
         70:77:05:bd:30:e9:46:17:42:db:2e:50:c1:35:4a:a7:2c:f0:
         2a:ac:5a:09:7a:b9:10:02:e6:a4:66:62:2a:ce:9d:e6:3e:d2:
         2d:86:3d:89:14:19:5a:85:cd:71:1e:b4:9a:3f:d2:8b:97:85:
         cb:90:15:68:22:83:9d:97:95:fc:08:19:93:01:9d:4b:e0:28:
         a1:51:30:15:0d:6b:a1:cd:68:46:0d:22:81:7c:6c:ab:97:92:
         a2:66:14:04:d1:90:24:ee:fa:48:33:42:3c:7c:8f:a0:d9:5f:
         2a:fc:1f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:30:35 2025 by rpki-client