Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
File:                     9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft (raw, json)
Hash identifier:          Sw7BQlJPRP98RKDZRKZTbgU0jgFfn0VlzzHU6laNwjc=
Subject key identifier:   F1:EA:F8:09:F9:9C:8B:ED:F8:3F:1C:51:C8:0E:DB:05:5B:E1:18:6F
Authority key identifier: F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A
Certificate issuer:       /CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
Certificate serial:       019644E8F47092081A3D2307780C7F1CB162
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
Manifest number:          12EA
Signing time:             Thu 17 Apr 2025 18:00:39 +0000
Manifest this update:     Thu 17 Apr 2025 18:00:39 +0000
Manifest next update:     Fri 18 Apr 2025 18:00:39 +0000
Files and hashes:         1: 9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl (hash: vT86mzhtmJTyo29PFkVMSq/mWuJpaSNLW9qaodSzkTs=)
                          2: rtyY9Cz1KYossj4NRjvNjMhwRZI.roa (hash: KYSFbkeXEHZUiKzf8OS4b0YogJmArNqO7BI7cVGBHSA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:e8:f4:70:92:08:1a:3d:23:07:78:0c:7f:1c:b1:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
        Validity
            Not Before: Apr 17 18:00:39 2025 GMT
            Not After : Apr 18 18:00:39 2025 GMT
        Subject: CN=f1eaf809f99c8bedf83f1c51c80edb055be1186f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a4:05:bc:23:f7:12:f8:1f:bf:08:88:d7:13:
                    01:ff:cc:72:0f:e9:b0:7c:0b:1d:da:f1:b6:ab:4c:
                    10:9d:03:c2:5e:97:3c:5b:88:85:a4:cb:e0:5c:35:
                    f9:e9:51:c1:14:74:2b:6f:24:78:0c:56:87:de:83:
                    fd:fa:1b:6c:8b:2b:76:ab:25:fd:e8:df:50:2a:72:
                    3a:02:8b:f1:b2:1a:bc:eb:ff:3e:92:8f:d3:3b:1e:
                    e4:32:12:6d:2a:fd:dc:43:8d:88:9f:e9:de:78:ab:
                    a5:c8:f4:bd:b8:cb:37:75:52:f9:72:b5:c7:16:2a:
                    07:00:c4:f6:77:f1:ac:00:4e:be:12:f0:1d:48:7c:
                    11:e5:89:f5:2d:f1:3e:df:fa:fb:a1:a6:02:03:f4:
                    24:94:83:0e:80:fe:26:97:23:ac:17:c6:47:7e:ae:
                    2e:53:5c:73:89:6c:dd:81:2a:59:1f:2a:51:d0:ad:
                    37:4e:80:db:07:a7:0b:08:31:38:7f:8f:b5:ae:1e:
                    1f:ef:84:7e:d4:28:43:51:07:9a:68:d2:13:f7:1e:
                    75:3f:b7:55:6e:49:9f:56:ac:72:d4:15:d4:40:06:
                    4b:7f:42:68:9c:34:54:c3:28:a5:7f:a2:a8:95:b8:
                    19:97:ca:13:30:1e:93:7a:6b:57:d2:b8:b1:2b:31:
                    d4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:EA:F8:09:F9:9C:8B:ED:F8:3F:1C:51:C8:0E:DB:05:5B:E1:18:6F
            X509v3 Authority Key Identifier:
                keyid:F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:de:07:64:56:09:f4:10:10:15:2a:ce:4a:d2:df:99:7d:a6:
         ee:97:b1:94:e6:7f:ab:0c:3a:eb:35:c5:74:39:fe:9a:98:d1:
         c1:e7:b8:f1:1d:77:54:3a:7a:8f:2e:40:09:61:76:97:b1:fb:
         6b:29:f6:f3:0e:e4:21:85:1e:f4:b5:33:82:01:24:0b:d6:04:
         3a:df:c5:01:f4:27:2e:47:c1:c3:8d:c5:be:08:84:07:d9:67:
         ec:75:7a:c8:92:53:e0:de:30:d3:fc:9e:d8:28:8e:d4:f3:31:
         92:e4:2f:f5:2f:42:c5:71:55:b4:0d:d2:24:06:cf:71:1b:10:
         cb:02:e7:28:75:9c:d2:36:eb:12:07:fd:3e:cd:ec:1e:01:70:
         d6:90:c5:3d:68:41:a5:58:4e:63:dc:09:dc:90:ec:88:4e:e6:
         cb:f9:30:6e:cb:55:79:64:98:01:4b:58:ef:1c:ac:7d:ba:24:
         62:7c:6b:48:3a:82:4c:28:cc:78:51:8e:0f:83:f1:81:e3:f9:
         84:50:5c:81:e0:12:c4:91:bd:62:27:7f:ac:80:03:ab:6c:e9:
         23:64:2a:a4:4d:fe:43:64:43:3f:a6:cb:10:c9:7b:f1:d2:9e:
         6b:b7:13:76:4c:c2:6a:35:38:de:09:f1:53:23:39:5a:14:14:
         56:14:4c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:38:56 2025 by rpki-client