Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft
File:                     9_TLjFICzFNe2v0grLaoBQLk_Sk.mft (raw, json)
Hash identifier:          JZwbSHte71C8EtunX/xcr22FqM9t3LwadXavPks9CkI=
Subject key identifier:   E1:A6:F7:07:31:FB:2C:82:09:04:90:AF:F2:BC:3A:4D:3F:62:CD:CD
Authority key identifier: F7:F4:CB:8C:52:02:CC:53:5E:DA:FD:20:AC:B6:A8:05:02:E4:FD:29
Certificate issuer:       /CN=f7f4cb8c5202cc535edafd20acb6a80502e4fd29
Certificate serial:       019611A0FD14BFD4A48C05363CA7119B43D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft
Manifest number:          11C6
Signing time:             Mon 07 Apr 2025 19:01:25 +0000
Manifest this update:     Mon 07 Apr 2025 19:01:25 +0000
Manifest next update:     Tue 08 Apr 2025 19:01:25 +0000
Files and hashes:         1: 7HvIX7fCTI2gbjc-7RnxufJl1mA.roa (hash: NWw/MjwkOB9Lahk4UnTOA4UYmqTEetLTZcrDtU3BUtM=)
                          2: 9_TLjFICzFNe2v0grLaoBQLk_Sk.crl (hash: FPHYkjIwkE2UPSBLWG5wPSKwcU4TkK3NpEmJl1sCCew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 19:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:11:a0:fd:14:bf:d4:a4:8c:05:36:3c:a7:11:9b:43:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7f4cb8c5202cc535edafd20acb6a80502e4fd29
        Validity
            Not Before: Apr  7 19:01:25 2025 GMT
            Not After : Apr  8 19:01:25 2025 GMT
        Subject: CN=e1a6f70731fb2c82090490aff2bc3a4d3f62cdcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:28:ff:96:d0:d6:f3:a6:f8:68:fa:20:bb:d0:
                    75:ec:20:ce:b5:23:7a:f6:20:2f:71:6d:08:2a:2f:
                    0a:e6:f3:27:33:5a:2b:a2:34:7a:13:33:93:fc:12:
                    32:33:c3:96:f4:16:17:35:6e:89:63:df:cc:f8:eb:
                    26:d0:ec:c5:aa:db:00:60:27:9f:85:b1:d0:45:ae:
                    05:ce:9f:28:7d:a3:85:36:60:58:30:fe:70:06:6c:
                    0f:b0:3f:ff:82:18:13:c6:8a:4a:6e:74:30:af:d0:
                    6f:d9:f1:f5:02:af:3b:e0:60:71:94:a1:c3:78:fa:
                    60:f5:22:3f:f6:dd:b1:70:0c:51:98:f4:a6:d7:82:
                    a0:19:60:46:f7:b3:fa:b5:50:f6:77:56:f1:f0:7f:
                    af:cc:1f:28:22:b5:e3:00:a9:be:9a:ba:d3:41:a2:
                    63:6f:73:53:de:f9:92:29:7f:c2:09:ce:0a:2b:ee:
                    91:a9:5a:dc:26:9d:bd:13:eb:48:b6:30:6e:02:ca:
                    b6:83:a7:c1:d1:55:04:62:b8:7a:23:5d:d6:09:83:
                    6c:18:01:8f:e7:b4:8e:62:a2:2d:59:7e:eb:05:6d:
                    7f:b3:34:ee:d6:b7:4d:fa:42:2a:a2:20:7a:69:17:
                    bf:86:f8:25:e9:67:fe:58:5b:72:48:40:58:7e:e4:
                    88:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A6:F7:07:31:FB:2C:82:09:04:90:AF:F2:BC:3A:4D:3F:62:CD:CD
            X509v3 Authority Key Identifier:
                keyid:F7:F4:CB:8C:52:02:CC:53:5E:DA:FD:20:AC:B6:A8:05:02:E4:FD:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:72:41:73:f4:bf:a5:d9:e3:bb:e1:9e:21:ce:14:87:0b:0c:
         6e:e2:25:c7:3b:79:d3:af:e2:95:a0:25:26:74:7d:61:3c:f7:
         9c:b6:a3:c8:0d:08:2b:17:8e:ca:7e:75:93:b4:0f:fe:b6:40:
         db:b5:c2:57:5c:f9:50:01:07:ae:e6:ab:f7:f5:4e:37:b8:9a:
         c5:59:2d:23:06:2b:de:4e:9b:2a:d5:c1:c9:78:3d:3e:40:8b:
         3e:c2:6b:84:7d:1f:2f:3a:3b:4b:00:83:e5:97:68:69:3f:8f:
         31:9e:5b:b8:bc:73:18:16:de:79:9e:65:7a:04:38:22:2e:a5:
         3b:bc:8e:2b:a3:00:a2:a5:12:de:d4:0b:2f:e0:89:19:99:a5:
         dd:df:70:80:6e:4c:a3:d5:54:84:62:12:7d:56:b7:d1:33:1b:
         ad:ee:ed:c4:b2:33:51:f7:3f:e0:e6:55:ba:f1:45:5b:4f:46:
         ef:e3:42:36:95:bb:a5:7b:e1:68:d8:ae:97:3c:79:f8:4b:43:
         a1:5e:0b:f4:96:b3:09:f4:8c:be:2a:f4:18:01:94:2d:0d:2e:
         7e:25:52:4b:5f:d9:6a:c3:f0:8b:05:b7:29:67:a9:00:a2:4a:
         d2:ec:63:49:8a:a0:3c:fd:57:3a:1e:f1:79:a9:ca:4b:c5:c6:
         75:a5:ec:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYRoP0Uv9SkjAU2PKcRm0PZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZjRjYjhjNTIwMmNjNTM1ZWRhZmQyMGFjYjZhODA1MDJl
NGZkMjkwHhcNMjUwNDA3MTkwMTI1WhcNMjUwNDA4MTkwMTI1WjAzMTEwLwYDVQQD
EyhlMWE2ZjcwNzMxZmIyYzgyMDkwNDkwYWZmMmJjM2E0ZDNmNjJjZGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryj/ltDW86b4aPogu9B17CDOtSN6
9iAvcW0IKi8K5vMnM1orojR6EzOT/BIyM8OW9BYXNW6JY9/M+Osm0OzFqtsAYCef
hbHQRa4Fzp8ofaOFNmBYMP5wBmwPsD//ghgTxopKbnQwr9Bv2fH1Aq874GBxlKHD
ePpg9SI/9t2xcAxRmPSm14KgGWBG97P6tVD2d1bx8H+vzB8oIrXjAKm+mrrTQaJj
b3NT3vmSKX/CCc4KK+6RqVrcJp29E+tItjBuAsq2g6fB0VUEYrh6I13WCYNsGAGP
57SOYqItWX7rBW1/szTu1rdN+kIqoiB6aRe/hvgl6Wf+WFtySEBYfuSIzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGm9wcx+yyCCQSQr/K8Ok0/Ys3NMB8GA1UdIwQY
MBaAFPf0y4xSAsxTXtr9IKy2qAUC5P0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOV9UTGpGSUN6Rk5lMnYwZ3JMYW9CUUxrX1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iNjgxZTQtZmNmOC00MGFmLWFiYTMt
Y2YzYmRiMzJmZDY0LzEvOV9UTGpGSUN6Rk5lMnYwZ3JMYW9CUUxrX1NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9iNjgxZTQtZmNmOC00MGFmLWFiYTMtY2YzYmRiMzJmZDY0
LzEvOV9UTGpGSUN6Rk5lMnYwZ3JMYW9CUUxrX1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3HJBc/S/
pdnju+GeIc4UhwsMbuIlxzt506/ilaAlJnR9YTz3nLajyA0IKxeOyn51k7QP/rZA
27XCV1z5UAEHruar9/VON7iaxVktIwYr3k6bKtXByXg9PkCLPsJrhH0fLzo7SwCD
5ZdoaT+PMZ5buLxzGBbeeZ5legQ4Ii6lO7yOK6MAoqUS3tQLL+CJGZml3d9wgG5M
o9VUhGISfVa30TMbre7txLIzUfc/4OZVuvFFW09G7+NCNpW7pXvhaNiulzx5+EtD
oV4L9JazCfSMvir0GAGULQ0ufiVSS1/ZasPwiwW3KWepAKJK0uxjSYqgPP1XOh7x
eanKS8XGdaXsaw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:28:24 2025 by rpki-client