Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
File:                     Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft (raw, json)
Hash identifier:          AhrW679UyFmXafNauo9Bw+ejvuncR90iIKhCH0iIyrY=
Subject key identifier:   7A:44:48:46:B5:A5:FF:C3:DA:D7:07:84:5D:B4:F3:F5:8C:09:84:2E
Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
Certificate issuer:       /CN=09f93d62beb75bb4232dcd052d270276d36f8573
Certificate serial:       0197462FC9B5E5BC33BE4F73EC69DE31D2E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
Manifest number:          13C3
Signing time:             Fri 06 Jun 2025 17:00:26 +0000
Manifest this update:     Fri 06 Jun 2025 17:00:26 +0000
Manifest next update:     Sat 07 Jun 2025 17:00:26 +0000
Files and hashes:         1: 0wq7nKaScS0pbrNtDp5CCYa40I0.roa (hash: YLAnQ899fen9G75o1VQ4WG3xmrR1aE24+aqGBivGfPg=)
                          2: C61GwcJeRtAOI01pw_9OifWmDg4.roa (hash: 9PW5ZjiozCQ8wL+eGdZzyMhYF63EjKCPmt13mTOq/Zk=)
                          3: Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl (hash: qzbgecJqjxIg6xQFwkPm3txSnFA6M+RyIXFu8zCQPX8=)
                          4: ItVJPK2mLPB9FvjsYvA3kQUwYMo.roa (hash: 1Z3qdwF8M3C1Jp6cQIQ9f/sPtjEFM+fpGWKdDGskejw=)
                          5: y9tjDMwj3FUxf0FE58l3CpQ2f7s.roa (hash: ER0udvIPerpU2WoViOM+UwzfexA+zzC+m8a4XFVRnXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:2f:c9:b5:e5:bc:33:be:4f:73:ec:69:de:31:d2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573
        Validity
            Not Before: Jun  6 17:00:26 2025 GMT
            Not After : Jun  7 17:00:26 2025 GMT
        Subject: CN=7a444846b5a5ffc3dad707845db4f3f58c09842e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:93:23:c8:97:fe:76:c4:15:95:b4:ec:9b:6a:
                    2d:64:dd:b8:1f:30:7b:d7:26:6f:fc:36:76:cb:db:
                    ef:0d:55:73:22:08:4f:8d:6b:f3:17:ee:d0:ac:23:
                    c4:bb:db:ba:f1:39:9b:2e:63:a9:c9:45:e1:f7:9f:
                    f0:46:96:b3:51:31:13:56:df:57:20:27:6c:45:d0:
                    c8:56:f7:2b:7b:0e:cb:82:c6:7a:8f:28:7d:d9:3c:
                    73:a9:33:b9:2f:bf:20:0f:8b:75:82:99:74:62:fd:
                    53:a6:33:4f:b0:e5:88:76:77:60:93:92:e9:85:dd:
                    6d:41:0f:5f:17:73:3b:f9:56:f0:62:ba:32:36:06:
                    fc:a9:ab:5e:02:25:56:ff:80:e3:37:2d:90:b3:2e:
                    e9:81:8b:c3:63:59:e8:00:a4:0b:8d:38:34:76:9d:
                    cd:88:59:ab:28:60:1e:a1:1f:f9:e3:a9:4e:aa:52:
                    6a:b3:a5:32:b4:94:e0:b7:71:1d:b0:e3:25:c4:55:
                    6d:fc:74:6a:07:6f:d9:a1:74:23:d7:4a:45:df:2e:
                    1f:41:4c:6b:be:23:d9:29:52:06:ae:cc:92:17:25:
                    d4:08:23:f0:1c:74:aa:a4:01:cb:31:da:53:02:b9:
                    99:e4:b1:6c:ad:90:2f:b9:96:c4:18:59:f2:68:6e:
                    1d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:44:48:46:B5:A5:FF:C3:DA:D7:07:84:5D:B4:F3:F5:8C:09:84:2E
            X509v3 Authority Key Identifier:
                keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:30:2e:39:8d:d8:84:dd:86:d0:b8:73:3d:42:ce:92:0e:f9:
         e2:49:79:2e:3f:78:1a:d0:f0:11:c4:5e:70:b2:57:67:ee:99:
         d2:2e:c8:94:26:7a:0f:91:ea:8c:39:cb:d8:d3:05:48:fd:5b:
         43:46:4c:de:98:8f:21:61:2f:10:cb:90:c7:3f:ba:7f:63:2b:
         95:48:c8:94:ac:16:16:f0:2a:92:d9:9c:88:01:43:16:fe:34:
         73:72:20:27:ac:4a:b1:1b:55:f0:6f:01:2e:16:fa:8e:0c:3f:
         5d:96:9c:b1:79:59:da:63:3d:6c:7a:b9:43:0e:64:89:39:fd:
         53:61:d1:a2:ba:4b:8b:22:e5:a9:d6:9b:b3:a7:2f:d6:42:c3:
         46:ab:0e:13:c0:f5:61:e1:be:ca:4e:69:07:fb:ea:ac:52:ad:
         59:d4:24:ac:a1:54:d8:05:9a:b6:23:b7:b1:f3:ee:80:04:65:
         c8:6a:71:cb:39:ba:46:98:7d:31:e6:10:4c:54:2e:00:a1:de:
         53:6f:48:db:2f:48:6e:6d:03:bb:b5:01:89:76:e7:e4:ee:46:
         13:e6:7e:e8:6e:30:ff:b6:38:39:35:d3:1f:5c:0d:19:29:50:
         91:67:19:6e:2c:2f:f2:75:b7:94:17:dc:a5:2c:71:af:9f:75:
         61:76:bf:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:06 2025 by rpki-client