Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
File:                     Rj7duRtTj4Port9VZclg3wsQfqI.mft (raw, json)
Hash identifier:          7R/rZnn4AfBqSFfjMQWY9Z8PNvT8JfjRngfhIC1qdiY=
Subject key identifier:   2C:5C:0A:96:23:6A:E1:74:CB:B3:07:62:FF:FA:DD:32:72:1F:C8:6A
Authority key identifier: 46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2
Certificate issuer:       /CN=463eddb91b538f83e8aedf5565c960df0b107ea2
Certificate serial:       01976E1981CBFACD6F781AE584B01574592C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
Manifest number:          09F0
Signing time:             Sat 14 Jun 2025 11:00:54 +0000
Manifest this update:     Sat 14 Jun 2025 11:00:54 +0000
Manifest next update:     Sun 15 Jun 2025 11:00:54 +0000
Files and hashes:         1: Rj7duRtTj4Port9VZclg3wsQfqI.crl (hash: bbkzXOSQYJUAkA7rHLv9RfCjnG6QKCDT9wH/gEZIOWo=)
                          2: VDpi_TMhu0MubOzMgSkXQ1gGEVo.roa (hash: l1aEmCnDC0lAylyG2lI+yA0mAn8xNZotz2Kipdmx4J4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:19:81:cb:fa:cd:6f:78:1a:e5:84:b0:15:74:59:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463eddb91b538f83e8aedf5565c960df0b107ea2
        Validity
            Not Before: Jun 14 11:00:54 2025 GMT
            Not After : Jun 15 11:00:54 2025 GMT
        Subject: CN=2c5c0a96236ae174cbb30762fffadd32721fc86a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e9:44:08:1d:70:fa:10:f7:c3:98:f5:38:3d:
                    ac:4d:2d:dd:9b:03:d3:52:ba:dc:e6:c1:f0:3b:88:
                    d6:0f:75:19:09:59:9a:1e:b1:9d:62:d7:51:7f:de:
                    2e:9a:d0:b5:66:3b:a9:94:96:3b:d6:7c:66:3f:8c:
                    6a:fe:26:3f:79:7c:00:00:5a:a3:0c:a3:f3:58:55:
                    e7:5d:91:d1:02:e7:d1:71:65:02:9e:da:41:10:b6:
                    bb:ae:58:6b:72:a7:cc:5a:90:45:77:21:a0:a0:16:
                    11:87:45:cd:2e:11:c4:d8:d1:5f:0d:8f:8d:95:14:
                    9c:58:f0:7f:59:8c:8a:56:13:d6:1f:93:9d:9b:50:
                    60:8f:78:4b:8d:08:75:73:9d:ea:34:fc:46:61:f9:
                    9e:e2:2d:b3:fd:fb:8c:06:32:03:f4:15:a1:7f:3b:
                    c6:a4:12:b0:90:00:f5:3b:93:d8:51:79:12:71:3f:
                    2a:0f:f7:48:56:c9:f2:27:cc:f6:20:41:40:82:d1:
                    aa:e8:f8:09:18:14:72:94:a5:21:67:30:72:4d:83:
                    2e:c3:4f:9b:67:64:6e:4f:7f:f8:6f:56:a4:fe:34:
                    75:6f:24:cb:a1:36:36:44:24:b6:aa:46:de:10:4e:
                    ff:70:d3:61:a6:9b:08:3e:1c:c5:e2:e4:fa:17:d4:
                    c9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5C:0A:96:23:6A:E1:74:CB:B3:07:62:FF:FA:DD:32:72:1F:C8:6A
            X509v3 Authority Key Identifier:
                keyid:46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:d0:e9:f8:a7:71:d8:5c:b9:8d:4a:de:70:47:75:db:e6:14:
         f1:d7:3c:b5:7b:7f:4f:a3:be:e0:58:17:e0:68:02:c1:d5:ab:
         65:30:f4:47:b9:cf:c8:96:c3:4b:0f:e0:41:cf:8d:59:ea:fb:
         07:79:35:83:e8:39:4f:5b:9b:d2:e8:06:02:9e:6b:25:d1:ff:
         8e:bb:9f:2f:4a:ce:5c:0b:bf:1b:20:5e:0a:31:3d:95:b1:d6:
         b3:68:3a:d8:e2:30:07:a8:be:a4:e9:96:6c:13:0f:ab:d1:de:
         a4:90:bc:3f:8f:d7:c8:d4:33:9e:d9:1b:63:82:08:74:33:88:
         30:74:83:b3:5c:07:ac:96:bd:70:bc:ab:a0:d1:1c:8b:09:97:
         5e:2a:65:65:eb:13:30:24:9c:8e:a3:d2:dc:4f:cf:73:c0:72:
         09:32:16:9f:59:ba:d9:2b:ce:62:d6:13:55:ff:fe:3b:0e:66:
         a5:24:6b:3c:85:0a:bb:c6:7c:55:73:3d:27:47:f5:d6:0c:d1:
         4a:c3:d6:bf:f8:10:6f:03:a7:c6:cc:b0:56:c6:57:98:d0:bb:
         38:75:bb:aa:a3:66:6e:8c:cf:35:33:92:b0:21:12:4b:70:b4:
         d9:cd:8c:b2:fe:79:c5:90:5c:f6:16:98:cf:7f:45:75:5b:cf:
         a5:65:87:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:09:36 2025 by rpki-client