Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
File:                     n8wvPua1w_9txTRqdTVQb6gkEj4.mft (raw, json)
Hash identifier:          UWc3CxkBp1N+48c2aC+uTjwDZHN5gFmiI8e7hvRBZVo=
Subject key identifier:   F3:86:90:23:AE:00:07:28:ED:80:74:A5:F7:AB:06:2F:68:F9:AA:1A
Authority key identifier: 9F:CC:2F:3E:E6:B5:C3:FF:6D:C5:34:6A:75:35:50:6F:A8:24:12:3E
Certificate issuer:       /CN=9fcc2f3ee6b5c3ff6dc5346a7535506fa824123e
Certificate serial:       01976EF4D47C3E997637C77B56AB59CCFCA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
Manifest number:          0A91
Signing time:             Sat 14 Jun 2025 15:00:28 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:28 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:28 +0000
Files and hashes:         1: d6576JrBH9SAWrjxOsX8R_x4jzM.roa (hash: tOpLNCmhcfBx5S04WHkAz4ZSeX9flEr3FqNx70rcKF0=)
                          2: n8wvPua1w_9txTRqdTVQb6gkEj4.crl (hash: P/zTB63eFIvqrIOePPHO3vDLjYcnjiThwPtNa2FgHXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 15:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f4:d4:7c:3e:99:76:37:c7:7b:56:ab:59:cc:fc:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fcc2f3ee6b5c3ff6dc5346a7535506fa824123e
        Validity
            Not Before: Jun 14 15:00:28 2025 GMT
            Not After : Jun 15 15:00:28 2025 GMT
        Subject: CN=f3869023ae000728ed8074a5f7ab062f68f9aa1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:73:c9:4f:e8:55:02:53:da:43:3c:ff:19:be:
                    f8:4f:6a:36:88:ab:f2:3a:de:c5:d0:c0:1e:9d:b7:
                    73:0e:e2:9f:6c:1b:e1:92:a7:78:c5:d7:57:22:41:
                    48:1e:4a:38:d2:03:89:30:22:9a:17:48:75:9d:2a:
                    07:9f:ca:e9:7d:6b:d3:9e:94:27:11:9f:62:ad:5b:
                    f7:64:47:ea:a3:05:72:bc:00:6f:07:ae:38:72:f3:
                    9a:d0:97:b3:5b:83:78:45:d0:81:64:a7:9d:fe:5f:
                    cd:3e:17:9f:73:45:ef:0f:c0:79:da:ad:0a:72:5b:
                    ff:e0:64:22:75:ee:a8:2e:c2:1b:77:39:c2:08:ba:
                    55:ea:0f:58:e7:9b:67:d5:59:f2:3d:f8:bd:4a:fe:
                    00:0e:76:39:5d:c3:7f:2d:83:83:1a:6d:44:61:ac:
                    6c:f3:a2:39:e5:27:d1:b7:5b:84:42:6e:7b:34:35:
                    08:dc:82:ec:50:6b:32:fc:08:0d:23:14:21:58:28:
                    f2:bb:c3:7e:1d:08:a4:47:74:12:c4:d8:72:a6:1b:
                    36:84:35:11:09:6e:d4:23:31:12:cb:be:eb:3d:88:
                    71:fb:09:22:e3:3a:3f:c2:da:79:76:be:90:db:4a:
                    51:fd:4e:c1:60:5e:91:33:b9:68:b2:b6:a4:32:2e:
                    0f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:86:90:23:AE:00:07:28:ED:80:74:A5:F7:AB:06:2F:68:F9:AA:1A
            X509v3 Authority Key Identifier:
                keyid:9F:CC:2F:3E:E6:B5:C3:FF:6D:C5:34:6A:75:35:50:6F:A8:24:12:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:a1:01:32:e1:0d:49:d6:dd:1e:20:94:14:1b:98:6b:1c:82:
         f0:b5:bc:3a:bf:02:39:8f:1b:53:5b:9b:9e:3a:ed:ca:42:70:
         fe:b0:4a:2c:24:8b:32:61:17:e7:0a:7e:8d:79:b0:23:85:99:
         e1:4c:0d:08:5a:6e:cf:5d:02:8e:1f:b7:94:d5:82:ac:25:66:
         e4:c6:f4:4b:bc:07:f1:77:ae:e0:a9:59:64:5d:ec:4f:b4:eb:
         19:00:32:7f:4b:22:9c:e2:72:b5:64:17:c9:1d:40:6d:5a:e4:
         7e:61:0a:85:08:f5:9a:38:b0:18:13:3c:61:6b:d8:08:f6:3c:
         1d:bd:33:fc:9d:cf:08:8b:ac:af:18:4d:fd:0a:22:d6:b2:65:
         58:19:6a:b3:b6:78:2c:12:c4:46:40:c0:6c:ee:eb:14:b3:e6:
         b4:48:ca:06:0e:13:8a:c3:64:6e:ee:0f:8a:46:01:81:a2:27:
         4b:11:07:b4:d1:24:ce:ab:bc:53:bb:5d:47:4a:d5:95:bd:76:
         8f:19:f7:30:33:71:ef:e0:4a:ee:a6:3b:fb:79:a1:8f:8f:e0:
         71:e7:d4:4e:d6:b1:d3:0c:22:cd:b4:53:da:5d:96:1d:6c:2e:
         9b:f7:fe:c8:f7:25:0a:83:fa:26:e4:a1:62:be:20:17:16:99:
         47:22:89:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:09:40 2025 by rpki-client