Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
File:                     cX9V88YAexy91-ggiQVpAGdXs2Y.mft (raw, json)
Hash identifier:          cT6ue0yCpGc8EcfOhzZ//Ai10Xk3QRpQD4yBT3q+ExI=
Subject key identifier:   F5:1A:2F:94:2D:6F:00:AF:76:D4:08:1F:CD:99:8A:94:BC:80:6F:CF
Authority key identifier: 71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
Certificate issuer:       /CN=717f55f3c6007b1cbdd7e820890569006757b366
Certificate serial:       01976D3E0AC7ADB65F987B3D7397D7287241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
Manifest number:          0D1E
Signing time:             Sat 14 Jun 2025 07:01:11 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:11 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:11 +0000
Files and hashes:         1: BNamB5vKS8VYoQEENNZLcbAD0yY.roa (hash: AZc2M6A0pF1sMbjRSCCXbLIDgidX2dUycGenbS2p6qA=)
                          2: cX9V88YAexy91-ggiQVpAGdXs2Y.crl (hash: wX5Cvc2cUiyclEQjeLgxODxi5yoLBwvOhebpUL0v2b0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 07:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:0a:c7:ad:b6:5f:98:7b:3d:73:97:d7:28:72:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717f55f3c6007b1cbdd7e820890569006757b366
        Validity
            Not Before: Jun 14 07:01:11 2025 GMT
            Not After : Jun 15 07:01:11 2025 GMT
        Subject: CN=f51a2f942d6f00af76d4081fcd998a94bc806fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f3:97:2d:5b:08:fc:b9:7c:37:8c:5b:7d:99:
                    e4:06:25:a5:8e:0c:58:c5:d5:7d:57:36:5d:81:ea:
                    2d:98:43:4e:2e:b0:5b:6b:87:d1:cc:5d:01:5f:8b:
                    4f:ea:2c:51:d3:7c:c8:11:21:20:5a:be:55:98:aa:
                    a8:9d:93:47:34:99:66:6c:3a:20:e1:b9:85:39:1a:
                    cf:e1:bc:05:52:7b:22:b7:53:c3:98:74:14:bd:4e:
                    46:b7:70:2f:a3:dc:fd:54:27:84:42:49:d6:2d:c2:
                    09:bb:a0:74:ee:cd:be:ee:ce:15:4a:79:45:ed:19:
                    dd:c0:3c:b7:b1:9c:6c:ee:4f:2b:69:b7:ff:08:f1:
                    29:25:c6:9f:e3:b0:e0:ed:09:5d:b9:5d:88:de:96:
                    cb:9a:60:8b:bc:e5:e1:ff:d3:ab:67:26:4f:47:10:
                    af:c2:66:56:02:60:c4:4b:09:9d:d6:cf:1f:14:e0:
                    d5:f8:bc:75:04:53:aa:33:84:f5:d7:85:71:b5:68:
                    6d:d6:69:8d:ee:6f:8a:5f:d9:fe:71:1b:b3:58:61:
                    2e:c1:ee:08:33:ab:12:b0:18:27:87:68:64:ef:29:
                    b6:c1:80:5a:58:52:ca:93:c1:e6:94:7b:c5:11:a1:
                    fe:52:de:1e:7c:08:ec:33:a5:b5:b4:5f:f6:2a:1b:
                    d0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1A:2F:94:2D:6F:00:AF:76:D4:08:1F:CD:99:8A:94:BC:80:6F:CF
            X509v3 Authority Key Identifier:
                keyid:71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:1f:d5:3b:6e:4a:ef:2c:34:89:52:5c:d3:b7:ab:36:ae:81:
         8c:80:23:54:53:7b:c5:0d:42:ab:87:51:54:7d:20:0d:16:da:
         08:04:ce:83:cb:53:4a:31:87:67:c8:08:51:03:5a:45:e2:39:
         08:ad:63:52:67:6d:01:14:4c:3a:a9:92:47:43:21:b1:ec:c2:
         aa:13:48:78:68:44:d5:4d:a5:07:29:61:72:be:82:f3:17:16:
         d5:1c:25:12:3c:50:3e:f9:ad:b3:3d:e5:f1:bb:0a:a3:28:0a:
         8f:e8:5c:08:53:22:68:f4:05:de:d2:c1:cd:78:8e:3a:09:a1:
         ce:3b:0b:53:2e:3e:b4:70:99:cf:6b:07:04:c8:23:ee:b0:3d:
         16:2d:c4:13:af:de:75:ee:95:b9:da:79:c6:a3:6d:f3:71:db:
         41:87:ac:5d:8e:d2:b7:07:fd:9a:b1:19:76:25:2b:b4:6d:d9:
         ea:56:52:39:ae:dd:9d:c1:64:bd:39:6f:f4:0d:a5:17:c3:3b:
         10:4e:28:9c:45:16:fd:a7:ad:d2:84:6c:ff:5f:41:df:2d:55:
         1a:aa:6f:55:87:1b:aa:a9:83:99:18:a4:b6:ea:0a:b0:88:ea:
         6a:92:d3:5f:aa:f4:4c:13:fc:7a:83:2a:78:30:11:e1:a8:ba:
         23:94:a5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 14:21:47 2025 by rpki-client