Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.mft
File:                     V9mi-itxfqefxbJ5LV9VvW7qKQY.mft (raw, json)
Hash identifier:          Gs9wAmvepzMPqETqeC277mbZMkZKxG9DHwP1oCbCKWM=
Subject key identifier:   BF:1B:5D:28:E8:09:6B:FC:C2:54:4A:EA:CE:C3:06:7C:1A:F7:74:68
Authority key identifier: 57:D9:A2:FA:2B:71:7E:A7:9F:C5:B2:79:2D:5F:55:BD:6E:EA:29:06
Certificate issuer:       /CN=57d9a2fa2b717ea79fc5b2792d5f55bd6eea2906
Certificate serial:       0197556BDE45B194F792A95F2BBAFFAA718B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9mi-itxfqefxbJ5LV9VvW7qKQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.mft
Manifest number:          0429
Signing time:             Mon 09 Jun 2025 16:00:21 +0000
Manifest this update:     Mon 09 Jun 2025 16:00:21 +0000
Manifest next update:     Tue 10 Jun 2025 16:00:21 +0000
Files and hashes:         1: V9mi-itxfqefxbJ5LV9VvW7qKQY.crl (hash: fBJskiho4Ph0xprLCnhSXS9u0j182gzaEdFTxyDwZqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9mi-itxfqefxbJ5LV9VvW7qKQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 11:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:55:6b:de:45:b1:94:f7:92:a9:5f:2b:ba:ff:aa:71:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d9a2fa2b717ea79fc5b2792d5f55bd6eea2906
        Validity
            Not Before: Jun  9 16:00:21 2025 GMT
            Not After : Jun 10 16:00:21 2025 GMT
        Subject: CN=bf1b5d28e8096bfcc2544aeacec3067c1af77468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:11:12:de:51:20:a3:bf:cf:62:76:46:c4:a6:
                    0b:71:a4:1f:78:13:8b:f4:98:f8:33:ad:8c:06:76:
                    07:2c:04:2d:52:a7:23:a7:be:de:d8:24:96:d6:29:
                    20:6f:d4:08:ee:55:3e:02:bb:3a:1b:a5:42:14:d2:
                    c1:7b:f4:7e:9c:a0:9f:b0:82:28:3b:7a:8e:bb:8c:
                    99:5d:cd:d8:77:51:df:21:95:49:2e:b1:db:6f:c1:
                    d1:56:c3:e3:d1:1a:65:b5:dc:e8:83:f0:7a:f9:b4:
                    23:14:e1:e7:45:12:b1:09:a9:6a:be:c0:5b:40:40:
                    08:0b:6a:90:94:2d:8e:99:4a:8b:5d:66:fa:9e:b6:
                    5e:c7:90:71:ac:34:f6:13:88:aa:d3:f3:0a:a6:e9:
                    07:07:2e:88:27:ab:ea:9f:75:d5:2c:7b:ee:9e:c4:
                    23:80:54:18:d6:64:38:05:7a:73:90:e6:a3:e8:90:
                    64:f9:36:b6:41:d4:d8:99:60:5b:63:2c:0c:37:55:
                    2c:bb:a8:f7:a2:28:4b:b1:24:11:04:e1:55:38:0b:
                    de:f5:1f:66:86:61:28:a3:48:20:ef:23:2a:7f:c1:
                    23:90:a2:ef:5f:39:99:0c:a0:05:40:f5:a8:11:7f:
                    e6:ff:ad:36:d5:14:5c:a0:15:04:bb:df:c5:df:fd:
                    ed:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1B:5D:28:E8:09:6B:FC:C2:54:4A:EA:CE:C3:06:7C:1A:F7:74:68
            X509v3 Authority Key Identifier:
                keyid:57:D9:A2:FA:2B:71:7E:A7:9F:C5:B2:79:2D:5F:55:BD:6E:EA:29:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9mi-itxfqefxbJ5LV9VvW7qKQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:13:a3:61:5b:df:07:fb:78:14:ee:4d:fb:41:98:c3:6f:d7:
         21:a7:bb:b1:9f:38:f7:19:fc:6e:4c:18:83:e6:5e:fa:61:81:
         a7:64:76:e3:6b:3d:9d:28:c2:39:6d:30:a0:fc:bd:06:c8:f8:
         a6:08:ad:81:13:25:f1:14:6b:04:01:bc:c1:52:0f:50:0c:cf:
         fb:60:92:19:ff:ce:da:00:68:a7:7b:40:04:35:27:38:9a:3f:
         3a:49:0e:84:b3:44:eb:f3:7d:32:3e:a2:a5:09:cb:6f:ea:a6:
         6f:d0:21:88:20:e8:fe:c7:d4:db:da:94:52:d7:48:e9:52:0c:
         cd:a6:ba:e4:ff:b1:d9:d6:5e:2e:13:58:2c:50:4d:26:89:6f:
         b7:46:b2:5d:82:eb:17:85:1f:f8:34:b7:b7:55:b3:6b:9f:99:
         ed:bb:d8:82:4e:ea:26:ad:b0:ea:9a:31:8e:6b:6b:0f:4a:8a:
         a6:d1:fa:d1:56:81:da:ca:7a:59:ca:42:b7:9b:7f:48:65:60:
         7d:da:d2:52:28:0c:ff:c1:aa:1d:5a:49:87:7f:83:c3:a0:1f:
         63:a5:25:1a:ad:dd:ce:dc:14:e4:1d:4d:3b:21:c1:50:2b:1e:
         0b:cc:4f:b9:c3:f8:5f:63:95:1c:21:e2:72:fd:2d:68:6f:23:
         70:ae:e7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:24:20 2025 by rpki-client