Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
File:                     v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft (raw, json)
Hash identifier:          TIiYQ89kV9ijOmn+WMdSVoJk0N1yNgxTgloijbv/qoY=
Subject key identifier:   CB:41:6D:49:90:2D:F0:61:56:C6:DD:12:A8:01:C9:2C:2C:79:10:B1
Authority key identifier: BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B
Certificate issuer:       /CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b
Certificate serial:       019747E7CD6E71990CC0517BF34E7016FB61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
Manifest number:          0E72
Signing time:             Sat 07 Jun 2025 01:01:03 +0000
Manifest this update:     Sat 07 Jun 2025 01:01:03 +0000
Manifest next update:     Sun 08 Jun 2025 01:01:03 +0000
Files and hashes:         1: XFCoTFAZ3KfAR1P_1a3xaKLIipA.roa (hash: tHkTVZ0U3L5FGmSNyvjm8iSt+fIxv8Im36qIEB/UGXo=)
                          2: v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl (hash: lHBzHu4GOzZ5Okh9e6+Z6PtRTrW1QsCmVKjdUM0hqMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:cd:6e:71:99:0c:c0:51:7b:f3:4e:70:16:fb:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b
        Validity
            Not Before: Jun  7 01:01:03 2025 GMT
            Not After : Jun  8 01:01:03 2025 GMT
        Subject: CN=cb416d49902df06156c6dd12a801c92c2c7910b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:56:31:a9:08:31:bb:76:83:78:20:f9:cc:60:
                    4f:34:d0:4c:27:fb:7f:75:6a:86:4f:fd:a3:f5:bf:
                    23:f8:65:a8:ef:10:e9:9f:bc:dc:45:2a:af:b4:db:
                    3f:b8:b6:f0:0d:65:b5:33:71:f9:a4:22:3b:e2:3a:
                    4f:5f:13:59:e2:bc:79:25:6b:7e:c9:3d:52:01:ff:
                    11:c0:40:11:bb:4b:b4:99:aa:e1:8b:d2:03:fc:ca:
                    ea:18:11:68:ec:fa:79:18:4b:4c:76:69:0a:c0:e9:
                    9d:5d:03:73:04:2a:14:85:c7:07:3d:cb:63:91:ae:
                    90:16:a9:f4:9f:6e:34:c0:6b:6d:0b:05:26:3d:cd:
                    06:64:ef:65:1d:84:88:9c:6f:1c:38:db:fd:9c:73:
                    bc:38:9c:f9:0a:ac:eb:0f:e8:85:b6:b1:0c:b8:18:
                    a3:64:64:b8:34:87:dc:f7:ff:e9:78:f3:8d:de:0a:
                    26:9a:44:30:cc:6f:37:1e:31:30:06:ab:44:9c:fa:
                    29:8e:cc:d6:64:40:07:81:ed:92:c1:5b:08:b4:77:
                    8b:7e:cf:95:4e:e2:cb:76:7b:cd:82:e4:9b:ed:ba:
                    9c:22:49:33:e4:00:4d:be:a3:e9:43:15:8b:21:3e:
                    af:0d:eb:a1:00:11:81:f3:82:ee:7a:a7:7e:ad:a3:
                    7b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:41:6D:49:90:2D:F0:61:56:C6:DD:12:A8:01:C9:2C:2C:79:10:B1
            X509v3 Authority Key Identifier:
                keyid:BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:42:c8:02:b9:2b:3d:6e:08:93:f8:94:19:d4:72:b5:b5:24:
         e2:a6:c4:0a:cb:9b:70:94:ba:2c:bf:f5:c6:c0:ce:32:4e:6b:
         0a:f5:7a:9f:ce:3a:24:1d:40:43:62:e2:9c:e6:bd:dc:0c:71:
         76:91:f4:c9:43:b9:d4:5c:18:ee:88:66:a9:8b:0e:50:7d:ff:
         67:2b:f6:c7:3a:78:94:1f:85:af:f6:13:f8:3b:0b:62:ba:80:
         b2:f3:b5:df:64:4d:5a:44:0f:6d:69:d2:7b:ea:d5:62:e7:c5:
         bc:33:04:7f:52:53:1e:ff:be:8f:cb:0d:37:f1:da:8a:03:bf:
         d5:29:9b:42:c6:65:8f:40:f5:d6:ee:8d:e3:91:18:43:d7:db:
         d9:c3:6d:e1:b8:7e:bd:ab:58:9b:42:4e:1b:f7:f0:00:d2:6c:
         7e:1a:44:2c:94:57:eb:07:30:93:f2:26:f3:bf:f3:63:87:ee:
         92:ae:2f:9b:93:da:ef:81:27:79:1b:90:16:3a:d6:58:e7:e1:
         70:f0:df:21:f8:de:aa:d0:0a:8f:ec:6e:01:11:44:b2:0f:12:
         e5:75:a9:22:50:16:df:b4:82:c6:af:41:11:e3:0a:92:15:cd:
         a0:2f:d8:85:f8:e5:b8:e1:3c:ca:67:6d:fa:fb:7e:c6:86:ab:
         94:25:ef:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:22:56 2025 by rpki-client