Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
File:                     nIMTOn4Fk7s5jq25J1jLySydZaU.mft (raw, json)
Hash identifier:          NxiaDlhoITVB+O0VirZRmmSNmpcz0RObqr91bj9jve0=
Subject key identifier:   B9:6F:E6:F9:44:94:59:E3:3C:32:23:5B:97:D2:12:0B:A2:26:19:52
Authority key identifier: 9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
Certificate issuer:       /CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Certificate serial:       019768852DCA994F148D211BE80B6B72E84F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
Manifest number:          10C1
Signing time:             Fri 13 Jun 2025 09:00:47 +0000
Manifest this update:     Fri 13 Jun 2025 09:00:47 +0000
Manifest next update:     Sat 14 Jun 2025 09:00:47 +0000
Files and hashes:         1: ekhJmeQnAobhvtQLQDb4UB8M1mE.roa (hash: 6CiHXbuoqrzSCFBPUfq3RLFxMNDauAW0jWPQmmN8RFM=)
                          2: nIMTOn4Fk7s5jq25J1jLySydZaU.crl (hash: KIKK0Vdpv70OXQ8qTQvPGJ3+ffSB3hb/7Tib30pewRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:85:2d:ca:99:4f:14:8d:21:1b:e8:0b:6b:72:e8:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
        Validity
            Not Before: Jun 13 09:00:47 2025 GMT
            Not After : Jun 14 09:00:47 2025 GMT
        Subject: CN=b96fe6f9449459e33c32235b97d2120ba2261952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:54:99:e0:2d:0b:84:3f:94:9a:f1:01:39:26:
                    71:6f:e8:28:73:b3:1b:8a:37:78:21:06:95:07:81:
                    2c:b2:ef:7f:ff:3e:4d:24:4b:f6:01:19:06:91:c9:
                    0b:9b:49:b6:73:94:eb:f8:02:c2:ed:82:c6:8d:ad:
                    56:b1:46:50:94:e0:df:bc:79:49:a8:ef:9d:02:e8:
                    8f:9b:48:40:bd:6e:98:86:21:8e:94:4b:81:50:f1:
                    97:77:a0:af:2e:f3:38:e1:26:30:8b:8d:5b:73:ca:
                    68:6a:41:49:a6:86:24:f9:f7:6e:cc:26:83:79:17:
                    28:c3:b8:3a:b0:ae:37:59:88:31:be:ff:09:f7:39:
                    8b:64:28:d6:aa:3d:ad:b2:b2:9e:38:13:df:91:43:
                    b2:53:8b:10:e5:84:7c:23:38:aa:dc:31:9b:0d:c0:
                    37:1a:aa:ed:01:37:be:03:b1:2c:b0:42:d2:19:95:
                    a9:41:f6:f2:b7:bc:0b:43:b4:34:a9:0f:ca:3f:1f:
                    6a:5d:35:ea:b2:b3:7d:e1:91:04:05:9d:f8:66:8d:
                    7a:dc:b6:5b:9f:99:ac:af:c8:96:41:fe:36:5d:b4:
                    a7:31:76:2f:79:05:43:b8:89:92:f8:91:93:9e:7d:
                    38:fb:1c:a5:1b:fc:44:dd:af:07:1c:65:46:41:e2:
                    e5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6F:E6:F9:44:94:59:E3:3C:32:23:5B:97:D2:12:0B:A2:26:19:52
            X509v3 Authority Key Identifier:
                keyid:9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:70:43:ca:08:ae:89:09:c6:cf:08:ce:27:c7:c1:22:fd:bb:
         74:86:91:e6:66:4b:17:61:e3:00:32:1f:9a:6c:03:d7:52:44:
         b7:e0:b0:36:ca:4c:bc:3c:a1:64:7f:84:16:6d:8a:6e:6d:16:
         1d:43:a7:dd:cd:b2:4f:f3:cb:78:5b:7a:fd:6f:27:47:32:25:
         1b:4b:61:f3:48:08:17:ca:f9:7d:5c:ec:3f:6e:12:63:3c:90:
         9b:79:73:c8:73:43:1f:83:a2:fc:8e:de:af:bf:2f:3e:b0:0a:
         96:16:a9:20:89:2d:5b:84:77:84:cd:c5:b2:de:b6:bb:c5:57:
         48:22:ac:f6:f3:86:1d:a9:10:ca:84:aa:42:2a:e9:11:cf:63:
         ac:b4:e9:b4:c8:80:0d:a8:4a:3e:32:ce:09:64:39:9c:73:86:
         cd:c5:15:d0:b7:c1:0f:37:d5:78:97:f3:bc:42:03:8f:23:4b:
         df:a2:e1:4a:5d:6f:6f:2b:69:e1:38:4f:fb:64:7e:26:66:82:
         92:88:c9:88:a9:2e:77:36:91:15:92:3b:68:f7:29:9e:b7:ac:
         02:f5:b0:f4:0d:58:ac:ab:89:cf:f8:ff:39:f4:ab:70:99:c7:
         4b:65:40:22:1d:f1:aa:da:06:4b:91:40:3b:10:13:e6:2e:b0:
         03:d2:1c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 10:54:51 2025 by rpki-client