Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
File:                     9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft (raw, json)
Hash identifier:          NMRiQRoXmZ88JmJaul/kOXQcFB9O4G2sFbU0srfZPGY=
Subject key identifier:   02:F7:F6:A4:99:CE:D0:57:C7:DE:1C:8F:47:2E:78:A0:BC:5D:A3:3C
Authority key identifier: F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7
Certificate issuer:       /CN=f6e7d811954993a953b7948dd06765cbc090dcf7
Certificate serial:       019751213D932D7D247674C40777F7138C4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
Manifest number:          0198
Signing time:             Sun 08 Jun 2025 20:00:22 +0000
Manifest this update:     Sun 08 Jun 2025 20:00:22 +0000
Manifest next update:     Mon 09 Jun 2025 20:00:22 +0000
Files and hashes:         1: 9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl (hash: QVlcmMK35OCZQXF1m6DABbjlWJnPTizzg0dl7L4NSwA=)
                          2: AnWhlH6XKqUu4_GnJM2nKdO071s.roa (hash: /ulEE3dLzdrGEic+8DMTJn8iVbu0rFN7I+VggC4+dZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:21:3d:93:2d:7d:24:76:74:c4:07:77:f7:13:8c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6e7d811954993a953b7948dd06765cbc090dcf7
        Validity
            Not Before: Jun  8 20:00:22 2025 GMT
            Not After : Jun  9 20:00:22 2025 GMT
        Subject: CN=02f7f6a499ced057c7de1c8f472e78a0bc5da33c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:71:23:33:d9:a9:f5:00:45:1c:56:d7:33:56:
                    52:77:5c:9f:86:be:2d:f4:35:52:45:ac:83:33:7f:
                    f1:d4:82:aa:d8:06:f6:52:1e:97:cc:20:00:d6:20:
                    38:80:77:52:ec:ed:1e:1a:7d:cd:3c:0d:68:93:8d:
                    1f:21:23:97:48:c3:e6:6d:9f:5b:40:ea:0f:89:b9:
                    fc:c9:67:d3:25:05:4e:e3:cb:79:75:a2:54:ab:d2:
                    93:57:e4:6f:7a:34:c8:53:59:f6:24:1f:16:04:53:
                    db:97:26:53:0a:de:57:04:e6:87:30:50:6c:b5:39:
                    39:65:11:e7:27:cc:b7:99:dd:a1:f8:e5:c2:9c:60:
                    e2:a5:65:a9:7a:57:aa:5f:15:7d:85:de:d6:70:0f:
                    86:2c:dd:b8:c4:2d:8c:f8:c1:9b:cd:34:5a:32:18:
                    4b:b2:67:ee:6e:0b:39:77:df:b6:0b:f0:94:1e:28:
                    e6:78:58:72:31:e3:57:74:97:f6:e3:93:d5:a9:d8:
                    de:bd:a0:ed:d1:39:95:96:43:91:5f:d3:fc:5f:23:
                    eb:17:5e:8c:1f:d7:2d:f3:76:ec:32:e3:19:3f:1e:
                    66:36:29:ee:44:56:e5:a8:f3:dc:15:e4:b8:51:53:
                    93:b6:46:a8:37:67:06:a6:9e:6b:b5:18:a0:6a:02:
                    8a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F7:F6:A4:99:CE:D0:57:C7:DE:1C:8F:47:2E:78:A0:BC:5D:A3:3C
            X509v3 Authority Key Identifier:
                keyid:F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f3:01:ad:bd:a5:29:6e:33:2f:4f:97:23:e3:73:1b:75:a0:
         2a:09:f0:70:8c:af:e2:e5:23:b6:43:5c:ee:c7:22:d3:6a:bd:
         71:7d:a3:01:4f:f6:b8:17:f6:9a:b6:83:43:d1:cb:2d:2e:25:
         4b:02:7e:4f:23:4e:e3:b0:3b:c4:a7:6b:f2:7a:c5:8f:9b:d7:
         25:90:04:03:ea:69:42:6e:0d:02:29:a7:0c:b8:d0:7a:c2:9f:
         77:bc:15:40:8d:86:f5:0f:bf:a0:72:83:84:3b:92:69:62:9d:
         cb:33:d0:1c:71:77:4b:35:98:a8:d3:06:29:af:2e:da:a8:08:
         91:16:24:8d:01:80:70:86:c6:84:22:ce:35:59:1b:31:67:fe:
         a9:e5:7b:47:d3:7a:84:4a:d3:cf:73:f1:df:8f:87:a9:74:70:
         84:42:8c:59:65:74:d2:69:6d:51:c5:2e:aa:f1:34:5f:8e:77:
         c8:e6:ef:08:ff:13:0f:5b:6b:a9:38:9a:1b:b7:66:6e:c8:eb:
         23:b9:29:c6:9a:75:75:f0:c9:2a:f4:4b:98:01:b8:8b:49:6e:
         6f:28:cd:4c:7c:be:3d:f1:1d:26:c2:7a:45:eb:d8:b3:d1:aa:
         32:f9:e3:04:2b:c3:59:47:71:1e:a9:4c:dc:c1:ca:07:fc:57:
         28:99:fa:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:05:44 2025 by rpki-client