Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
File:                     m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft (raw, json)
Hash identifier:          UTdsEr9UP6DIyk+6/zWCpGLRQqMQFspdyUm2KFXG9cs=
Subject key identifier:   96:B5:5B:D6:56:74:EB:E4:50:AD:D7:F3:37:EC:6C:33:13:9E:34:0D
Authority key identifier: 9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
Certificate issuer:       /CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
Certificate serial:       019749D5AB29F04AA33761AB51A9A043941D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
Manifest number:          0423
Signing time:             Sat 07 Jun 2025 10:00:29 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:29 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:29 +0000
Files and hashes:         1: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl (hash: GYhcLLV2sr2gtkNtSOa/KqtxFR6LYebFnLqfwyg0vm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:ab:29:f0:4a:a3:37:61:ab:51:a9:a0:43:94:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
        Validity
            Not Before: Jun  7 10:00:29 2025 GMT
            Not After : Jun  8 10:00:29 2025 GMT
        Subject: CN=96b55bd65674ebe450add7f337ec6c33139e340d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:99:70:aa:e4:6d:0e:ff:4b:7c:38:50:8f:46:
                    70:3c:0a:aa:8f:0d:a5:12:fb:ba:b1:8e:bf:b4:b7:
                    bc:a0:c3:66:08:be:cc:68:d9:12:7a:5c:d2:45:8f:
                    54:80:ba:c1:e6:0d:be:f0:40:c6:e6:d0:8a:03:52:
                    d1:71:e5:35:c7:da:a3:7b:7c:d5:14:da:2d:71:b7:
                    0c:eb:53:69:22:dc:b6:22:ab:21:11:fe:ca:0c:86:
                    22:8b:41:1c:15:f6:41:94:92:1a:03:f0:e2:9e:17:
                    17:66:4f:08:34:46:6d:40:f1:23:36:e3:2b:64:38:
                    3b:03:a9:40:9b:41:50:25:35:c3:a6:58:a7:7b:13:
                    9e:4f:7b:87:eb:4a:44:47:7e:49:09:0e:41:36:af:
                    d9:c5:13:75:91:5f:0b:be:04:df:48:31:14:bb:3d:
                    53:94:0e:f3:fe:e3:ab:23:27:60:33:06:44:a0:fc:
                    5e:a1:d2:2e:8d:a8:68:29:1e:80:f7:81:78:5b:f3:
                    77:1e:6a:40:4b:34:af:6b:bc:c6:90:ca:30:53:a3:
                    da:83:7d:e9:26:a8:a1:6e:15:23:cc:97:42:6c:c5:
                    a2:06:9f:55:56:63:a8:72:2b:71:78:58:47:0a:d2:
                    7f:92:2b:cb:a5:c0:d6:b0:1b:c5:34:00:9f:f6:70:
                    3e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B5:5B:D6:56:74:EB:E4:50:AD:D7:F3:37:EC:6C:33:13:9E:34:0D
            X509v3 Authority Key Identifier:
                keyid:9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:c6:1a:0e:c8:42:5a:c6:57:f6:05:3c:41:4c:12:56:37:b6:
         5b:df:fd:e6:33:06:60:9c:b9:d8:ac:9a:8c:98:a6:73:78:49:
         77:59:5c:0a:c6:d2:ea:ef:ad:70:da:dc:37:5b:e3:38:4b:d6:
         a2:c3:36:b0:b8:cd:33:e5:9c:33:3f:a2:35:4b:5f:2b:41:ae:
         69:ba:d3:fa:cd:58:c6:81:fc:87:b9:bb:c7:af:fe:c5:34:72:
         1c:cf:c9:12:1e:22:63:5b:f2:48:32:bd:92:dd:21:38:fa:7a:
         b7:ef:dc:ea:ba:15:28:9b:08:7a:1f:4a:da:f4:8a:82:66:8a:
         eb:84:e4:52:3b:0b:bf:1f:02:0a:5f:be:50:d7:c1:b6:cd:40:
         09:6a:61:e1:47:ee:c1:be:9c:86:2a:48:2a:e2:b6:4a:c8:79:
         ad:99:06:b1:30:ca:ea:10:e9:29:b9:0b:40:69:17:e4:ae:51:
         41:f0:16:cc:c9:f8:6d:40:b6:94:8c:49:8c:63:e9:ef:fc:63:
         7d:c8:ee:d4:ca:49:23:de:a6:56:18:59:5b:58:bf:26:01:a4:
         66:e6:fe:ad:82:d5:21:62:5e:a2:1e:87:b9:05:db:fd:13:31:
         21:1f:27:f9:c7:db:2b:3f:6c:3e:a3:a0:ea:11:85:77:45:50:
         67:d2:e5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:05:51 2025 by rpki-client