Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
File:                     9TK715EK8VrXBk20ptO9ZKfoJ8E.mft (raw, json)
Hash identifier:          +jYTJbo6sDMignRR7x3w9ipYV+7IJZEJ96Sn+JYkSPA=
Subject key identifier:   4F:55:2E:09:FA:25:F9:1F:7A:4B:1A:08:3A:E4:8E:9F:38:14:AF:5B
Authority key identifier: F5:32:BB:D7:91:0A:F1:5A:D7:06:4D:B4:A6:D3:BD:64:A7:E8:27:C1
Certificate issuer:       /CN=f532bbd7910af15ad7064db4a6d3bd64a7e827c1
Certificate serial:       019748FA41CAD78EEBC9380F2F9135129975
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9TK715EK8VrXBk20ptO9ZKfoJ8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
Manifest number:          0404
Signing time:             Sat 07 Jun 2025 06:00:49 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:49 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:49 +0000
Files and hashes:         1: 9TK715EK8VrXBk20ptO9ZKfoJ8E.crl (hash: 9Xosa3JbUl999dqXKbrBjuLYjINS6gBoG99Sg5/2sd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9TK715EK8VrXBk20ptO9ZKfoJ8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:41:ca:d7:8e:eb:c9:38:0f:2f:91:35:12:99:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f532bbd7910af15ad7064db4a6d3bd64a7e827c1
        Validity
            Not Before: Jun  7 06:00:49 2025 GMT
            Not After : Jun  8 06:00:49 2025 GMT
        Subject: CN=4f552e09fa25f91f7a4b1a083ae48e9f3814af5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:54:6c:10:27:3c:bf:43:e7:3a:04:53:1d:c6:
                    e4:44:38:83:46:9e:97:45:13:b8:fc:ff:1a:3f:88:
                    a6:3f:2a:c4:ec:32:e4:0b:14:62:cc:a6:1f:9b:f3:
                    63:f7:e4:02:ee:ab:68:84:48:ed:21:ed:d0:f0:8b:
                    4c:7d:f2:22:bc:c8:89:0b:5d:a6:02:60:ca:af:66:
                    94:1b:e4:c9:d3:7e:6a:a8:6d:f8:c1:b7:98:3b:cf:
                    62:64:32:27:fc:32:1a:33:6d:20:e3:23:88:3b:3d:
                    fe:05:74:df:02:fe:e5:06:05:9c:17:8e:fa:54:83:
                    00:22:f9:fa:c9:09:12:86:81:ca:94:e8:8c:25:cc:
                    83:95:a8:a5:c7:c1:71:ca:5c:d7:b5:6c:c8:cf:83:
                    2f:71:34:1d:c2:77:8a:6c:2e:25:c0:bc:3a:a9:a6:
                    b9:4c:cd:98:15:22:1e:c5:3d:93:fb:48:8a:a7:b0:
                    3f:48:59:0e:23:76:2e:b3:3f:31:ee:5b:35:b2:5e:
                    9a:64:21:a9:46:fd:a8:26:62:b7:de:f0:41:34:09:
                    20:f7:f8:46:97:37:50:2a:83:0d:13:e2:63:1e:37:
                    cc:b2:3a:b3:67:7c:60:ea:be:d5:36:1f:a5:a1:d4:
                    3d:e0:3f:44:3e:79:7b:2e:4a:65:ab:be:ed:7d:e0:
                    fd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:55:2E:09:FA:25:F9:1F:7A:4B:1A:08:3A:E4:8E:9F:38:14:AF:5B
            X509v3 Authority Key Identifier:
                keyid:F5:32:BB:D7:91:0A:F1:5A:D7:06:4D:B4:A6:D3:BD:64:A7:E8:27:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TK715EK8VrXBk20ptO9ZKfoJ8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:a6:c8:00:95:e1:52:55:d6:e5:29:f4:35:d8:e2:a9:f2:84:
         6f:2a:16:94:5b:c5:56:1f:9b:d5:78:ac:24:f4:d8:11:1e:e6:
         cc:0e:36:fa:03:49:bf:f4:87:aa:7b:09:d4:18:37:1f:b3:c2:
         2f:a7:75:f8:d9:00:16:ab:db:65:59:e4:13:09:cd:be:27:07:
         7c:5a:ae:ef:15:fe:50:7e:80:cd:47:b9:5d:41:cf:13:94:2a:
         3d:ac:49:eb:de:4a:6d:d7:6d:51:ae:c0:cc:99:78:08:7f:12:
         9d:ca:2e:68:88:8d:73:09:1f:60:27:d7:86:2e:24:2b:71:fb:
         73:83:16:52:fb:40:dc:61:c6:36:62:a3:2d:a4:69:ce:2a:2f:
         fa:e6:7d:d4:5a:91:41:e1:c4:b2:56:38:f5:18:98:a2:a8:b3:
         b3:4e:15:b4:f1:66:7c:d2:39:21:f2:08:86:6f:d1:ad:fe:f5:
         01:64:52:1c:ad:bb:32:c0:64:0c:4a:99:e2:0c:52:0f:04:64:
         ec:0a:b6:19:0c:1f:c3:f7:f9:02:f9:6c:6b:12:6c:b8:b3:d2:
         e3:13:83:58:9d:2c:8a:ba:73:09:73:6c:a5:0e:aa:60:69:0e:
         97:24:49:55:78:64:f8:d8:a2:73:c1:05:56:ea:d0:00:40:d8:
         92:dc:68:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:52:13 2025 by rpki-client