Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
File:                     9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft (raw, json)
Hash identifier:          +Xf/J0RBqX8jdRulqap3THTvaLDZI21hzlovBE5fm0g=
Subject key identifier:   7E:8A:86:DD:4E:12:81:C2:34:AA:34:61:60:4B:3C:A5:FA:62:82:1E
Authority key identifier: F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
Certificate issuer:       /CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Certificate serial:       0197531000F1F0308E3F5808B9A7ADBC29AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
Manifest number:          1581
Signing time:             Mon 09 Jun 2025 05:00:46 +0000
Manifest this update:     Mon 09 Jun 2025 05:00:46 +0000
Manifest next update:     Tue 10 Jun 2025 05:00:46 +0000
Files and hashes:         1: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl (hash: 1jRuFYw0IZnetxJf1EQNnYos0DEaB+0nf3RGjDmXiLs=)
                          2: gGwKnYfvhCn5nwp-acIqahsS3nA.roa (hash: Rj4EAnxstBQ29bzxEKAGqDAmg0fXQP5ck4gqOBpaqb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 05:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:53:10:00:f1:f0:30:8e:3f:58:08:b9:a7:ad:bc:29:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
        Validity
            Not Before: Jun  9 05:00:46 2025 GMT
            Not After : Jun 10 05:00:46 2025 GMT
        Subject: CN=7e8a86dd4e1281c234aa3461604b3ca5fa62821e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:42:68:12:c4:d9:9f:af:bb:dd:82:2d:cb:2a:
                    31:da:c2:6b:fc:4d:75:81:a2:13:40:e3:0c:1e:5f:
                    1c:63:4f:91:45:ba:88:65:28:c5:a1:c7:ca:5e:4d:
                    ba:75:52:95:79:25:a5:bb:f2:f2:71:b6:58:86:74:
                    f9:59:e3:a6:da:cb:c7:71:54:08:d6:c3:72:38:ee:
                    88:f0:4e:33:fa:74:00:4d:88:bd:c3:ca:42:35:fd:
                    f7:e6:d1:b0:c0:3d:f5:d4:ae:72:69:96:a1:ad:1c:
                    49:c5:4a:9c:9e:94:9b:86:0d:53:29:07:73:b9:30:
                    89:c1:ba:3b:0d:88:aa:de:7a:df:76:b7:7e:c0:5f:
                    38:f7:02:da:89:9b:17:28:9e:22:9b:9a:4a:42:ee:
                    cd:20:23:b3:0e:d2:20:4d:63:31:6f:e0:71:58:ad:
                    a4:e0:d4:b4:10:07:25:bc:87:f2:8a:60:cd:91:fb:
                    27:b2:c3:38:97:c7:eb:ca:a6:0a:5a:88:21:0f:8f:
                    ed:11:e2:55:2a:4b:12:44:1c:0b:c5:88:bb:b3:be:
                    3e:6c:5c:0f:b1:5d:3d:a3:63:49:a8:55:1d:01:ff:
                    a9:fb:65:12:80:54:ae:11:c5:ce:ab:a3:fb:a8:bc:
                    8e:2a:6d:30:46:49:38:3d:78:98:4b:27:c7:ef:74:
                    06:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8A:86:DD:4E:12:81:C2:34:AA:34:61:60:4B:3C:A5:FA:62:82:1E
            X509v3 Authority Key Identifier:
                keyid:F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:fb:3f:34:b0:38:61:07:c9:2c:d7:4f:90:bd:15:97:50:96:
         26:3f:3e:28:1d:63:fc:53:33:d7:87:25:1b:0b:d7:53:03:fc:
         ba:79:af:71:a4:d3:ca:f3:45:0f:9b:a0:9b:f0:ba:ea:a1:67:
         d9:fc:85:fa:d8:78:ad:05:d1:91:cd:12:bf:96:a4:14:81:f8:
         e4:38:c0:99:75:43:cd:ba:7d:c9:60:97:45:4b:1d:d2:8e:ee:
         bc:5a:fc:1c:35:f3:76:8e:d8:c1:db:83:40:a3:f8:15:20:fa:
         a2:94:e8:a9:dc:a2:db:c3:78:9d:2a:63:e3:30:2c:06:f7:ed:
         a1:07:bd:e3:76:ed:f3:ac:44:b5:43:69:b1:d0:16:21:17:a6:
         a6:26:b4:a1:00:a6:c7:ba:f7:10:35:0a:2c:7b:b5:44:b9:72:
         c2:f3:bc:51:d5:ca:d7:64:bb:df:3d:61:45:dc:8c:0c:8f:53:
         35:93:ae:bb:6f:90:ba:cb:d9:c7:13:47:89:23:c5:ae:79:84:
         ab:e5:d8:23:00:d6:62:3a:1f:bd:c1:e2:f3:13:b6:7f:2b:c7:
         b3:aa:b7:83:a7:0f:a5:d1:8f:15:e8:80:ca:fe:0e:60:08:7d:
         ee:61:54:31:a2:8c:5e:b4:88:23:cc:22:2e:b0:9a:03:c9:79:
         6e:b2:ce:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:44:16 2025 by rpki-client