Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
File:                     9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft (raw, json)
Hash identifier:          a1qTfwGZ5qv2bB4DZZwuHnJ4tM1r4ZlvDvNJHudfEJQ=
Subject key identifier:   5C:B9:B5:06:D1:BB:A3:17:4C:07:DC:72:4B:37:88:CE:EA:BA:0D:06
Authority key identifier: F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
Certificate issuer:       /CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Certificate serial:       01974D0DACD130690182C15CD744FA85C26D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
Manifest number:          1085
Signing time:             Sun 08 Jun 2025 01:00:31 +0000
Manifest this update:     Sun 08 Jun 2025 01:00:31 +0000
Manifest next update:     Mon 09 Jun 2025 01:00:31 +0000
Files and hashes:         1: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl (hash: OHd2+DKw8w3fHpo8H7+loqAEK2dgtTBmTfLl3UrKSwI=)
                          2: DaSMaWZYfnj6ceinzYPrOhJJgQA.roa (hash: tLMLMu2mXxzV//rWf7p3b0LjE6TE93dgy9UoXP39ok8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 01:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0d:ac:d1:30:69:01:82:c1:5c:d7:44:fa:85:c2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
        Validity
            Not Before: Jun  8 01:00:31 2025 GMT
            Not After : Jun  9 01:00:31 2025 GMT
        Subject: CN=5cb9b506d1bba3174c07dc724b3788ceeaba0d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:bf:3f:73:8d:cf:fa:4e:dd:37:87:b0:26:50:
                    37:81:b1:cb:75:f1:49:36:99:ca:a1:1e:ee:2b:06:
                    f2:2a:2c:cf:7e:3f:67:98:94:57:58:e2:ae:30:28:
                    e8:e2:ca:8f:99:97:45:bb:47:d8:f0:43:73:3d:11:
                    f1:09:a1:e3:d8:53:57:df:e9:81:1c:8f:27:94:1e:
                    1b:66:2a:e4:de:49:72:39:18:73:63:cf:1d:b7:c3:
                    38:79:7d:26:a6:0c:73:46:31:cc:6f:10:f3:67:3c:
                    e3:8a:b1:35:51:73:f3:7f:82:72:14:f6:3b:f0:eb:
                    3e:fb:10:9a:fa:b6:d5:21:d0:22:30:a0:e6:08:dc:
                    f7:9f:dc:bc:09:44:81:06:12:cd:05:da:1c:48:8b:
                    ae:a5:1a:8b:8e:a6:5b:aa:8c:8a:22:9a:5e:4b:a1:
                    e5:33:3a:15:ac:e7:7f:bf:0f:0d:44:c8:17:61:68:
                    b7:d8:db:5c:76:99:73:d4:ca:94:3d:c9:fa:59:e3:
                    79:cd:7d:19:16:34:6a:f8:21:a5:6f:0f:11:4b:da:
                    fe:d0:8b:e5:fc:f0:de:6d:26:38:cf:bb:6a:d1:29:
                    0a:4b:3f:4c:07:dc:ed:94:7d:55:27:99:d9:5e:d0:
                    22:ee:33:72:a5:a6:39:db:c3:71:59:9a:7b:6f:4d:
                    fe:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B9:B5:06:D1:BB:A3:17:4C:07:DC:72:4B:37:88:CE:EA:BA:0D:06
            X509v3 Authority Key Identifier:
                keyid:F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:e9:42:7e:d0:60:db:43:28:1e:52:e6:31:6b:32:0f:78:e3:
         a5:f4:b3:d4:58:8a:2c:7e:eb:ca:4c:38:d5:47:bd:cf:f4:85:
         68:c8:58:af:27:7f:1f:71:7c:8b:23:26:ab:dc:7f:24:6b:37:
         81:ef:2c:d6:b8:dc:fd:2d:3a:00:aa:79:d4:4b:7a:28:6c:4e:
         4b:8b:0a:29:c0:98:a8:02:05:b2:00:a2:5c:31:f7:5f:cb:73:
         7b:1e:02:f5:df:71:b1:47:09:b5:ce:22:4f:84:db:e2:b8:ad:
         4a:a1:24:d5:70:91:38:97:2e:21:8f:cc:3c:6d:78:9d:4d:48:
         7e:62:78:45:a9:a2:08:58:c6:8b:2b:2c:a9:fa:9f:e3:22:24:
         a6:49:e3:e5:7b:e1:8f:46:85:ad:e4:16:41:29:ee:01:97:67:
         70:ad:a3:87:9f:34:35:47:31:cb:ca:1f:97:db:f5:6b:f3:78:
         78:bb:b3:8f:43:e0:c3:cc:eb:0b:d2:e2:e7:f4:99:cd:5c:e7:
         ec:f0:80:be:bf:17:38:fa:01:ea:66:c7:2b:7b:90:2a:cb:02:
         19:06:54:59:01:79:bb:55:50:55:09:eb:0b:06:86:70:56:a9:
         4f:74:dd:be:5c:08:76:21:4c:f6:de:24:56:ce:b6:59:1f:db:
         98:e8:9b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:07:01 2025 by rpki-client