Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
File:                     k9xL8fiRK-t83uQJMCmIxhE4jpE.mft (raw, json)
Hash identifier:          lltz9DbjoxAHBvnXC2wbeIZb6q9YzxtEq4xlSXP3hVc=
Subject key identifier:   BF:6A:F4:58:17:7A:30:AC:E5:20:0C:AB:42:70:46:A7:27:69:81:61
Authority key identifier: 93:DC:4B:F1:F8:91:2B:EB:7C:DE:E4:09:30:29:88:C6:11:38:8E:91
Certificate issuer:       /CN=93dc4bf1f8912beb7cdee409302988c611388e91
Certificate serial:       01974DB3021F38E9F97288F4F03F02D13D96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
Manifest number:          0F79
Signing time:             Sun 08 Jun 2025 04:01:06 +0000
Manifest this update:     Sun 08 Jun 2025 04:01:06 +0000
Manifest next update:     Mon 09 Jun 2025 04:01:06 +0000
Files and hashes:         1: aEy_zqNzomjBOnysb7pwIws5H9M.roa (hash: 5K5cuFuAW+cdRm7n0/ZKC9QHmYwbcOfw6xnQYUg53PE=)
                          2: k9xL8fiRK-t83uQJMCmIxhE4jpE.crl (hash: OSorgM4q4YFXH7j11jGZtp4IWhrB0xwXV9bNVN3cLUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:b3:02:1f:38:e9:f9:72:88:f4:f0:3f:02:d1:3d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93dc4bf1f8912beb7cdee409302988c611388e91
        Validity
            Not Before: Jun  8 04:01:06 2025 GMT
            Not After : Jun  9 04:01:06 2025 GMT
        Subject: CN=bf6af458177a30ace5200cab427046a727698161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c9:39:04:80:cb:70:90:c9:35:ba:7b:8a:db:
                    29:3f:1c:70:9b:78:b5:55:d1:80:17:1a:22:ba:16:
                    8c:4b:56:af:37:c3:41:99:6d:d8:6d:17:e3:3b:b2:
                    1b:72:82:db:e1:cf:f5:59:c2:36:3e:48:9e:e1:26:
                    cf:ea:0e:cf:98:f7:10:83:05:8e:41:8d:1f:2e:ae:
                    40:99:9b:f6:a0:58:3b:42:f1:93:43:67:40:d0:de:
                    08:61:be:c6:94:dd:e8:4a:e6:fb:82:b8:c9:13:e4:
                    b0:ad:89:16:12:df:22:f0:46:a6:e9:d5:29:a6:fb:
                    7d:46:f3:58:ab:52:99:17:2f:45:dd:ec:9e:91:5f:
                    10:ce:c8:45:e6:1c:35:4f:a0:ce:36:a3:98:78:fd:
                    41:aa:c1:a7:26:1f:6b:ed:7c:84:dd:3b:11:a7:4e:
                    7f:74:cb:3c:49:3d:a9:67:de:e4:fe:a5:c7:6b:50:
                    8e:e1:c3:48:c5:23:fd:80:26:ee:62:f6:23:77:3d:
                    5f:2e:43:fd:4d:b6:5a:21:29:03:0f:07:b6:66:57:
                    f8:28:39:85:e5:12:e1:ce:90:af:1f:06:e3:75:73:
                    35:9c:90:18:36:6c:96:26:36:48:8b:18:75:df:6a:
                    ec:ed:90:6c:88:d1:0a:2f:de:60:2e:a7:99:b7:0d:
                    e8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6A:F4:58:17:7A:30:AC:E5:20:0C:AB:42:70:46:A7:27:69:81:61
            X509v3 Authority Key Identifier:
                keyid:93:DC:4B:F1:F8:91:2B:EB:7C:DE:E4:09:30:29:88:C6:11:38:8E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:34:a9:d1:27:98:56:f5:e1:f4:eb:f4:81:6c:86:1b:b5:7c:
         b8:7f:f1:37:39:56:38:09:10:ec:1d:36:07:ee:fd:1e:eb:2e:
         42:2c:5d:fc:ee:2d:84:21:a8:f3:01:61:d2:76:bc:e0:e4:b0:
         c6:e5:4b:e0:83:be:e3:1e:33:03:9f:8d:eb:11:96:05:86:63:
         14:f2:6c:de:06:de:79:ca:b6:ab:6d:c5:80:43:31:e4:41:f8:
         f2:01:66:1b:b2:e8:aa:4e:ae:b1:fe:e8:29:13:59:55:c0:5d:
         ae:3b:04:10:a6:95:f6:bc:7d:bf:b2:a7:a2:e2:d9:78:cc:1d:
         c3:80:43:b6:d1:6b:a6:c4:61:46:59:a6:c3:c8:24:b3:8f:f6:
         97:f9:01:0d:88:83:2d:23:e5:b2:6a:bd:ec:03:f2:c2:6a:c2:
         fb:47:ab:1e:47:b0:4c:e5:72:0e:58:e6:e9:70:79:16:47:83:
         f1:50:ea:6b:04:ca:83:b6:78:e3:cf:60:46:ba:f4:b4:1b:c5:
         26:6b:68:9d:6a:cf:8f:90:25:0e:62:40:48:8a:b6:f7:47:98:
         22:13:f2:b4:df:65:89:27:54:42:9d:3b:65:b6:38:b6:64:84:
         0e:99:f7:8d:29:3f:a4:ec:91:d4:50:c8:1f:98:70:a6:2f:fc:
         09:2b:74:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:52:01 2025 by rpki-client