Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
File:                     9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft (raw, json)
Hash identifier:          76sACOqNZNxjQ5shykmYXLSYcV1kWxPTQ839WxcXHN8=
Subject key identifier:   24:E8:07:A9:7C:49:7C:0C:61:1A:26:75:13:CD:6C:87:C2:12:42:D9
Authority key identifier: F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B
Certificate issuer:       /CN=f5cf73b3e45f772fae1b915690b317344c3f442b
Certificate serial:       01974E8E18CFD886F6A87DE9A529CDB11774
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
Manifest number:          0C10
Signing time:             Sun 08 Jun 2025 08:00:24 +0000
Manifest this update:     Sun 08 Jun 2025 08:00:24 +0000
Manifest next update:     Mon 09 Jun 2025 08:00:24 +0000
Files and hashes:         1: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl (hash: mS5fWrw5mpi4lwicgRcwmtvnvkYbfMCt4F5/XSZmIHs=)
                          2: g4B1jDEDEnpyKjOUdwNXtiRBKVo.roa (hash: 7UWQudX+rqrs+vIGMtBiZa4lyOkbMuzxNBR2/83QsfI=)
                          3: mFCab-YMnaPwjq0SGjjSKVSwCvs.roa (hash: NwTUf2FCA+SWI7PlbFVRLa9grCf7O5GxOtog8KpH75E=)
                          4: v7xbsCROsO2MbuE9UwU0B__Qrug.roa (hash: jCAaO9QdtJabTsyOLEVBcqZmMxtQhkEo4Y5qTf+e+S0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:8e:18:cf:d8:86:f6:a8:7d:e9:a5:29:cd:b1:17:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5cf73b3e45f772fae1b915690b317344c3f442b
        Validity
            Not Before: Jun  8 08:00:24 2025 GMT
            Not After : Jun  9 08:00:24 2025 GMT
        Subject: CN=24e807a97c497c0c611a267513cd6c87c21242d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:54:89:19:49:a7:fe:24:16:11:c3:9f:18:61:
                    98:3e:59:f9:3a:a4:80:0b:43:b3:5f:13:d0:05:c1:
                    05:aa:b6:ad:61:56:de:8a:8b:76:2c:9f:1e:f7:38:
                    14:2e:c9:ae:84:14:39:4a:45:27:7a:f9:17:c8:b2:
                    2c:03:0b:27:11:4d:16:54:66:42:86:a1:87:7b:3a:
                    35:cf:4c:1d:1b:7a:f2:a8:e1:8f:be:1b:48:9b:49:
                    b4:ca:e7:7a:91:7d:be:fd:04:eb:3b:e3:68:45:84:
                    b3:0a:7d:cc:d0:34:9f:03:15:f5:79:49:98:5d:74:
                    f5:cb:76:8f:17:20:7d:ce:80:c9:95:08:0b:ec:c7:
                    c6:2e:0f:4a:2e:5e:66:22:d2:69:b3:66:44:50:aa:
                    c6:bd:dd:8f:d4:aa:4b:53:94:d5:7d:fb:68:d0:24:
                    95:8e:18:25:1b:60:1f:c5:71:db:9c:c6:16:bd:15:
                    72:13:9a:25:3c:90:3b:2c:c2:d5:29:51:23:bc:ef:
                    a1:a8:fa:95:15:0f:ee:2d:8a:a1:11:ca:c4:f3:cd:
                    80:b2:90:ca:99:ce:25:11:d7:71:d5:c1:46:47:b8:
                    b1:7f:24:e5:a8:c9:fc:15:e2:f3:47:c5:d6:7f:8f:
                    ba:9f:a0:01:25:e9:e1:0a:19:d9:71:41:78:22:ee:
                    cb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E8:07:A9:7C:49:7C:0C:61:1A:26:75:13:CD:6C:87:C2:12:42:D9
            X509v3 Authority Key Identifier:
                keyid:F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:08:83:5a:9d:06:da:9d:f4:ec:05:bc:b4:16:7e:a4:00:19:
         93:71:d6:62:6c:64:f0:c0:e7:9a:aa:d3:58:c2:8e:59:80:36:
         08:79:10:b7:b4:ab:3d:ad:f6:bd:25:5f:73:02:26:24:a9:b0:
         e8:2e:28:7f:1c:d7:35:cb:22:21:a1:70:c8:1f:35:20:01:ff:
         a4:e7:07:bd:b4:75:91:da:c8:e8:bc:c2:90:d6:5c:df:6b:3e:
         b9:ef:b4:84:73:1f:b5:7b:06:b3:71:5e:aa:a6:f4:31:98:c3:
         6a:60:53:06:07:54:87:be:6e:6c:05:ba:e8:aa:0f:2d:60:7b:
         f8:c4:de:50:f2:f4:34:f2:3b:b6:25:22:93:59:f5:e8:45:e9:
         76:b2:c7:34:bc:fb:9a:2e:f9:53:7a:87:60:0a:d3:53:0d:65:
         7a:37:48:ae:05:ae:06:66:b0:98:1b:35:8f:29:ff:1e:ac:ec:
         c6:cd:ac:19:ec:8f:7b:6f:a8:aa:0f:ac:97:c7:20:43:60:c7:
         cd:c8:f5:94:ae:b7:94:44:10:ca:11:f3:4b:7f:38:b5:be:df:
         a1:20:9a:ab:57:0c:df:c1:52:98:9c:50:a4:c7:83:fe:d6:2f:
         0b:69:f0:92:ae:3f:66:32:17:c6:89:72:a9:8f:84:e9:8e:41:
         27:a2:55:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOjhjP2Ib2qH3ppSnNsRd0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1Y2Y3M2IzZTQ1Zjc3MmZhZTFiOTE1NjkwYjMxNzM0NGMz
ZjQ0MmIwHhcNMjUwNjA4MDgwMDI0WhcNMjUwNjA5MDgwMDI0WjAzMTEwLwYDVQQD
EygyNGU4MDdhOTdjNDk3YzBjNjExYTI2NzUxM2NkNmM4N2MyMTI0MmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31SJGUmn/iQWEcOfGGGYPln5OqSA
C0OzXxPQBcEFqratYVbeiot2LJ8e9zgULsmuhBQ5SkUnevkXyLIsAwsnEU0WVGZC
hqGHezo1z0wdG3ryqOGPvhtIm0m0yud6kX2+/QTrO+NoRYSzCn3M0DSfAxX1eUmY
XXT1y3aPFyB9zoDJlQgL7MfGLg9KLl5mItJps2ZEUKrGvd2P1KpLU5TVffto0CSV
jhglG2AfxXHbnMYWvRVyE5olPJA7LMLVKVEjvO+hqPqVFQ/uLYqhEcrE882AspDK
mc4lEddx1cFGR7ixfyTlqMn8FeLzR8XWf4+6n6ABJenhChnZcUF4Iu7LcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCToB6l8SXwMYRomdRPNbIfCEkLZMB8GA1UdIwQY
MBaAFPXPc7PkX3cvrhuRVpCzFzRMP0QrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWM5enMtUmZkeS11RzVGV2tMTVhORXdfUkNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zYmU4NjUtNWM3OS00N2MwLWFhNGQt
MWM2NTRlMDJkNzVkLzEvOWM5enMtUmZkeS11RzVGV2tMTVhORXdfUkNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8zYmU4NjUtNWM3OS00N2MwLWFhNGQtMWM2NTRlMDJkNzVk
LzEvOWM5enMtUmZkeS11RzVGV2tMTVhORXdfUkNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARAiDWp0G
2p307AW8tBZ+pAAZk3HWYmxk8MDnmqrTWMKOWYA2CHkQt7SrPa32vSVfcwImJKmw
6C4ofxzXNcsiIaFwyB81IAH/pOcHvbR1kdrI6LzCkNZc32s+ue+0hHMftXsGs3Fe
qqb0MZjDamBTBgdUh75ubAW66KoPLWB7+MTeUPL0NPI7tiUik1n16EXpdrLHNLz7
mi75U3qHYArTUw1lejdIrgWuBmawmBs1jyn/Hqzsxs2sGeyPe2+oqg+sl8cgQ2DH
zcj1lK63lEQQyhHzS384tb7foSCaq1cM38FSmJxQpMeD/tYvC2nwkq4/ZjIXxoly
qY+E6Y5BJ6JVoQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:48:18 2025 by rpki-client