Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
File:                     9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json)
Hash identifier:          zRT3fGUslgGlyMO2c2iLT9MCsLAemLEt/wq2zGBkZ8U=
Subject key identifier:   72:D1:AC:63:85:FF:51:20:17:E1:FB:30:7F:9B:FD:55:30:07:79:FB
Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
Certificate issuer:       /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Certificate serial:       01976471D2C53489DACE3B0D716A81A8B2A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
Manifest number:          0C98
Signing time:             Thu 12 Jun 2025 14:01:10 +0000
Manifest this update:     Thu 12 Jun 2025 14:01:10 +0000
Manifest next update:     Fri 13 Jun 2025 14:01:10 +0000
Files and hashes:         1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: yxXwhaxNxQPDBpV94HvQOgSkJd6p6whMFm2RQrlseHc=)
                          2: B8bTTGpK1L-pMyO-WGFk_7H-LC8.roa (hash: r0JNxuBgg4on067YK5COQPlyCkk+tp458uDvr2IE4z8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:71:d2:c5:34:89:da:ce:3b:0d:71:6a:81:a8:b2:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
        Validity
            Not Before: Jun 12 14:01:10 2025 GMT
            Not After : Jun 13 14:01:10 2025 GMT
        Subject: CN=72d1ac6385ff512017e1fb307f9bfd55300779fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:76:ed:70:b7:33:45:f3:71:0d:ef:77:a9:e4:
                    3b:37:e9:1b:d5:ea:fb:e4:b5:66:3a:ce:7e:af:ef:
                    b5:3c:d0:48:d4:65:b5:36:2c:e1:c0:e3:f4:63:6d:
                    8b:35:b4:36:c9:8b:7a:e9:7d:a2:4f:63:f5:ef:98:
                    e4:0d:8d:92:b9:e0:bf:b1:8d:45:d4:d0:9a:cf:04:
                    aa:ed:c0:9a:e8:fb:fc:9c:1f:95:fc:ae:eb:c7:8b:
                    f4:b7:f7:c9:a0:4f:63:af:a4:bb:65:57:63:80:17:
                    35:bc:4e:e8:98:28:58:ce:e1:ba:88:d7:49:13:8a:
                    e1:54:90:b5:77:c8:c4:85:d5:72:2e:6b:76:f0:b8:
                    02:d7:bf:b7:ca:cd:80:0c:95:2f:64:65:73:b2:b9:
                    06:dc:4a:76:33:fb:62:ca:24:b2:12:de:a2:2e:40:
                    06:ad:d8:d3:db:98:37:10:71:da:ea:31:a0:d7:bc:
                    64:71:82:c2:d7:88:0c:c1:47:d5:7d:6b:a9:8f:3d:
                    39:76:2d:b6:22:ef:0c:db:33:37:41:db:9e:1f:4b:
                    97:a1:a2:6c:64:1e:1d:99:26:0b:d2:a0:e8:e2:1b:
                    b4:bb:84:6b:f8:3a:ed:50:3b:20:b9:b0:53:8a:ff:
                    6d:9e:1b:28:05:18:e4:9f:c0:8a:73:c1:cf:c9:63:
                    6f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D1:AC:63:85:FF:51:20:17:E1:FB:30:7F:9B:FD:55:30:07:79:FB
            X509v3 Authority Key Identifier:
                keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c6:af:39:5c:39:e9:7b:be:11:74:4d:04:ad:96:65:8d:7d:
         99:72:65:83:e4:72:24:f9:32:cf:48:c7:6a:8a:a8:27:cc:f6:
         0a:17:70:10:1b:ce:74:a8:80:21:0f:ac:35:55:39:71:bb:f1:
         72:8f:b1:fd:37:b9:3a:ea:86:ad:e7:33:95:35:0f:61:97:c6:
         71:ce:87:4a:51:0a:18:52:31:79:e2:12:c4:0c:53:1f:b6:b4:
         d5:08:da:d2:93:2c:28:2f:7b:04:9d:92:b4:8a:5e:f0:ed:2c:
         c2:41:27:9e:1f:64:b9:69:1f:78:3c:2a:aa:b2:54:79:a9:95:
         9d:ce:9e:6d:5b:99:2f:cb:42:fc:9e:da:12:f0:41:e3:c0:98:
         d7:d6:e4:5d:7f:be:7f:93:cf:19:45:2b:0a:3c:a0:32:57:c3:
         11:14:92:ee:d8:b9:d5:1d:db:a6:9c:0c:a0:c0:08:e6:71:f2:
         b8:73:fb:f6:06:ee:a1:ee:07:ed:5c:34:cd:25:20:de:7f:0e:
         2f:be:e8:a7:d4:db:aa:41:33:fe:40:20:b9:da:46:ae:b0:d0:
         9b:f1:8b:d7:b4:fc:ae:f1:cb:34:c1:9e:06:89:4f:6c:36:dd:
         48:d8:8a:df:3a:2e:a8:70:23:9c:47:81:52:56:5b:fd:f0:84:
         64:74:29:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 22:02:57 2025 by rpki-client