Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
File:                     _LiYPlKfyUm4n6s3A7eVt4sah1w.mft (raw, json)
Hash identifier:          /NpRYK7UGPdmH5iXShN4YnUlseePSZsDxTw82qbGiLk=
Subject key identifier:   76:C4:D0:4A:40:90:F9:83:53:48:98:EA:01:24:57:F0:B9:B7:D7:34
Authority key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
Certificate issuer:       /CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Certificate serial:       0196D0998BBE9FEE9B8642E13EA2978EE9C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
Manifest number:          09AA
Signing time:             Wed 14 May 2025 21:00:45 +0000
Manifest this update:     Wed 14 May 2025 21:00:45 +0000
Manifest next update:     Thu 15 May 2025 21:00:45 +0000
Files and hashes:         1: DiB_b1f0zlqZ4Y9RlICgbOGMJ7o.roa (hash: bx7gORpYBo75Iq/H/h1fyR0wOXDdKfLfUPEbvglKOL4=)
                          2: _LiYPlKfyUm4n6s3A7eVt4sah1w.crl (hash: 6BJOFJHk8yt+P4iS/jxVnSUfSwXjelxaoF82+0ILPSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 17:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d0:99:8b:be:9f:ee:9b:86:42:e1:3e:a2:97:8e:e9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb8983e529fc949b89fab3703b795b78b1a875c
        Validity
            Not Before: May 14 21:00:45 2025 GMT
            Not After : May 15 21:00:45 2025 GMT
        Subject: CN=76c4d04a4090f983534898ea012457f0b9b7d734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:28:2d:eb:54:3b:ed:72:d2:3f:ca:a7:d5:
                    9e:77:ee:e1:5d:d0:43:7b:27:02:15:88:19:d6:f5:
                    fc:5b:4d:c9:b2:5b:4b:dd:26:25:d0:a9:11:9b:6e:
                    47:e5:eb:e5:92:bf:d9:21:93:65:32:67:ce:cd:57:
                    8d:64:ba:40:c2:bf:69:f4:7a:38:96:1e:8b:36:cd:
                    fa:34:3a:2b:5f:22:a9:42:ae:17:3d:fe:43:f9:bb:
                    8d:b6:9b:e0:6f:e4:21:91:db:ea:71:07:44:b9:cc:
                    94:d6:84:28:0a:e5:ab:37:b9:cc:96:18:54:90:43:
                    39:37:49:1a:ae:74:46:5a:15:21:cd:6d:ef:1e:69:
                    df:11:4d:3c:ce:4a:99:b4:92:0c:89:06:b3:1d:e3:
                    86:91:61:42:33:6e:3d:06:99:d8:3e:3c:c4:f8:a0:
                    58:7a:e9:17:52:e5:d4:de:84:d1:62:30:78:73:ac:
                    45:fc:a2:07:f3:12:26:68:23:d1:c2:10:9b:ae:43:
                    06:ac:46:87:0b:71:9f:1c:e4:13:a6:e7:43:05:79:
                    14:f3:72:54:ce:42:d6:df:63:b0:5a:8b:e9:8a:b3:
                    53:91:8a:3a:b0:2d:33:54:57:5d:3d:c3:e6:c1:6f:
                    2b:0a:7b:1c:98:dd:f1:c9:8c:74:05:bd:de:8a:1f:
                    49:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C4:D0:4A:40:90:F9:83:53:48:98:EA:01:24:57:F0:B9:B7:D7:34
            X509v3 Authority Key Identifier:
                keyid:FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ee:49:75:3f:e2:ab:b9:c1:01:b1:ee:4c:b8:f9:56:93:6d:
         f8:4c:eb:96:41:8a:c5:4a:ed:fb:40:c1:3e:9d:25:c7:ec:3d:
         d4:fb:7b:9b:00:90:37:35:8f:4a:70:ac:5f:f7:1d:c2:a8:d1:
         d4:29:56:9b:5a:9a:07:67:f5:84:c4:e6:8c:cc:7f:e3:17:dc:
         dc:e5:66:8c:52:0f:55:ef:f2:c3:10:62:74:3a:94:bc:02:bf:
         98:3c:68:92:05:e7:ad:32:eb:e0:d5:b6:47:a6:1c:1b:cf:9b:
         1c:ab:f2:0a:c9:80:fc:e1:cb:b6:4a:19:43:38:7e:74:57:7a:
         1b:41:43:6a:75:d4:5d:da:41:36:fc:ba:1e:79:db:3f:8a:77:
         a5:3f:57:29:6e:82:53:6f:28:47:f1:4e:df:81:e9:f7:b7:a4:
         f1:12:1e:57:c9:74:1d:ad:cd:a0:37:31:37:5a:a1:e3:fe:86:
         ea:c1:c6:2b:fe:2b:58:8d:a6:ee:da:d0:93:c5:8c:d4:32:2a:
         4d:65:52:87:ba:83:53:7c:a1:54:47:df:45:c2:8f:63:cc:37:
         dd:10:56:0d:78:8a:10:73:12:77:35:f0:59:50:85:c2:f5:11:
         87:7d:27:e1:ea:4f:20:11:11:9b:f0:1c:60:ae:6f:ba:05:8a:
         2a:83:d7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:46:23 2025 by rpki-client