Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
File:                     grxjPihGZKTKUa1Zdsf68sYka0s.mft (raw, json)
Hash identifier:          aF81wEB9j9mCw7jAOmecsd7qDYsCx32Rack9vwquFQY=
Subject key identifier:   FC:4B:68:65:EC:2A:4C:A1:31:98:EA:68:31:0D:B2:20:67:A9:84:13
Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
Certificate issuer:       /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Certificate serial:       01969ED0F37305091E03BB2046FDEA6543EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
Manifest number:          1493
Signing time:             Mon 05 May 2025 05:00:16 +0000
Manifest this update:     Mon 05 May 2025 05:00:16 +0000
Manifest next update:     Tue 06 May 2025 05:00:16 +0000
Files and hashes:         1: Ia9_Al1piqnyn_Z0TB3In4a8pMA.roa (hash: ZdxPt8zq+Sls/weJBLKFV4PNPGZ9d0PtlTR0s1gNMLE=)
                          2: grxjPihGZKTKUa1Zdsf68sYka0s.crl (hash: 1ydiIFLrWOuU7Vo0tV6fIHGkvUX+UGEzUSDQlug2t/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:d0:f3:73:05:09:1e:03:bb:20:46:fd:ea:65:43:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
        Validity
            Not Before: May  5 05:00:16 2025 GMT
            Not After : May  6 05:00:16 2025 GMT
        Subject: CN=fc4b6865ec2a4ca13198ea68310db22067a98413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3a:b0:58:10:c8:90:7f:6c:01:f8:28:22:e5:
                    dc:ce:c1:0e:60:9b:ba:01:0a:99:4d:e7:d6:de:df:
                    30:f0:0e:b8:0a:92:06:28:e7:60:9b:48:cd:b5:09:
                    6d:3c:58:10:19:b4:16:d3:c6:8c:24:50:50:be:7a:
                    38:85:d5:e4:14:5d:34:9b:72:2b:0a:31:d8:f2:52:
                    16:3b:3d:92:90:dc:62:14:a2:4c:86:a7:f3:b6:55:
                    69:ed:b1:70:fc:22:9a:f3:51:a3:d6:17:0a:70:0c:
                    89:00:c6:98:cc:8f:e7:0f:e8:75:7d:3c:57:e7:90:
                    55:53:9d:e7:d7:a2:1e:aa:08:51:e1:db:ad:00:0a:
                    1b:ce:7d:67:3d:e1:74:a7:04:4e:e4:f5:40:fc:73:
                    ae:54:65:ae:01:14:c7:4d:38:b3:b4:9e:7b:8f:2e:
                    a7:15:08:55:bf:01:e8:e7:17:de:24:4f:41:0e:74:
                    26:13:5f:25:70:0c:2c:a9:bc:f4:0d:c8:01:08:01:
                    22:0e:cf:81:59:be:d3:aa:06:ad:a9:e0:bd:fa:d8:
                    a3:3a:78:46:30:b2:19:26:4b:85:61:49:99:ad:bf:
                    da:af:e1:fc:d7:e8:a0:08:ab:93:20:6d:41:73:75:
                    20:9b:32:95:22:10:48:34:5b:fc:70:62:51:d0:78:
                    b7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4B:68:65:EC:2A:4C:A1:31:98:EA:68:31:0D:B2:20:67:A9:84:13
            X509v3 Authority Key Identifier:
                keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:fd:9a:11:8e:b6:1a:2f:12:0d:ac:a7:74:4b:3b:b8:3e:50:
         4f:59:f6:49:2b:ed:c4:f2:0b:1e:0d:f5:7f:00:30:3e:d4:88:
         bb:bd:9c:1a:06:24:65:e0:a1:e6:d6:e6:db:7a:81:13:e1:1d:
         4e:e3:4a:b3:fa:ac:1d:55:74:04:c2:d6:fa:e8:2e:b7:77:09:
         72:a5:f9:71:cf:d5:ef:67:a1:4f:bb:ff:fa:ba:f3:97:15:02:
         f3:e0:85:cc:11:10:82:2f:fc:d1:ae:8f:ac:ec:b1:32:65:59:
         05:54:7f:ac:46:83:12:cd:43:24:99:9f:ce:4e:f3:bd:ee:72:
         3a:c1:d1:62:91:7e:02:1f:f0:0c:29:b6:35:04:03:59:92:53:
         c3:1a:61:a1:97:02:6f:6d:4f:95:ca:66:f9:c8:65:f7:a4:92:
         3b:6c:c7:cf:79:af:32:c3:c2:91:34:50:a0:75:dc:c6:5c:b4:
         44:01:83:aa:ff:e2:13:20:b1:56:70:a3:c9:f2:83:8f:fc:17:
         f3:6b:9f:36:2c:5a:f1:c6:49:03:b4:ed:53:60:88:28:f4:2b:
         70:8e:c4:57:a2:6d:c1:1c:d5:67:19:59:bc:a6:47:c7:7d:2f:
         f7:6c:69:01:ae:a2:b7:32:78:58:cb:ae:2a:0b:d8:27:e8:e7:
         07:93:a5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:59:09 2025 by rpki-client