Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
File:                     FV9JSb982s8-nUZXsIzYR4DUF0U.mft (raw, json)
Hash identifier:          sap98pE2A8rT0kzJ5nuWxCgq0CdYazilBovDlRybRw8=
Subject key identifier:   9E:67:8E:9F:5C:BC:29:75:1F:DA:B5:AC:48:EA:8B:00:14:8F:04:1C
Authority key identifier: 15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45
Certificate issuer:       /CN=155f4949bf7cdacf3e9d4657b08cd84780d41745
Certificate serial:       0196A23FEAA73E24CCD05FC2DCB27E622518
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
Manifest number:          0A74
Signing time:             Mon 05 May 2025 21:00:19 +0000
Manifest this update:     Mon 05 May 2025 21:00:19 +0000
Manifest next update:     Tue 06 May 2025 21:00:19 +0000
Files and hashes:         1: FV9JSb982s8-nUZXsIzYR4DUF0U.crl (hash: +UXodd/ArPN3rpHUQcNLqr0B4bVdawQVmJ5QP0o5DkY=)
                          2: zkBP6jwAIcxOW5q294UHQKzDD0c.roa (hash: YibThuAHS7eJGA6WCV76iqH00ACQeedF/jfisklHuic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:3f:ea:a7:3e:24:cc:d0:5f:c2:dc:b2:7e:62:25:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=155f4949bf7cdacf3e9d4657b08cd84780d41745
        Validity
            Not Before: May  5 21:00:19 2025 GMT
            Not After : May  6 21:00:19 2025 GMT
        Subject: CN=9e678e9f5cbc29751fdab5ac48ea8b00148f041c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ae:7d:31:1a:b3:12:c0:86:ae:ce:1b:1b:1e:
                    33:04:4a:ef:6b:46:bb:d5:93:7c:24:98:1f:9e:fc:
                    7b:2a:1c:ac:e2:fb:90:b2:22:22:e3:50:8a:3d:dc:
                    32:2f:e1:a7:9c:70:71:e3:81:99:ea:01:5b:5c:cf:
                    79:62:a5:53:bf:7a:e0:62:8e:88:7e:0a:b5:f6:76:
                    36:c0:fa:ea:33:79:38:96:5b:20:ef:bd:aa:9e:cf:
                    3b:49:c2:e0:61:af:70:53:58:f9:5c:e5:1d:91:8f:
                    26:d2:70:96:62:a7:f8:4f:30:ad:05:a6:82:38:75:
                    ab:98:6c:5b:94:36:19:fa:a9:2e:50:75:72:d8:3c:
                    33:4f:8f:a0:20:29:c0:1f:e6:01:b7:49:20:34:56:
                    f8:d6:0a:21:04:ae:68:32:f2:95:8d:fe:28:9f:94:
                    2e:db:32:62:7d:60:71:7a:49:b9:a1:f9:a7:3d:34:
                    3a:c1:7a:91:02:01:a0:d3:25:80:64:9d:05:6b:85:
                    85:03:dd:36:94:14:2b:8b:5c:28:46:1d:48:a5:2d:
                    93:5d:cb:d0:e4:97:7e:4a:77:5d:12:dc:6d:4b:56:
                    cd:0b:01:e4:4a:9a:42:63:17:ce:88:e8:be:45:e8:
                    16:6d:af:43:61:85:39:31:43:1f:18:49:1b:ce:4d:
                    55:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:67:8E:9F:5C:BC:29:75:1F:DA:B5:AC:48:EA:8B:00:14:8F:04:1C
            X509v3 Authority Key Identifier:
                keyid:15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:bd:49:dc:d3:f8:61:44:bd:3b:b1:d6:15:12:c9:0f:3b:c5:
         56:82:1e:08:19:7e:53:94:11:c3:8f:70:76:b8:e7:2e:0c:96:
         d1:b3:43:e2:6e:b0:19:aa:26:fd:db:3d:3d:08:69:15:07:4b:
         87:c3:cf:98:63:03:db:44:06:3f:f1:bd:32:b2:95:c1:11:16:
         ba:fe:ca:d2:55:c3:3c:f7:b2:35:7e:36:a4:22:ea:9a:bf:03:
         ce:b7:05:92:bf:8a:06:8a:ae:63:0e:52:57:aa:2c:f7:77:ca:
         0c:7f:8c:67:9e:8f:e2:5d:30:14:51:97:c2:ff:e0:5b:d9:fb:
         1d:71:e5:a4:c4:15:67:74:0f:9b:fa:3e:e7:00:0a:b5:c8:be:
         c9:db:8b:84:4e:14:64:b3:68:89:b8:ff:85:cd:c1:07:f1:26:
         09:01:3c:45:5b:87:de:31:a9:1a:83:2a:c3:75:f3:51:53:53:
         2f:25:61:61:d3:63:ca:42:95:ef:2b:6a:5a:59:94:33:c2:0d:
         75:50:a6:ef:7e:14:c4:3f:5e:74:4b:f8:00:37:01:25:d4:3f:
         f6:5e:02:f3:3d:1f:37:57:1e:23:d7:14:f1:1a:22:38:ba:59:
         3c:19:b1:48:cc:8b:8f:16:4c:3b:9d:b6:47:ad:33:72:a6:9e:
         33:3f:8b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:43:58 2025 by rpki-client