Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
File:                     moBTvNLE2KeioyXit0ZBZqXkjd0.mft (raw, json)
Hash identifier:          bEaGpx7grs3/C5/HWw2LItAyeB6dPRPf19s2ttE85ls=
Subject key identifier:   A8:CF:81:BB:3B:44:99:C9:5D:7A:9F:33:C1:97:50:01:34:F0:10:F0
Authority key identifier: 9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD
Certificate issuer:       /CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
Certificate serial:       0196B58FDFDFED4B54FCB5FE1F5145D0FC97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
Manifest number:          0FBB
Signing time:             Fri 09 May 2025 15:00:26 +0000
Manifest this update:     Fri 09 May 2025 15:00:26 +0000
Manifest next update:     Sat 10 May 2025 15:00:26 +0000
Files and hashes:         1: cxA-RyOMLkq935v_LceKQwYPwHs.roa (hash: HnGDMBYysRSj3AGQ0kR7dSJMblTeuNonvUsGSEcjwQ4=)
                          2: moBTvNLE2KeioyXit0ZBZqXkjd0.crl (hash: aalxNhgQmHe6JdA/kDS+7C4hunZdJWsu2JkkK6zgmVQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 15:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b5:8f:df:df:ed:4b:54:fc:b5:fe:1f:51:45:d0:fc:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
        Validity
            Not Before: May  9 15:00:26 2025 GMT
            Not After : May 10 15:00:26 2025 GMT
        Subject: CN=a8cf81bb3b4499c95d7a9f33c197500134f010f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:68:cf:52:be:b5:20:50:74:91:5f:dc:d7:a4:
                    72:35:41:bc:7d:cb:c5:35:e7:6b:9c:7b:b0:6b:16:
                    5e:00:ab:d4:ac:47:67:ff:f1:a3:3b:9c:28:38:c0:
                    53:d1:17:75:27:44:d0:91:bc:50:fa:ec:b0:f9:6a:
                    91:09:b2:7c:d4:50:d9:16:d1:e5:6d:ae:00:ca:28:
                    51:5b:42:c5:98:b0:a3:5b:09:7d:ba:51:80:2e:90:
                    2a:77:2c:03:ec:45:51:85:91:80:71:75:45:82:05:
                    e1:c9:df:a6:85:59:69:23:9d:59:54:ea:67:6d:a5:
                    49:19:28:fb:be:61:ff:21:04:e3:5e:1e:93:58:34:
                    fd:a2:f1:dc:55:fd:e0:56:4a:9b:50:f1:2a:e6:7c:
                    3b:ee:67:ff:cd:45:09:2c:32:a7:1a:83:a7:79:22:
                    b8:ed:8a:4c:d3:72:e4:30:6f:33:60:17:10:27:76:
                    63:80:43:f6:76:4f:fa:04:c4:ef:a8:41:87:ea:81:
                    8a:db:94:dd:f6:b3:cb:d5:1e:59:80:14:e7:85:48:
                    32:11:d0:13:94:f1:c0:42:72:eb:c7:0c:93:be:21:
                    4c:ed:9b:01:4a:1e:8c:bc:d3:f3:66:a5:bc:86:44:
                    8a:8d:64:88:b5:57:97:9a:3f:30:f6:ca:29:0b:ec:
                    e5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:CF:81:BB:3B:44:99:C9:5D:7A:9F:33:C1:97:50:01:34:F0:10:F0
            X509v3 Authority Key Identifier:
                keyid:9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:9d:cc:4e:c9:c2:4d:95:83:ba:ea:0d:24:e6:6a:a1:ed:4a:
         06:13:3a:c2:d3:e1:d3:31:79:91:df:e4:ce:7e:b0:38:e5:a4:
         93:f0:8f:5d:ba:e5:3d:c0:20:83:11:23:cf:80:a3:45:ea:34:
         db:a1:c6:b1:bd:02:37:67:04:a5:dd:69:ff:fa:7d:06:9e:3e:
         0c:9b:af:b4:34:4f:d1:0c:4e:e5:84:b8:3a:1f:a3:a5:50:d8:
         7a:8f:52:85:86:9c:e9:ed:64:c0:2c:ee:ef:1b:70:9b:08:f0:
         78:5b:5e:7c:7b:0e:92:0e:62:fe:6d:9c:3f:46:ad:ce:ab:b2:
         c5:31:40:05:03:a7:41:53:bc:f2:60:f9:58:d5:1e:a0:f9:20:
         18:83:8e:ec:07:0a:dd:20:f6:12:aa:02:23:18:f4:51:dc:6a:
         e7:4b:9d:71:2a:4e:c2:84:1b:1b:f8:21:86:4f:fd:b2:49:ab:
         e9:b7:03:07:30:c7:32:ee:36:77:00:0f:7c:89:83:42:9b:e2:
         62:47:01:a6:84:06:36:65:de:3f:e0:11:86:07:43:f0:68:5e:
         56:9f:e1:0c:7a:07:c5:84:28:a5:98:f8:47:4b:55:13:53:cc:
         a8:98:f1:d2:75:56:b9:57:d9:46:cc:be:0a:b9:96:94:ff:6b:
         e1:94:e1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 22:05:07 2025 by rpki-client