Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
File:                     _FXgUz76pWJPU4uS7RqXP-_4l1E.mft (raw, json)
Hash identifier:          qMIdiVAlbdmSfw+DrvurwsDERGrlJQCqzI/aJD5UnRo=
Subject key identifier:   8C:E4:77:A3:91:91:50:81:F4:59:19:FD:54:68:45:62:AD:21:B9:4C
Authority key identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
Certificate issuer:       /CN=fc55e0533efaa5624f538b92ed1a973feff89751
Certificate serial:       0196A27771191C25940BECA6501E629C7AB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
Manifest number:          100B
Signing time:             Mon 05 May 2025 22:00:58 +0000
Manifest this update:     Mon 05 May 2025 22:00:58 +0000
Manifest next update:     Tue 06 May 2025 22:00:58 +0000
Files and hashes:         1: 5XMYoEM__63W79FSrJxqp5j0UJE.roa (hash: 6AxR53Ak3LvDCXifdXwDPZPN/iyJdk5U29qoVvF/ZYU=)
                          2: _FXgUz76pWJPU4uS7RqXP-_4l1E.crl (hash: /AUtUjK4AuVtY8hXwcLA7KqV/6DntBKc9JCfJQCw4wY=)
                          3: b-Ey_OS_HXWojxgowNhsjzhqy0g.roa (hash: IYNzeBFLK7crpI5DxHVXy2f+PctN4mHIKes13g+bMzc=)
                          4: qnzJlov9IfHa6-JIDhU1P8n2pxc.roa (hash: hqsVesAuwoplFvP+6XnZFOJ9zgaV+J5/eniIwX7ChVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:77:71:19:1c:25:94:0b:ec:a6:50:1e:62:9c:7a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc55e0533efaa5624f538b92ed1a973feff89751
        Validity
            Not Before: May  5 22:00:58 2025 GMT
            Not After : May  6 22:00:58 2025 GMT
        Subject: CN=8ce477a391915081f45919fd54684562ad21b94c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:06:66:7c:f8:2f:a7:a0:0b:61:a0:1a:d0:60:
                    04:b1:bf:75:d5:e8:4f:d1:fd:ef:f6:16:1e:01:90:
                    1f:30:a9:b9:a9:d5:aa:2c:f1:15:13:21:c0:18:c1:
                    97:6c:c4:06:98:e4:ba:ce:ec:fb:c0:bf:df:94:df:
                    d1:8c:bc:9f:fc:b8:03:73:9b:80:23:c2:0f:94:c6:
                    54:de:09:50:3c:9b:82:a4:f5:11:8b:52:95:da:27:
                    df:04:a2:b8:31:60:54:12:cc:1a:c0:cb:5f:1f:40:
                    01:7d:3e:39:fe:12:95:73:96:e7:15:9d:b0:6f:2b:
                    ba:cc:1f:07:ab:9b:95:d3:1f:5d:23:62:2f:35:37:
                    bc:c2:90:26:54:73:20:61:2a:24:b1:67:78:f3:b7:
                    1d:90:d3:c9:b7:a5:a4:a4:22:6a:b9:13:64:fc:06:
                    c5:7c:07:32:fa:51:64:04:5d:f8:54:0a:fc:63:e8:
                    8b:fa:8a:c5:87:f4:de:90:3c:c0:96:14:56:5c:1f:
                    68:24:65:7b:69:5b:59:1d:fa:2f:86:59:ff:91:f3:
                    f7:64:b0:be:7e:a2:7a:64:ba:df:05:28:b4:ba:36:
                    23:c8:17:c5:67:b5:c1:0b:12:25:1e:1d:54:53:4b:
                    12:f6:d4:69:9a:1a:25:1f:ed:f1:28:83:44:f0:72:
                    c4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E4:77:A3:91:91:50:81:F4:59:19:FD:54:68:45:62:AD:21:B9:4C
            X509v3 Authority Key Identifier:
                keyid:FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:6e:c3:c8:f9:d8:79:79:e7:3b:9b:03:9c:49:2b:98:68:2e:
         5f:3a:06:cf:ab:4b:41:ba:f2:bf:e2:35:41:37:40:5e:c7:9c:
         45:24:aa:16:3b:7d:09:6b:59:c6:99:f1:20:fc:ca:8b:5c:aa:
         67:65:19:a4:9e:95:0e:b7:b1:53:08:c5:d8:dd:5c:55:e7:7e:
         b1:f4:52:52:bb:ce:8c:d3:d7:10:1c:c1:cc:a9:f2:28:22:96:
         76:26:0a:5e:f8:07:26:4b:59:f9:83:80:56:64:fa:93:dd:77:
         95:f3:65:56:97:5c:e6:56:9a:b8:00:6a:48:42:ee:fa:46:d7:
         5c:bc:76:17:0d:86:6f:80:09:39:d0:29:93:22:f9:59:dd:3c:
         23:a2:31:45:5a:a1:a4:80:81:90:65:a7:c5:43:5f:c8:2f:46:
         00:8b:fa:c8:bd:b8:cf:91:33:1f:e1:b8:4c:73:e1:86:98:22:
         d8:49:68:7b:3d:e3:3e:61:a3:de:99:89:82:c9:eb:62:06:72:
         ac:10:16:d0:45:04:ba:75:a0:a5:d5:bd:41:7a:28:5f:a4:b7:
         a4:0a:3a:d5:11:c3:79:18:d0:64:84:6d:36:3e:8e:23:da:70:
         01:ca:05:fe:6b:8e:b9:42:60:60:d1:6a:93:1a:6f:35:74:49:
         32:bb:d9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:03:53 2025 by rpki-client