Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
File:                     _LiYPlKfyUm4n6s3A7eVt4sah1w.mft (raw, json)
Hash identifier:          jojjYJG8JCl6ZYWR4uL4B1Hn/WSo5Pmv/3Oaqcj4PNA=
Subject key identifier:   CB:BB:75:10:B6:67:4D:89:C5:E2:8F:AD:C0:6A:4C:4B:B8:96:F6:FF
Authority key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
Certificate issuer:       /CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Certificate serial:       01975BA4F218EC09AE0BD89949CB043571D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
Manifest number:          09F2
Signing time:             Tue 10 Jun 2025 21:00:25 +0000
Manifest this update:     Tue 10 Jun 2025 21:00:25 +0000
Manifest next update:     Wed 11 Jun 2025 21:00:25 +0000
Files and hashes:         1: DiB_b1f0zlqZ4Y9RlICgbOGMJ7o.roa (hash: bx7gORpYBo75Iq/H/h1fyR0wOXDdKfLfUPEbvglKOL4=)
                          2: _LiYPlKfyUm4n6s3A7eVt4sah1w.crl (hash: C3JD9Q8tWK2S4cMOkif4lh5xgJjEZWJUlKQz5CFd4L0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 21:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:a4:f2:18:ec:09:ae:0b:d8:99:49:cb:04:35:71:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb8983e529fc949b89fab3703b795b78b1a875c
        Validity
            Not Before: Jun 10 21:00:25 2025 GMT
            Not After : Jun 11 21:00:25 2025 GMT
        Subject: CN=cbbb7510b6674d89c5e28fadc06a4c4bb896f6ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:00:dd:1b:6f:8f:e2:b4:90:1d:fd:17:76:
                    02:0b:4d:c7:89:f6:d1:f0:d2:11:af:7e:68:01:e1:
                    e3:fd:0a:95:ee:ab:d8:0b:6e:1b:57:cd:31:9c:9f:
                    9c:15:53:4e:17:33:53:a2:d6:39:76:d3:71:c9:f0:
                    70:dd:71:30:dd:7b:ad:c0:e5:dc:db:14:13:7c:a4:
                    97:57:07:60:66:ed:94:1e:96:c7:10:c2:97:a5:7f:
                    ff:ab:f6:c3:00:e9:8b:2c:63:f5:ae:c6:3b:e2:7a:
                    82:87:b7:c3:cc:b2:c7:5c:e3:31:e8:98:7e:ef:65:
                    c8:86:07:57:73:ce:49:fb:5e:a5:b3:c8:76:4e:f6:
                    a0:a6:c6:5e:d4:b1:c6:ea:e9:1a:e8:6b:91:d6:7b:
                    2d:be:90:77:ab:f8:8f:2e:2b:ba:c9:48:ef:3f:44:
                    ac:53:2f:4e:ec:16:a2:70:26:d6:f1:ce:4e:eb:dd:
                    5b:60:8f:ee:ab:6f:6c:f1:22:35:d1:08:b8:ec:11:
                    63:38:21:bd:7d:21:c2:27:24:35:03:66:ee:e3:ea:
                    ce:45:65:86:6d:d1:97:0a:c3:02:98:51:3a:81:90:
                    e7:cd:9b:80:d4:cc:15:f7:21:de:2e:5f:22:f2:d9:
                    91:d2:0d:69:db:ca:a3:52:c9:f3:d3:79:e0:2a:43:
                    9b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BB:75:10:B6:67:4D:89:C5:E2:8F:AD:C0:6A:4C:4B:B8:96:F6:FF
            X509v3 Authority Key Identifier:
                keyid:FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:6d:76:7a:62:fa:49:bb:ed:bc:1a:90:91:b1:97:0e:b1:dc:
         5a:bf:0d:14:64:fe:cd:bc:cf:95:f9:1a:e0:17:ff:0e:0f:24:
         5f:eb:68:59:2b:b0:2b:02:a4:03:c0:dd:4e:c5:cf:02:f0:3f:
         0e:92:57:4a:18:33:a2:53:61:d8:e0:2b:b1:f5:31:8d:45:e1:
         a5:9a:4d:ec:93:e7:63:de:7f:bc:17:8a:58:10:19:56:63:d5:
         03:df:bc:2d:10:29:dd:46:87:0a:a0:ae:5c:ac:10:41:23:9a:
         a9:36:28:2e:7c:7a:58:61:b2:99:af:8c:14:19:95:ac:ab:d6:
         15:68:57:6a:16:d4:cd:a4:04:23:3d:9b:b9:b4:13:a7:a9:1d:
         5f:ba:d8:6b:23:90:f5:25:80:83:d4:8e:e3:f1:d5:41:f4:18:
         83:be:1a:b6:50:99:1f:18:7b:7f:86:18:06:ad:cb:92:8b:1b:
         bb:30:d6:64:ed:b1:8b:6f:1a:d0:18:b6:ec:1d:3a:4d:5b:3f:
         c4:46:00:ea:ae:db:9e:bf:8b:d7:38:3b:f4:ef:4c:75:7a:d9:
         b9:b5:2a:33:f6:5d:0f:66:e3:d3:9d:68:76:e5:f0:24:bf:90:
         b5:71:80:d3:89:45:9e:4f:87:0b:a3:5d:a5:8f:b1:c4:90:7d:
         cb:79:27:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:26:42 2025 by rpki-client