Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
File:                     lrN3ZE5BQQHbberQ61ghBj9Yjow.mft (raw, json)
Hash identifier:          mUSD5yMrzhM4GcCXGtd+p4NCDRR4jG26YhdGltHNDXo=
Subject key identifier:   C9:C5:27:DB:1E:FF:64:C4:4D:18:D5:36:A3:F3:59:4A:D8:CD:9E:B8
Authority key identifier: 96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
Certificate issuer:       /CN=96b377644e414101db6dead0eb5821063f588e8c
Certificate serial:       0197470C0611C9DD14499F7FE0C0D48BFD78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
Manifest number:          14FC
Signing time:             Fri 06 Jun 2025 21:00:59 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:59 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:59 +0000
Files and hashes:         1: jEYee-uOwLf9rNeDWIsHdJ75KKw.roa (hash: /wehpCViK0XYDMQCz1eNAOOXNcexzwchRQ7CIA4o1RM=)
                          2: lrN3ZE5BQQHbberQ61ghBj9Yjow.crl (hash: FSm1AWH5McjeM+Cmidu/GGoaTqDZYEIjaveuFgcRiWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0c:06:11:c9:dd:14:49:9f:7f:e0:c0:d4:8b:fd:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96b377644e414101db6dead0eb5821063f588e8c
        Validity
            Not Before: Jun  6 21:00:59 2025 GMT
            Not After : Jun  7 21:00:59 2025 GMT
        Subject: CN=c9c527db1eff64c44d18d536a3f3594ad8cd9eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:be:22:ee:07:cd:24:16:a0:d0:5f:de:69:8e:
                    66:ea:46:2b:51:25:9a:e3:9b:a7:e9:b0:fc:3c:72:
                    cf:55:97:a0:90:9b:81:65:97:da:71:fe:f2:af:a0:
                    83:39:bf:57:bc:6c:eb:70:37:61:b0:36:57:d4:8a:
                    26:36:27:77:ea:d1:2d:74:d0:fc:f8:79:44:9f:6d:
                    d0:a2:0e:23:0c:8a:d5:3c:fe:ec:e9:b7:2e:26:68:
                    51:f6:c2:1f:62:bd:27:bb:51:a4:c1:72:69:a3:bd:
                    d8:ac:59:a6:10:fe:f7:f4:30:2b:d6:54:fd:19:4a:
                    78:55:6c:6c:6d:57:2d:7e:87:c1:b6:4e:a2:82:35:
                    f5:a0:92:90:e9:2e:e5:c7:52:24:8b:83:90:ee:54:
                    b4:7b:d6:f2:91:b6:90:a7:3a:66:74:d3:b0:40:43:
                    e1:0e:2c:21:ee:d7:26:63:85:17:7b:62:e6:6b:e3:
                    d4:39:51:af:64:f5:fc:b9:d7:4d:1f:82:26:c6:bb:
                    ff:7e:c5:cf:cb:6f:6b:0d:9d:de:d8:77:15:06:15:
                    ca:75:97:ce:5c:8c:e0:25:2c:53:3a:c5:5f:27:79:
                    31:e3:00:97:00:af:c3:f1:30:37:4b:e1:f5:6a:fd:
                    59:98:ee:32:52:bd:b3:cc:7e:02:c9:7e:c5:52:7c:
                    b7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C5:27:DB:1E:FF:64:C4:4D:18:D5:36:A3:F3:59:4A:D8:CD:9E:B8
            X509v3 Authority Key Identifier:
                keyid:96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:02:77:8e:11:10:c7:f5:5e:b4:e5:7f:d2:00:79:64:93:2c:
         04:c6:a5:74:2d:d7:17:59:d1:1f:bc:6e:38:0c:dd:6a:b1:91:
         b0:ee:94:7c:cc:3f:b4:a1:87:a3:1e:d8:ad:f3:e2:30:25:b2:
         a7:11:35:2b:18:80:07:fc:d3:83:a9:e4:4c:19:b6:98:1c:d6:
         da:f1:a5:d0:3e:ee:86:6f:9a:b9:06:70:22:49:d5:1d:91:c6:
         af:e2:2a:42:7b:3e:99:da:a7:d6:fd:2d:36:2c:75:1b:4e:e5:
         57:af:22:3b:7f:80:78:22:01:e1:f9:12:29:18:5a:14:95:f1:
         aa:de:7a:e7:bb:20:b5:a5:58:be:ab:fb:64:b2:c6:84:47:07:
         a7:f5:d8:01:b4:f4:7a:d0:6c:73:55:d0:7e:e0:33:07:43:da:
         2a:5b:30:31:f2:a3:f7:94:fb:41:c7:47:2e:a5:27:99:6c:82:
         e9:25:84:84:d7:6a:5f:bb:ca:44:fa:8b:88:36:e9:c5:bb:07:
         b7:ed:dc:52:1b:13:d1:70:76:21:8c:33:a4:e4:19:7e:30:64:
         8a:a6:07:4c:d6:b2:78:a2:40:c8:e6:44:ef:71:d0:08:9e:bc:
         93:fe:43:b5:d6:92:76:24:30:e2:25:61:14:3c:27:d3:d4:39:
         5e:8f:c5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:05:57 2025 by rpki-client