Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
File:                     FzLzNNirto74IlRtj2-OgVY8b9k.mft (raw, json)
Hash identifier:          zmHjkIZNuhOSeVyiGuQ0oIjIA5YC2ddHUuxS+jS8z2k=
Subject key identifier:   ED:4C:12:D8:F2:67:06:51:97:A5:62:99:40:EA:28:A9:85:86:A9:6C
Authority key identifier: 17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
Certificate issuer:       /CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Certificate serial:       01976D3DBA99D0F5C92C0EFFDFAA8E963B3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
Manifest number:          08B4
Signing time:             Sat 14 Jun 2025 07:00:51 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:51 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:51 +0000
Files and hashes:         1: FzLzNNirto74IlRtj2-OgVY8b9k.crl (hash: TMDJnxyqsQmJZMnihbhmwsAVIt4eyweBbkUaMDQ4zdw=)
                          2: bi5ZDVAxCgXHP4ptHVBQTkUpE6s.roa (hash: bndk3fWWVAXFwXPZNDDoiBYejq5Lux0P2PBtRDEnol8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:ba:99:d0:f5:c9:2c:0e:ff:df:aa:8e:96:3b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
        Validity
            Not Before: Jun 14 07:00:51 2025 GMT
            Not After : Jun 15 07:00:51 2025 GMT
        Subject: CN=ed4c12d8f267065197a5629940ea28a98586a96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:87:bc:61:7a:0f:5b:f6:b1:e3:e3:aa:8d:7d:
                    3b:da:da:37:0a:fb:5a:0e:5f:a9:78:49:17:21:08:
                    3e:25:1f:1b:1b:ff:45:2c:00:5a:58:f6:c1:ed:b4:
                    88:d9:9d:a6:38:53:e3:94:8e:7f:34:5c:58:3f:3d:
                    b6:f4:e4:6e:ec:83:f2:b4:54:0d:a9:af:35:7b:5a:
                    5d:31:4b:a8:92:fc:b1:c9:e2:87:7f:c9:58:42:f5:
                    b5:5e:9c:6e:04:7d:da:f8:93:56:2b:56:c3:3d:14:
                    13:e7:56:7a:ed:d8:70:28:66:19:49:62:4f:a7:45:
                    8d:9d:8b:51:fe:38:08:be:ac:80:3e:f4:b3:d7:96:
                    f3:60:42:13:35:a7:81:f2:a6:c7:79:0f:fe:5c:6c:
                    8b:8c:fc:c7:0e:a7:f1:f9:d1:43:d2:43:73:af:b9:
                    be:38:23:27:14:46:f5:e8:ae:c6:8c:e3:6b:42:23:
                    ca:b7:1e:d8:2c:bc:de:eb:ee:2d:6f:00:b6:6c:92:
                    15:e1:2c:4f:3f:d1:0d:12:ab:c4:d1:db:63:e0:78:
                    47:7c:0d:03:8a:75:ca:4d:c0:24:44:22:df:c7:c4:
                    f9:b3:28:09:77:4c:c9:73:5f:8f:6c:66:11:80:c0:
                    bf:3a:68:84:84:9f:bd:5c:e4:34:fc:2d:28:c7:1d:
                    da:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4C:12:D8:F2:67:06:51:97:A5:62:99:40:EA:28:A9:85:86:A9:6C
            X509v3 Authority Key Identifier:
                keyid:17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:dc:63:90:46:b7:24:05:b5:9d:ce:c7:94:e9:1d:e1:fd:0d:
         2f:56:b3:c8:0c:68:9e:e8:ad:49:48:3b:f8:8d:91:10:7a:e8:
         dc:97:41:41:dc:b3:c6:49:f0:6f:f9:00:62:fe:40:00:70:d5:
         98:a2:c3:23:2f:a8:6a:0a:3f:f5:8b:f3:19:76:31:64:8d:6b:
         37:70:ae:20:60:b7:e7:cf:d8:fd:3e:23:a7:09:07:eb:a7:0d:
         9e:29:09:c5:5e:f8:60:3e:94:13:c7:aa:c0:b6:55:dd:9b:6f:
         0a:13:4c:79:78:bd:b0:cd:1f:b9:e2:6c:c4:32:da:1a:64:0e:
         1c:b4:df:26:93:5e:3d:99:01:df:4e:ee:f0:c5:ec:2d:3f:32:
         f1:3f:e2:67:08:cb:da:d7:6d:9d:1b:b4:86:dd:82:73:76:4d:
         89:d0:b9:60:03:d5:ea:0e:e2:0a:87:2f:12:7c:59:8a:83:62:
         d3:3b:4f:73:b2:6c:4b:c4:68:eb:23:5b:7e:8f:94:23:57:56:
         e0:6c:ac:1d:83:41:ce:c7:18:de:07:bd:c5:30:ad:b2:14:57:
         bc:a6:52:29:1f:d1:89:d8:9a:65:41:31:09:ee:fc:cd:1c:d0:
         f5:c3:5d:4f:d9:70:a3:ad:1b:93:71:8b:a2:15:5e:30:e4:47:
         31:c8:db:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:53:56 2025 by rpki-client