Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
File:                     _LwbYj6YBVnjKlodtYD4pzRBdwU.mft (raw, json)
Hash identifier:          mtBojn2oEFy5lPLZ4PaO6nF/7uL730EVeE20rFX74aA=
Subject key identifier:   08:EE:69:32:BE:49:56:EC:A5:7D:90:76:96:BD:EC:88:B3:2B:50:FF
Authority key identifier: FC:BC:1B:62:3E:98:05:59:E3:2A:5A:1D:B5:80:F8:A7:34:41:77:05
Certificate issuer:       /CN=fcbc1b623e980559e32a5a1db580f8a734417705
Certificate serial:       01989D14B71772870673A934C91FD78DCBEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
Manifest number:          05D7
Signing time:             Tue 12 Aug 2025 07:00:36 +0000
Manifest this update:     Tue 12 Aug 2025 07:00:36 +0000
Manifest next update:     Wed 13 Aug 2025 07:00:36 +0000
Files and hashes:         1: HY2qqakYUKmGxzXSwPgmmaqbnWQ.roa (hash: ijxTXIq4WZ5WszUemCRN8Fg/4BF4CCUnIK9TDQDj4gU=)
                          2: _LwbYj6YBVnjKlodtYD4pzRBdwU.crl (hash: aTEMKH3WWsM6Id43jSElDMLbr7NfMLzC+/20q0p6wu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 07:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9d:14:b7:17:72:87:06:73:a9:34:c9:1f:d7:8d:cb:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcbc1b623e980559e32a5a1db580f8a734417705
        Validity
            Not Before: Aug 12 07:00:36 2025 GMT
            Not After : Aug 13 07:00:36 2025 GMT
        Subject: CN=08ee6932be4956eca57d907696bdec88b32b50ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:44:96:9a:79:50:f3:63:3a:6b:78:8e:bd:b9:
                    40:09:a4:da:90:08:34:52:97:3c:c5:d6:aa:87:20:
                    77:69:d7:33:22:f1:b9:7a:66:4c:a7:95:dc:c9:8f:
                    d0:3e:d2:07:37:16:3d:82:02:ff:2a:88:8a:1d:69:
                    38:da:26:48:9e:5b:ca:47:8b:b9:19:56:77:5b:f2:
                    73:94:e3:f3:5b:be:6c:8c:cb:09:c4:2e:35:9c:c5:
                    c1:54:fc:d3:46:e1:4d:10:26:5d:26:15:58:f7:12:
                    97:05:a5:1a:15:95:4f:ce:02:6c:5f:86:cf:b3:48:
                    1a:00:c3:87:c7:5a:d7:38:bf:fe:e9:30:4b:5c:ba:
                    f2:30:9e:96:67:1f:c6:23:b9:71:7c:35:28:07:21:
                    89:c9:b8:3d:89:47:6a:3a:9a:c5:e1:76:41:1d:e5:
                    22:69:23:b0:2e:fd:52:5d:be:da:9b:a4:7f:1d:e7:
                    7a:44:f1:18:ef:37:fc:26:ac:f2:24:e2:ef:33:0c:
                    bb:9b:5c:c1:10:8f:65:53:01:9c:f0:ac:77:40:34:
                    7f:c8:e5:82:1f:93:a3:71:80:23:41:43:ff:37:78:
                    f4:c7:24:d5:c7:33:f9:44:1a:5d:da:ea:4c:94:26:
                    2a:58:7a:ae:3d:fe:a9:67:7e:03:80:af:7d:e0:04:
                    bd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EE:69:32:BE:49:56:EC:A5:7D:90:76:96:BD:EC:88:B3:2B:50:FF
            X509v3 Authority Key Identifier:
                keyid:FC:BC:1B:62:3E:98:05:59:E3:2A:5A:1D:B5:80:F8:A7:34:41:77:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:4f:2f:37:7a:49:1c:4f:79:5a:6c:51:6f:07:a9:76:3a:e6:
         bd:3e:23:3d:f5:3a:ec:92:45:cd:d5:22:65:f0:7a:82:99:a4:
         1e:04:0e:02:4d:4c:1b:7d:99:ed:49:0d:2f:b4:e9:f2:50:12:
         1f:ce:d0:36:8c:3b:ac:46:fb:9a:64:00:94:8c:7f:91:5e:c5:
         b8:81:64:23:ec:4f:1f:c4:77:7f:a8:69:10:5c:45:e2:63:63:
         38:6f:08:fb:0c:cd:8d:60:4d:ac:fe:8a:66:0e:a2:06:5e:5a:
         11:36:47:6c:0a:69:8b:1c:2b:d3:ac:c4:89:3d:88:ba:1a:83:
         a1:6a:02:4d:da:5d:03:be:c3:d8:4a:78:9c:b1:5f:7a:97:24:
         62:b0:52:24:fa:de:24:3e:95:75:a1:98:56:3d:05:af:fd:c1:
         2b:02:57:1f:8e:15:12:dd:9f:e8:d4:57:2f:86:4c:fe:b5:7b:
         a7:7e:3d:60:f2:c7:75:a8:1a:56:20:78:50:d2:19:8d:b5:1f:
         d3:ae:24:89:b0:54:2a:18:42:52:dd:48:e9:b5:44:2c:8b:7f:
         06:de:d3:2c:92:73:e1:fa:06:03:a3:08:bd:8d:5e:ba:01:23:
         a2:c6:05:02:3d:3c:1e:81:b8:bc:b4:ca:56:b7:4c:d1:5b:f7:
         df:a9:6d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:44:31 2025 by rpki-client