Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
File:                     lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft (raw, json)
Hash identifier:          Fiov+qSyp8MJWGclu53bQ5Lg7vp0d3GYHPxjFUd0OzQ=
Subject key identifier:   62:A6:6F:77:57:F5:D2:9B:5A:E6:61:DB:A4:57:BF:29:2B:82:A9:FF
Authority key identifier: 94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
Certificate issuer:       /CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Certificate serial:       01968D6FE138C80D83CEE328874FF95BCEC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
Manifest number:          04D4
Signing time:             Thu 01 May 2025 20:00:41 +0000
Manifest this update:     Thu 01 May 2025 20:00:41 +0000
Manifest next update:     Fri 02 May 2025 20:00:41 +0000
Files and hashes:         1: AlvpwmlHKsdZ888v6OW9e2qX7Cs.roa (hash: 0uWxwNIZbut6gct98ZOv80/LRPh9PRZxkpCS9vIEkzY=)
                          2: lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl (hash: AgnEW+dJfrodZ0ji3rmqBGltlG/2otMhYn3JVXYq0X4=)
                          3: mhy_PjfAH7Am8DYx1tO3WTSt-G0.roa (hash: I3P915hVSsXgQ5UO/istQ1xrxwtkn+jwbAOJufOB6ts=)
                          4: oGXIgL4XeGgFsoOzE_plr2AX24g.roa (hash: h9S8MEgqkl0Mx1T5bmYSQIXTjB58xAGkLJVMidxjJTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8d:6f:e1:38:c8:0d:83:ce:e3:28:87:4f:f9:5b:ce:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
        Validity
            Not Before: May  1 20:00:41 2025 GMT
            Not After : May  2 20:00:41 2025 GMT
        Subject: CN=62a66f7757f5d29b5ae661dba457bf292b82a9ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:23:48:37:23:44:4d:d2:bf:89:ab:f9:7f:7b:
                    36:a1:b4:69:68:90:ad:79:d9:b2:de:34:d9:60:95:
                    86:ed:c7:e7:7f:72:72:57:3a:73:c4:2a:be:b3:ef:
                    45:fe:06:b5:e5:ba:b9:a8:8f:1f:5c:fe:11:16:fa:
                    a4:e9:3e:f6:62:1d:9f:e0:d0:61:97:9c:62:08:72:
                    ff:f0:44:33:de:f0:7d:8d:9e:ad:07:ce:76:14:97:
                    7a:b6:3c:da:2c:83:f4:da:14:43:8b:f3:c6:f5:8f:
                    78:69:02:85:6e:1d:91:9d:ae:4f:70:7b:27:4d:8e:
                    b2:8b:9a:cd:ed:01:29:bf:e5:a2:69:38:01:5e:ec:
                    43:50:cf:90:f6:bd:89:a1:b6:c9:61:6d:70:a5:ef:
                    d6:de:55:9b:f2:22:02:07:97:7d:34:38:6f:a3:7e:
                    f5:a8:67:b2:a0:4f:50:6f:bc:ea:e6:05:91:b0:68:
                    c6:86:45:99:de:2b:a3:d0:f4:b6:24:da:5c:75:eb:
                    5e:47:e8:9a:29:8f:1a:71:f8:1d:ba:bd:8a:4d:03:
                    72:2b:5a:4b:58:7d:15:3a:68:9b:e5:a1:a4:54:08:
                    9c:dd:29:64:d2:5b:b1:f1:30:bc:3a:bc:44:51:7e:
                    82:50:d6:54:de:0e:73:09:a1:bd:a7:60:47:91:83:
                    6a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A6:6F:77:57:F5:D2:9B:5A:E6:61:DB:A4:57:BF:29:2B:82:A9:FF
            X509v3 Authority Key Identifier:
                keyid:94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:df:57:61:0e:90:4c:a5:b1:36:f7:2d:0b:85:98:46:3e:35:
         ec:51:da:c9:4f:ed:bc:bd:06:95:c8:2d:2d:41:e2:1f:9d:38:
         f7:b8:6e:ea:bf:2e:e3:72:9f:ba:1b:89:02:74:6b:d2:fa:45:
         b1:8e:6b:53:c4:c3:8b:52:42:0d:a9:b1:6c:83:4c:f6:d0:7f:
         1d:bc:01:8d:b8:00:99:73:b7:b9:f0:d1:ab:52:b6:66:86:d7:
         9b:57:19:d1:03:36:51:b8:83:c3:68:9a:51:dd:b1:c7:f0:75:
         b0:9f:a0:cc:62:9e:e8:44:a5:f8:00:a3:c4:60:96:ff:67:c3:
         cb:7d:f4:87:6b:04:a5:a6:76:a0:7d:11:25:63:36:95:a5:5e:
         85:9e:6a:60:51:36:cd:9b:da:68:e0:9c:e3:f6:cf:d6:a6:c8:
         e2:1c:9d:a0:cc:93:91:66:8b:21:c4:ff:3f:dd:40:0b:d0:75:
         30:69:95:18:f0:57:b7:3f:a5:5f:88:2f:8e:cc:c8:96:45:91:
         e3:0b:3e:8f:4c:a9:2f:a9:af:20:6c:8c:17:b5:8e:54:c9:0d:
         a6:4a:88:3a:dd:03:d7:93:9c:c8:0f:08:e1:77:d0:d3:dc:69:
         e7:14:63:d7:d3:9f:06:c7:4b:63:d5:2a:3a:bb:26:ab:da:e1:
         17:86:5a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:39:29 2025 by rpki-client