Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
File:                     LPtHb88xPP8pXeDRcJFWrwJT188.mft (raw, json)
Hash identifier:          9yZ2B9uupN6UB4R0o7KlaTttp4gnNfjLQnpP4TkyvSQ=
Subject key identifier:   66:59:F1:16:71:56:93:63:18:23:2F:83:DA:F5:1E:C5:BB:63:89:AF
Authority key identifier: 2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
Certificate issuer:       /CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Certificate serial:       0196741EA9036E6A79A391A5414EF8BBD18C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
Manifest number:          150E
Signing time:             Sat 26 Apr 2025 22:01:28 +0000
Manifest this update:     Sat 26 Apr 2025 22:01:28 +0000
Manifest next update:     Sun 27 Apr 2025 22:01:28 +0000
Files and hashes:         1: LPtHb88xPP8pXeDRcJFWrwJT188.crl (hash: n3pzKumCzfQ3zVT524qwbhJ/6pWQhYOuG3MsYHfbNcg=)
                          2: QG26uYioHVmhp2a5DlzMfuEJFvQ.roa (hash: QYW9l61NzSQ8p9p0VXIlshNNkTFPqxE5hMNyzeqT5Xw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:1e:a9:03:6e:6a:79:a3:91:a5:41:4e:f8:bb:d1:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cfb476fcf313cff295de0d1709156af0253d7cf
        Validity
            Not Before: Apr 26 22:01:28 2025 GMT
            Not After : Apr 27 22:01:28 2025 GMT
        Subject: CN=6659f1167156936318232f83daf51ec5bb6389af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:57:ee:2c:bf:54:2a:c9:f5:36:68:43:da:a5:
                    a8:71:0a:6d:df:58:b4:3b:d6:13:27:32:af:52:90:
                    3b:c2:2a:82:c0:70:91:2e:2e:b7:13:48:f0:c4:22:
                    27:c2:38:be:d4:a4:b6:ad:38:30:1c:4f:8a:19:38:
                    29:c4:af:e5:be:58:4e:14:84:23:7d:7f:a4:30:80:
                    5e:e5:65:3c:f0:fc:47:16:38:7c:0a:62:36:c9:e3:
                    69:b6:b4:ba:fe:f7:ba:b3:b8:c5:bc:09:4c:be:00:
                    39:d6:cf:82:65:d9:b6:7a:fc:99:cd:cc:5e:8b:7d:
                    ba:2c:b8:5f:88:f6:00:8e:42:19:37:27:b2:47:53:
                    f8:cc:ac:b4:6f:24:81:4a:8c:55:d3:75:52:ca:67:
                    81:70:0d:de:c8:a9:d8:df:b9:c4:9c:df:a4:42:ca:
                    c4:e4:8b:dd:36:9e:1a:49:2c:7f:02:7c:a3:ed:11:
                    35:a3:c5:e0:40:50:d5:02:c9:c9:f2:f8:f5:e3:49:
                    db:7a:fe:a1:af:9a:82:14:d1:f0:45:02:d1:59:e2:
                    e3:b8:cd:42:43:7f:7a:02:9f:62:93:ac:88:75:7d:
                    03:7c:97:22:40:98:14:c9:02:da:8c:ba:d7:80:4b:
                    18:81:16:32:06:1e:9a:c5:9b:80:e1:c9:25:4c:46:
                    23:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:59:F1:16:71:56:93:63:18:23:2F:83:DA:F5:1E:C5:BB:63:89:AF
            X509v3 Authority Key Identifier:
                keyid:2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a2:75:5b:11:00:9a:ba:e7:0c:b1:fd:16:e0:f6:81:73:4e:
         f9:5a:a9:c0:f7:a2:bf:82:76:fd:66:5b:d9:8f:61:c8:8b:2c:
         8c:77:e9:d2:b4:aa:52:41:43:65:9a:07:35:fb:1a:db:fc:cf:
         08:c9:2b:e9:a8:2f:50:5a:ad:4a:49:7b:ad:50:ba:4c:c4:74:
         e7:ba:ed:77:09:3b:05:5d:6e:c6:a4:02:e0:13:33:de:87:e8:
         a8:2f:4f:e4:20:33:ee:70:94:f2:82:8c:4f:e8:da:55:96:1a:
         13:d4:e0:37:0f:6d:eb:0e:94:b7:6f:ed:64:2d:54:72:41:01:
         2e:fd:c7:71:ed:27:40:36:18:0e:d5:40:08:dc:0d:5f:13:c8:
         55:b3:29:05:97:de:38:2f:1e:cc:83:96:e8:c4:f5:85:11:fd:
         4d:fd:92:c2:ee:2d:9f:45:c4:59:ef:99:23:8a:e9:92:44:7a:
         c0:5e:b6:b0:e2:d8:b2:43:38:53:25:ab:56:15:6c:c5:e0:0d:
         1c:40:33:e2:e9:3d:b9:93:ba:63:66:c9:05:cf:58:66:f9:4b:
         05:94:4d:65:f3:c0:7a:1b:2c:05:94:52:2a:72:b1:3a:01:9a:
         5d:db:9a:5e:23:f8:1f:a6:80:6d:ee:5a:ee:31:62:ea:9c:6c:
         18:dc:cb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:50 2025 by rpki-client