Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
File:                     lgYvXdsY-W14SSs1ONd0XMRxSiY.mft (raw, json)
Hash identifier:          uD//Cul2G6MNwn2rJy+BRzaGUYhQ6YYqRJ7i/kjYI9s=
Subject key identifier:   69:3D:B0:2F:E5:C5:43:96:FB:74:03:66:CB:46:BB:E0:3E:8D:C6:67
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Certificate issuer:       /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial:       01968736D82A375CBA8C5AC95EBA5F398007
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
Manifest number:          07FA
Signing time:             Wed 30 Apr 2025 15:00:40 +0000
Manifest this update:     Wed 30 Apr 2025 15:00:40 +0000
Manifest next update:     Thu 01 May 2025 15:00:40 +0000
Files and hashes:         1: lgYvXdsY-W14SSs1ONd0XMRxSiY.crl (hash: tNVQwnZ8c5PbjU2lK9JnbWD4ENbDQ+i1HG6/jmBntkI=)
                          2: tfoDF7zyFas9gs6WFrVbnqLVtKs.roa (hash: x+5zZ3Gyf9InZ2EuLZGBkdxKiWzA8pOKE0Jk5ZEXWWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 13:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:87:36:d8:2a:37:5c:ba:8c:5a:c9:5e:ba:5f:39:80:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
        Validity
            Not Before: Apr 30 15:00:40 2025 GMT
            Not After : May  1 15:00:40 2025 GMT
        Subject: CN=693db02fe5c54396fb740366cb46bbe03e8dc667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dc:aa:91:b5:bc:41:26:6d:c7:44:f1:4e:79:
                    6f:58:86:e2:8f:9a:38:6e:52:5e:6a:3c:89:84:21:
                    bb:47:c3:af:18:38:cb:ce:4e:e0:d7:80:30:d8:16:
                    17:52:5f:b6:35:11:ea:15:83:4b:99:ca:c1:6e:cf:
                    b7:f6:24:80:a4:0f:00:6a:e1:ae:10:51:4f:42:5d:
                    b0:62:73:44:7d:37:e2:87:19:50:88:3d:29:86:ab:
                    28:35:8f:8e:ca:04:c6:0c:6a:e1:ad:4a:f4:04:ba:
                    f6:d5:f5:1f:32:ab:3e:50:61:f6:33:d1:fb:c6:73:
                    af:f2:64:8a:6a:4b:85:e1:ca:4c:d5:39:7f:f0:48:
                    68:25:40:ac:7e:59:97:ff:7e:cd:f2:90:bb:10:cd:
                    c8:4a:69:0f:93:8c:44:96:98:12:a7:88:ce:ae:ac:
                    0e:38:3e:60:96:98:25:b2:24:e9:2c:88:0e:cb:bd:
                    69:2f:f2:bc:ad:12:e1:ea:7f:51:1b:f0:56:f2:43:
                    f3:12:76:0f:de:73:83:a6:c7:63:8e:a8:c3:bd:c0:
                    86:31:0b:9c:17:0a:14:27:14:b0:80:a7:1b:49:db:
                    d1:7e:2e:11:dd:57:15:93:66:fc:aa:38:e2:65:e4:
                    16:f6:55:38:74:4c:6f:34:c4:df:95:78:90:34:05:
                    64:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3D:B0:2F:E5:C5:43:96:FB:74:03:66:CB:46:BB:E0:3E:8D:C6:67
            X509v3 Authority Key Identifier:
                keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:8d:af:61:e1:61:59:09:27:a4:e7:2a:50:25:89:d3:01:90:
         d7:4d:d3:8d:c2:00:23:1f:bc:17:6a:8f:4a:8e:4d:22:f4:0c:
         f9:0a:33:94:c1:90:c9:b0:f2:52:3c:ae:a3:04:57:cd:4d:be:
         cc:05:54:55:8b:1f:e3:75:60:3d:8c:f1:79:22:e4:77:a6:82:
         ee:17:b3:47:cd:ec:b8:7a:18:4b:2a:2b:de:50:58:bc:3e:1d:
         22:25:b9:ec:6c:21:04:e9:00:55:e8:3a:a5:0f:77:49:83:a2:
         62:6f:22:e2:da:79:9e:79:72:2a:e0:5d:b2:e5:48:70:a5:ca:
         c4:35:53:25:ec:ca:79:c3:df:be:06:f3:3a:8e:11:20:c6:2d:
         f7:52:bd:08:9b:c8:e4:2c:41:e7:67:7b:f1:fa:83:e1:00:34:
         34:18:69:41:34:80:2d:6f:e2:7d:a5:36:38:de:37:69:aa:12:
         64:ba:71:d8:f1:2c:a2:c9:61:18:89:c6:c5:3c:29:75:e7:10:
         c3:73:a2:90:8f:dd:5d:a4:f1:93:24:1e:e6:fc:f9:6d:df:8d:
         1e:e6:59:07:fc:cf:23:de:82:4f:52:cf:ca:01:cc:49:ea:dd:
         c1:3d:ee:3f:70:65:4d:1f:f1:eb:ac:19:47:e1:af:e7:d9:97:
         63:7b:69:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:16:58 2025 by rpki-client