Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
File:                     lBZrcEhD09l1QJXIOpG0k4KCAKI.mft (raw, json)
Hash identifier:          xbhjaRS4x111CSblfMj9sc8dLg9AdTTZKLxabwNMKGw=
Subject key identifier:   FC:5E:19:F9:4C:A1:73:0E:B9:63:11:6D:A0:D5:C7:9A:2B:5E:97:67
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Certificate issuer:       /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial:       019672D3E9C2AA5A4D13AEB0EE9F9065010F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
Manifest number:          15BA
Signing time:             Sat 26 Apr 2025 16:00:12 +0000
Manifest this update:     Sat 26 Apr 2025 16:00:12 +0000
Manifest next update:     Sun 27 Apr 2025 16:00:12 +0000
Files and hashes:         1: 7NOWSwr6Ix9WqMtFCauUoXq2B4E.roa (hash: 71eyC9fYC2VExHc19u8sJwP29ASsjLuAVH+CBPHOF2M=)
                          2: DrZpY6t_Z34aPnka8mlfxbcLul4.roa (hash: ArUDkHPBl4MihbzSvZGcRbPkxSIlgTU5MGX9tL6hwUo=)
                          3: Z7uuC5XE4-fMCsGBtqQw7mSeH9U.roa (hash: W7maKhHagBpEQgNK15fnWc66E1ZuDuwRIn7gOriSZAo=)
                          4: h9d0ktI5MHIktnWrhY2zneTKIew.roa (hash: 9qkOa4Wd+V/Z+xQC2CIhkz1VoRa5qCsYXEwwfKMwhGQ=)
                          5: lBZrcEhD09l1QJXIOpG0k4KCAKI.crl (hash: 2HoUEALt8OnQ1h4IuCtnsF5liMimfFW1xrQjxYxplns=)
                          6: zIA6BDrr_xrDLDlzAGpw_9P6klo.roa (hash: pfzDsna4zGoCQX7v3ji49EBWdSr9XYlq27X+4n1BNgY=)
                          7: zRIEfiHVhkzqHiYdm3McIGPDP2Q.roa (hash: 32bioXyHcsiw84uow4i7c6KhRJSD3457u6OM44k/3vM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:d3:e9:c2:aa:5a:4d:13:ae:b0:ee:9f:90:65:01:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
        Validity
            Not Before: Apr 26 16:00:12 2025 GMT
            Not After : Apr 27 16:00:12 2025 GMT
        Subject: CN=fc5e19f94ca1730eb963116da0d5c79a2b5e9767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8f:e8:ef:38:af:b0:f3:aa:0c:6f:1d:96:31:
                    48:fe:ee:b7:53:89:f2:44:16:d4:d2:b7:e7:28:f7:
                    e2:b8:e3:8d:fa:60:af:11:37:41:13:03:55:d7:cc:
                    9e:86:17:44:9f:6d:40:a4:6e:a2:8b:e8:58:35:48:
                    27:b0:95:80:0a:1c:44:ab:02:4d:69:74:52:22:c4:
                    8a:c4:3a:f3:30:9b:7b:5a:4d:d3:64:c3:eb:25:d5:
                    0e:e1:b9:b2:02:9a:de:c9:8b:e8:11:45:a4:f8:00:
                    23:95:ab:5e:1d:be:e0:51:c1:8f:bc:37:e8:6d:f1:
                    32:9d:fe:96:c4:13:68:c8:1b:21:9e:cc:a1:2e:49:
                    10:dd:62:6a:17:f4:41:26:cf:7e:5f:1a:97:1e:22:
                    02:8f:e8:22:fc:09:e3:bc:b1:14:1f:09:b2:ce:e4:
                    f9:80:cd:13:38:90:19:ee:fa:1e:71:35:59:1b:8e:
                    81:21:bf:73:64:0f:a3:d1:a0:b9:7b:f5:f2:87:3a:
                    fe:05:d1:a3:5b:c2:f7:f8:bc:e1:aa:3e:2b:a1:33:
                    99:2e:d1:af:3e:64:99:8b:32:6f:e5:fa:aa:ed:70:
                    c1:10:3e:f5:ff:77:0c:b4:af:a4:c7:91:0e:36:e6:
                    cd:fd:a0:99:f6:0b:ff:69:b1:f9:be:19:1e:0c:00:
                    e0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5E:19:F9:4C:A1:73:0E:B9:63:11:6D:A0:D5:C7:9A:2B:5E:97:67
            X509v3 Authority Key Identifier:
                keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:c8:b8:7e:33:b1:db:30:45:2b:4d:f4:03:21:8f:e0:1b:03:
         24:fc:eb:ad:05:c9:09:6e:7a:d8:c8:9e:0c:25:e5:06:f4:e6:
         de:6d:63:28:a9:80:d1:2f:88:a2:bf:08:b0:f7:4d:54:6b:7f:
         83:e2:a9:a7:52:8e:f5:61:ba:46:6e:58:9f:94:46:97:28:10:
         8b:b3:10:bd:87:92:5d:07:a3:db:0a:0f:12:ee:8e:6f:83:26:
         b4:24:d6:e3:19:33:32:3c:ed:23:bf:8c:c9:1f:ef:49:86:bc:
         2d:6f:73:6b:ce:8c:1a:2b:cc:a4:fd:45:b2:2a:6d:26:67:09:
         7f:29:15:f7:1f:d4:15:72:1d:36:71:76:54:b9:5f:d0:8a:7c:
         0f:1f:79:13:cf:8e:da:a5:d1:8d:3f:ba:21:be:5c:99:8b:6e:
         5a:da:bf:71:0f:b9:c9:ba:41:7d:57:ae:dd:a0:d4:c3:46:ed:
         c2:c6:40:4b:6b:96:0a:9d:17:f0:57:10:9f:b2:13:a3:61:10:
         be:a6:a1:6b:a3:3e:a9:32:26:95:99:de:7f:a4:a2:34:4a:fb:
         fb:70:23:ae:18:c6:4f:69:06:fc:d9:a2:75:5a:f0:41:02:8f:
         08:71:27:82:50:fe:59:85:9d:a6:3b:11:24:de:3a:94:0c:34:
         79:f8:21:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:23:24 2025 by rpki-client