Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
File:                     LWNPtoGAIUTwZMGxnxH2qudZbc8.mft (raw, json)
Hash identifier:          hL8jCyU/uIH6Br3lfuGF2OAW4lw84eLEJhKGLCu/sIE=
Subject key identifier:   13:24:C0:6B:A6:5E:CA:97:36:EA:BC:BD:6C:34:C7:EE:34:95:59:E4
Authority key identifier: 2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF
Certificate issuer:       /CN=2d634fb681802144f064c1b19f11f6aae7596dcf
Certificate serial:       01967679EB3B1FB060FB3EE6A48D4454B35F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
Manifest number:          0805
Signing time:             Sun 27 Apr 2025 09:00:23 +0000
Manifest this update:     Sun 27 Apr 2025 09:00:23 +0000
Manifest next update:     Mon 28 Apr 2025 09:00:23 +0000
Files and hashes:         1: LWNPtoGAIUTwZMGxnxH2qudZbc8.crl (hash: /AoMm7aFrDfCbw8A/xSzGd3wNP0RZ9XMbmZfifgPyOg=)
                          2: VLvU695jlmxr_Aa_-diXqvNVQGY.roa (hash: /bKiG14xP3FUaKqcC1XqqIaBQA/QOWOmJHyp9J37dmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:79:eb:3b:1f:b0:60:fb:3e:e6:a4:8d:44:54:b3:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d634fb681802144f064c1b19f11f6aae7596dcf
        Validity
            Not Before: Apr 27 09:00:23 2025 GMT
            Not After : Apr 28 09:00:23 2025 GMT
        Subject: CN=1324c06ba65eca9736eabcbd6c34c7ee349559e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:69:01:6e:01:1a:15:65:35:d6:1e:2d:aa:d0:
                    f9:0d:82:5f:7d:c9:0c:33:c3:65:1d:a7:0f:11:58:
                    11:67:a8:60:7c:55:48:46:e5:47:b6:e1:50:f0:b1:
                    f0:18:97:c8:b1:da:44:6e:0a:40:d8:5a:02:7f:15:
                    d6:ce:cb:67:32:90:39:1a:8e:e5:0c:96:f4:48:e2:
                    43:2a:29:14:05:69:1c:ef:2e:41:aa:e6:a4:84:96:
                    cf:a5:73:9e:3a:ed:b7:28:3f:27:3f:d5:dc:98:2b:
                    e7:14:a6:ff:31:c4:d4:f1:ea:c6:c6:68:6a:37:e0:
                    9c:ad:f9:c5:e6:db:f4:cc:e8:74:84:37:45:07:c4:
                    8e:19:fd:d8:08:a1:94:c5:cb:66:f2:46:c8:b9:1e:
                    8a:13:16:d6:98:af:66:57:fc:0a:ce:a4:5b:b6:af:
                    a1:7f:eb:3b:c2:8b:5f:e4:24:63:24:da:4a:92:22:
                    cc:17:f8:05:38:52:b6:82:eb:fc:09:32:fd:c2:6b:
                    50:65:4e:29:31:1f:b4:c4:0f:95:48:74:26:62:cb:
                    27:da:75:12:7b:fa:d2:3e:c2:e3:5f:5b:d0:74:8a:
                    cc:a0:92:69:4c:27:7a:92:13:e0:61:d4:00:72:de:
                    89:02:fe:89:67:33:72:48:20:88:b9:4c:32:21:53:
                    a8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:24:C0:6B:A6:5E:CA:97:36:EA:BC:BD:6C:34:C7:EE:34:95:59:E4
            X509v3 Authority Key Identifier:
                keyid:2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:52:97:59:ff:5e:81:a9:88:91:cf:cb:0d:4f:e4:ef:58:4e:
         ff:be:e5:e2:9b:8d:25:38:25:6d:9e:52:8f:63:a3:33:73:88:
         84:65:51:10:80:42:ee:7c:43:12:53:b7:04:b7:cd:08:f9:93:
         bd:9f:ed:dc:94:e7:54:a3:b7:d6:4e:58:d1:84:7c:cf:5d:69:
         aa:71:b2:c9:58:8d:1c:a7:00:7d:ba:ea:ca:e1:dc:45:38:73:
         03:07:da:89:8c:12:5f:1f:aa:30:6a:28:14:47:c8:de:a0:47:
         74:68:cb:e9:09:69:7c:0c:bd:ed:19:75:30:c4:92:d8:81:a9:
         ee:a4:e2:72:b3:2e:ab:cf:66:75:b2:90:3e:86:c3:ff:8e:00:
         fc:8b:07:73:ee:4a:c3:2d:51:64:8a:42:92:c2:7d:08:36:03:
         b3:bf:17:6e:51:6c:16:44:58:c1:3c:64:bf:6a:0b:c6:15:ee:
         35:94:1c:69:c0:c2:41:1d:83:c6:1e:d1:34:0c:02:e3:50:a2:
         5b:c0:70:14:09:a3:c3:1f:c8:46:86:d0:60:41:50:d0:17:c9:
         be:c7:d2:ac:7b:a1:3b:c6:25:b8:fd:eb:11:6a:a7:56:9a:d4:
         aa:6c:20:1d:83:1e:49:a3:e4:e9:ca:ce:59:68:c5:37:11:5a:
         00:75:be:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:58:09 2025 by rpki-client