Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
File:                     _LteLg_Zgy1zse-Pnkhv_QCz14k.mft (raw, json)
Hash identifier:          inYVDn2hCS0JTPyoBm0+hp/xgnkXkDx8PFjXKFVJ3RE=
Subject key identifier:   55:E0:2B:03:31:DE:87:A7:53:DC:16:DD:89:CD:26:DC:79:83:8E:D5
Authority key identifier: FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
Certificate issuer:       /CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Certificate serial:       019678317CABAD6B9E9B1777061ED3C6BA00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
Manifest number:          1511
Signing time:             Sun 27 Apr 2025 17:00:31 +0000
Manifest this update:     Sun 27 Apr 2025 17:00:31 +0000
Manifest next update:     Mon 28 Apr 2025 17:00:31 +0000
Files and hashes:         1: IK8VN_iyq26ReyybdZRgLTbp_h4.roa (hash: dThLkrPmFPQLdA53lP5J5dXCbHy3K9TicE7H7Mr22pg=)
                          2: _LteLg_Zgy1zse-Pnkhv_QCz14k.crl (hash: wgdMKAi6FomZG23sKxLli/YbWUclfjGcTbmlpvMJIWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:31:7c:ab:ad:6b:9e:9b:17:77:06:1e:d3:c6:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
        Validity
            Not Before: Apr 27 17:00:31 2025 GMT
            Not After : Apr 28 17:00:31 2025 GMT
        Subject: CN=55e02b0331de87a753dc16dd89cd26dc79838ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8f:2e:ab:83:bf:a8:47:5a:31:8d:a5:23:4b:
                    64:70:73:13:5a:6a:d8:df:35:f9:74:79:c5:fd:95:
                    cd:1d:63:f3:59:bb:f9:e4:fc:95:59:7e:04:2f:ee:
                    7c:25:31:c4:4d:cb:fd:9e:1b:63:cb:ac:62:c6:4b:
                    6d:cc:86:11:8d:52:cc:be:2e:4a:00:af:88:db:96:
                    28:80:f9:17:5b:fb:a9:38:0d:5b:a6:07:73:a2:a3:
                    5e:b2:5b:ca:fc:d4:68:ed:ab:f5:df:22:d9:2b:df:
                    ad:9f:f4:7a:9c:c7:85:9b:5c:dc:2b:1a:bd:37:50:
                    0d:bf:10:75:ab:89:f9:ab:77:1b:73:8b:8c:7f:cc:
                    8a:6f:dc:8a:9e:01:81:20:2e:09:4a:c1:ba:c4:b9:
                    bb:13:6d:9c:13:65:d3:ac:6a:a2:68:59:3d:79:d5:
                    f2:88:09:aa:78:cf:ef:84:7a:e8:5f:29:43:ad:93:
                    d1:fb:89:d5:c8:f8:8c:43:86:c2:8c:bf:50:07:85:
                    01:bc:c9:60:70:b1:7e:f8:8c:9e:52:ec:5f:bb:ae:
                    78:bb:04:5a:ac:c8:74:7d:76:5a:16:6d:76:54:4a:
                    c4:c9:e5:7f:8f:37:e0:f8:60:20:da:18:46:d1:69:
                    d4:19:5f:2d:b5:7c:58:cf:ad:7b:94:d0:a6:65:a8:
                    47:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E0:2B:03:31:DE:87:A7:53:DC:16:DD:89:CD:26:DC:79:83:8E:D5
            X509v3 Authority Key Identifier:
                keyid:FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c8:12:e4:8f:f5:3a:7b:c0:ef:96:5d:30:ef:e0:44:2e:49:
         e6:f6:d0:b2:c0:be:c1:52:e2:07:95:f6:35:aa:41:7d:8c:f3:
         7c:f0:20:6e:53:fd:0a:10:73:d9:4e:01:60:1b:97:ad:b1:1b:
         9f:8a:6f:ad:01:b5:b5:44:6c:4b:df:cb:ac:7e:58:2a:3c:6d:
         88:c3:92:ad:fb:82:e0:7a:b0:3e:d1:65:52:83:39:5a:5f:ab:
         45:48:ec:cf:22:1f:c2:73:5c:02:2a:4f:a0:b0:66:c5:80:3a:
         3d:77:3c:f5:a9:ff:0c:60:a3:70:73:4b:b4:58:99:bd:76:21:
         8f:3a:97:09:5f:39:99:1e:a8:25:15:29:a2:c5:60:cc:ba:81:
         95:86:db:e8:03:08:ee:65:3b:43:76:10:f9:14:c4:0a:54:5c:
         e4:dd:d0:f5:61:cd:f8:e6:38:ce:7c:33:f0:c7:84:08:ce:8b:
         72:30:28:06:f9:fa:cd:85:e9:93:c6:c1:88:25:aa:ea:ae:2d:
         aa:c1:07:9b:da:07:89:e5:7d:a2:2d:fe:ac:38:15:ab:30:30:
         59:e1:d4:c9:a1:92:39:23:3f:4a:b9:8a:7a:ba:fd:e2:1b:64:
         90:9a:7d:06:77:3f:35:6d:b5:7e:f8:8b:64:2c:ff:c6:f6:8d:
         0b:e9:91:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:55:40 2025 by rpki-client