Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
File:                     LDsK5bf3gRIscJomUK35cpGH4eE.mft (raw, json)
Hash identifier:          ZYtfDgfl1xCCnlNVXYg+Ihh7MWatvJp4IBGeClYCYR4=
Subject key identifier:   15:42:1C:4A:BB:11:D8:80:46:AF:B1:A5:7D:78:EC:2E:58:99:87:B0
Authority key identifier: 2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1
Certificate issuer:       /CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
Certificate serial:       019672D45762FF10683DB7F11B0B9FE650CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
Manifest number:          1510
Signing time:             Sat 26 Apr 2025 16:00:40 +0000
Manifest this update:     Sat 26 Apr 2025 16:00:40 +0000
Manifest next update:     Sun 27 Apr 2025 16:00:40 +0000
Files and hashes:         1: G476nUAKTiPJHOVq8nA5e_q--jo.roa (hash: RBYLVll5e4aRdiDwFsCa0na9QgzsuLbF9Bor28EzHvs=)
                          2: LDsK5bf3gRIscJomUK35cpGH4eE.crl (hash: A8aM40RerZM+rR/sZdZLq+wGGJ36OTQVBcgi97EbrQ8=)
                          3: ZOc4yScbQ2pOrLNTSn7WIc7mrdg.roa (hash: a4V9Qq7aPmpRS+o4fuJXmCiOvZod1MlSuqcU6KwqGoY=)
                          4: e29yd0Z-TUCyBNtSl-PtOkd_vBo.roa (hash: nzWZvT8LarPWL1y41WRrbr0ybd5qlEde4pStDNf4QWM=)
                          5: muXl3inz6jffhdO2S6S_pqbjk0E.roa (hash: 0wF5o2O8eQOPVzc8lfen0DZTo8qEoofN4oy8P0PuwO0=)
                          6: qnW-kG_ubcYESkIhZA8A-RWn9Yo.roa (hash: OFkURHNbZaUbpCTRn6/6z5pejCg/w/M+JX7vs64fqfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:d4:57:62:ff:10:68:3d:b7:f1:1b:0b:9f:e6:50:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
        Validity
            Not Before: Apr 26 16:00:40 2025 GMT
            Not After : Apr 27 16:00:40 2025 GMT
        Subject: CN=15421c4abb11d88046afb1a57d78ec2e589987b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8a:1b:ab:81:d1:b5:fa:43:70:d6:b7:9a:81:
                    ba:06:81:6e:ac:41:24:09:76:41:c3:bb:d5:6e:d1:
                    68:20:be:57:ae:42:00:f1:03:49:9e:1f:11:3a:56:
                    72:f2:d5:f4:98:42:9b:6a:76:41:3a:9e:b6:a0:05:
                    45:9d:56:11:7e:aa:32:02:91:ff:4b:2b:51:d1:ff:
                    74:de:3d:21:c6:cd:77:2c:22:bc:2f:30:e0:68:b3:
                    5c:81:fd:54:c0:8a:8c:60:59:ce:6b:5c:b5:d6:ec:
                    da:5f:7b:af:f2:21:b5:5d:b2:87:74:1d:2c:3f:73:
                    bc:f0:15:48:d2:c0:9e:10:20:ec:8a:29:ca:3a:ae:
                    1a:12:92:cb:5b:06:8c:cc:23:60:01:58:18:8e:86:
                    3d:5e:53:78:50:45:46:0d:63:12:74:f7:be:11:05:
                    34:ea:c9:c9:e8:3d:48:0f:ce:28:dd:68:98:2d:84:
                    27:bc:d5:2f:7e:3e:bf:b6:0c:74:dc:73:fa:e2:53:
                    da:7e:d6:52:0c:49:b2:bf:1c:60:77:00:6f:48:5d:
                    db:e0:8d:ee:d8:bf:31:33:44:94:58:ee:67:7b:2b:
                    0f:06:0f:9b:11:72:d4:06:26:a8:8d:9e:16:96:a9:
                    3d:fa:19:b3:25:0e:c3:f3:29:73:62:64:9d:11:9a:
                    84:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:42:1C:4A:BB:11:D8:80:46:AF:B1:A5:7D:78:EC:2E:58:99:87:B0
            X509v3 Authority Key Identifier:
                keyid:2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:71:ce:da:44:79:10:47:ee:87:c3:30:d5:d5:e0:9e:45:9e:
         8a:4e:5b:79:cc:dc:14:a5:e0:a6:c7:28:8d:21:07:73:91:7c:
         2f:85:35:71:f7:5c:74:86:b9:0d:c5:c5:99:17:57:11:b0:57:
         42:75:ce:c1:84:dc:79:54:6c:e9:53:a4:e3:16:2f:6f:cd:38:
         db:4f:89:d3:d6:40:36:62:eb:ba:d6:2b:4c:41:fa:e5:fd:2d:
         bf:fd:8d:f0:55:a3:62:d1:f8:7f:c8:3e:66:4b:73:7b:08:ce:
         f5:f8:fa:06:6d:d6:d9:d2:51:15:8d:fd:70:34:07:11:f4:f8:
         82:83:84:d9:f4:35:46:8d:d9:ed:a5:f3:b7:92:81:7d:4a:4f:
         50:a6:f7:9e:ce:43:96:f1:c2:59:32:ce:dc:a2:0f:46:54:93:
         7d:df:06:0b:bc:d5:3c:32:56:75:45:42:fb:57:45:41:df:ed:
         64:2d:b5:7a:db:f2:ae:ad:9d:5d:c0:61:5b:d4:7c:95:31:e8:
         9b:e7:69:d2:ae:f6:66:bb:eb:33:f6:ca:0b:9e:b0:40:fa:63:
         82:b8:e4:f4:c5:7c:c5:4b:88:0f:cf:78:db:8f:50:7c:37:7c:
         57:83:de:86:b8:d3:1f:db:f8:2f:51:2e:d7:7f:b2:3c:b9:80:
         9b:c4:52:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:04:31 2025 by rpki-client