Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
File:                     LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft (raw, json)
Hash identifier:          4lvFNF93/9rtJhurG/zpLpB0vojQK0DVOPLiZ8sRNQM=
Subject key identifier:   5C:93:AE:01:88:DB:1C:BB:73:45:C7:E8:BA:4C:0B:7D:7C:F3:5A:2C
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Certificate issuer:       /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial:       019678D67103E824A58C12C366CBF2C89B9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
Manifest number:          1520
Signing time:             Sun 27 Apr 2025 20:00:41 +0000
Manifest this update:     Sun 27 Apr 2025 20:00:41 +0000
Manifest next update:     Mon 28 Apr 2025 20:00:41 +0000
Files and hashes:         1: 01X6uEQds9Y9s0Nj6vCgByaYk4o.roa (hash: zRPbzdJELLZCFUdSNf06UKLGLPusehNC5YazUYIIsTM=)
                          2: 0tRB9OCC9xas7e6MVH8FJn0Ja3c.roa (hash: cbQqhS8rCleS/cZGOp49BraWBlvDlSz9avYU2nr/DSU=)
                          3: 9tSoewyxusy3XiU4MPlfgCKviQM.roa (hash: 4mAbpqKotMEUi55o3nvNZU9MOu3aXF7KZ9T6UnO+Ftc=)
                          4: FSPf9GPeE9OlDZ4wjRNl7LN012Y.roa (hash: qnw8o1IATV+jUOf4O3NJflnEbA239Ao6/8MIoEaYYAw=)
                          5: Ik5x4sxVpJGKDVZlhpgzVJyFcdE.roa (hash: hUjlBlwFujOIxjIsUbH4qKxEVtqgo5ThvH9AsXM845U=)
                          6: LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl (hash: gX8dOeI9EFgR8xl6vE0HCLzInz7eEaj110uDgN+MH58=)
                          7: ewUitY15BVRTKh0SmutPUcBQMXQ.roa (hash: B5ro7AbVa+pZeZWKqhB5vQ8tCOIi1/1KiBGVk/ZJiIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:d6:71:03:e8:24:a5:8c:12:c3:66:cb:f2:c8:9b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
        Validity
            Not Before: Apr 27 20:00:41 2025 GMT
            Not After : Apr 28 20:00:41 2025 GMT
        Subject: CN=5c93ae0188db1cbb7345c7e8ba4c0b7d7cf35a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3b:6a:a7:d5:db:06:e2:eb:6a:85:25:dc:20:
                    95:74:ea:52:9e:7d:6e:25:0c:02:0d:a9:97:ad:e8:
                    78:c8:79:01:d8:94:ea:4e:16:ab:a6:08:08:4c:b7:
                    93:8e:a1:fa:55:01:49:b4:c4:3c:3c:11:e0:e5:02:
                    bb:d0:94:ce:ee:ee:d6:89:8d:59:31:e5:e1:0b:97:
                    c9:01:cd:25:c3:ce:65:5f:36:2e:66:49:e6:2f:1b:
                    47:cd:c0:dd:b5:23:f6:b4:42:28:0a:a8:f0:85:d2:
                    ae:24:48:8c:b9:44:12:01:ee:fa:db:65:52:27:a1:
                    e9:d4:a1:35:38:c7:2e:a6:6f:3d:e4:2d:ec:b0:6a:
                    43:f9:37:4b:27:83:4c:fc:98:73:1a:4a:8e:5b:09:
                    ac:73:ec:98:39:f2:ff:bf:43:4e:9f:66:42:5d:66:
                    9b:b0:31:64:0e:c5:dc:39:3a:f9:88:fe:61:c5:cf:
                    01:7a:da:4a:87:db:8c:bf:f3:ab:9a:94:d0:a9:e2:
                    73:78:d8:b1:e3:dc:bc:9d:71:3c:0d:09:bc:be:f4:
                    c0:c1:f1:ae:da:50:df:a5:b4:65:c3:9b:f5:95:4c:
                    8c:b2:e8:3f:2a:fc:11:e2:37:60:e3:45:1a:e9:fa:
                    b7:ff:be:64:1e:c0:a8:0d:af:06:6a:f9:76:20:aa:
                    ce:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:93:AE:01:88:DB:1C:BB:73:45:C7:E8:BA:4C:0B:7D:7C:F3:5A:2C
            X509v3 Authority Key Identifier:
                keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:9e:c7:16:b9:de:79:f3:db:2a:4c:b6:56:93:bc:4c:c1:49:
         b8:61:4c:5c:8d:fc:5d:33:c7:db:ad:e2:8b:ce:42:53:b1:b3:
         ea:df:77:d8:3b:b6:5c:6f:c7:d8:2f:3e:a9:e8:26:d9:1a:1c:
         0d:0d:c3:e2:db:28:1a:c3:23:51:52:64:39:49:e7:36:d1:48:
         57:18:67:1f:1a:89:3e:07:8b:21:10:e3:3a:6f:29:92:a9:17:
         4f:12:7e:b2:03:9f:1c:d5:8f:2c:c2:b0:2a:64:d4:37:a6:dc:
         5f:c5:35:8c:b5:1f:83:92:a3:f4:e2:78:33:6a:48:15:59:3f:
         86:4f:b1:14:46:8d:df:8f:08:31:85:e4:06:13:7f:c5:f9:2d:
         e5:70:32:ff:af:c6:62:29:75:c1:8b:01:0e:ef:57:8c:fc:35:
         64:6d:ae:44:a2:11:5e:7a:dc:97:fd:f9:ef:ac:20:13:3d:60:
         ff:bd:71:6e:07:50:47:ea:55:d8:22:68:ec:10:4c:80:5d:6c:
         9a:9a:06:4e:9b:39:c9:04:17:c8:14:36:ba:fc:b4:7b:c4:7f:
         18:36:1f:fc:81:74:5a:43:5b:cf:04:a5:3c:2f:fd:ad:f3:71:
         c0:2e:57:d7:39:e4:c3:30:3b:e5:86:a9:aa:95:fa:c2:ce:f0:
         04:89:0a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:16:31 2025 by rpki-client