Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
File:                     LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft (raw, json)
Hash identifier:          VASvjezuvMvAUnzHrtIJHOZVkUGkSGS/6CkquNmhujU=
Subject key identifier:   5A:71:B0:51:F7:2A:BA:25:10:69:EE:BA:45:61:02:2F:20:EE:0A:23
Authority key identifier: 2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF
Certificate issuer:       /CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
Certificate serial:       0196756715D536CAD45697C60A6241B4EBF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
Manifest number:          1511
Signing time:             Sun 27 Apr 2025 04:00:12 +0000
Manifest this update:     Sun 27 Apr 2025 04:00:12 +0000
Manifest next update:     Mon 28 Apr 2025 04:00:12 +0000
Files and hashes:         1: 1-rQwqNKly6aenIYeWSDOecvE9Dg.roa (hash: xyKaPv0UlzvDAkK4ZPQkPqyXzd2d32Ec3cQVPGFT2Lk=)
                          2: 53x_LlMR9wDfhoH_h-dm_2o9cfc.roa (hash: hpGqRuP4r/d0ndxhvimQvb9wKXUShtDAOOkpu0Or3Uk=)
                          3: LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl (hash: ngZhqw4+jzkjwnhfnxJsa41rUKqPpvj6U3iqIFEcG0Q=)
                          4: sCdHa8GDoglI_mdXJ5Cs8c0F3ts.roa (hash: MzLxzWRZS24YmZa+mNMBCsFOGmjiB2b/WusU+bbqWL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 04:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:67:15:d5:36:ca:d4:56:97:c6:0a:62:41:b4:eb:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
        Validity
            Not Before: Apr 27 04:00:12 2025 GMT
            Not After : Apr 28 04:00:12 2025 GMT
        Subject: CN=5a71b051f72aba251069eeba4561022f20ee0a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8e:7f:7d:50:10:8f:e7:f5:03:30:c7:16:24:
                    f7:be:10:6f:d6:2d:c4:3c:44:b7:b9:85:64:bd:ca:
                    7f:40:91:2b:f3:4a:f9:9c:6c:92:e2:ea:df:36:0e:
                    c1:2d:c2:34:90:4c:7d:08:6d:57:87:2e:f6:14:59:
                    37:62:fc:e0:32:fa:01:1b:19:d1:ee:cf:f9:37:0a:
                    6a:86:13:c4:72:ff:09:48:d9:02:1f:18:39:28:6c:
                    38:30:14:c9:4f:7b:df:d1:02:76:81:65:92:d9:32:
                    d4:e5:e7:16:ea:02:52:48:61:67:66:ce:00:cc:05:
                    4c:d0:ea:f2:a1:17:0c:56:74:d2:4d:bb:47:8c:69:
                    59:68:35:82:95:55:41:f6:df:a6:2a:02:d4:6c:0f:
                    7c:e1:1f:61:0a:24:b6:f8:ed:c8:fd:f9:9d:98:84:
                    bf:77:47:c7:00:23:15:d5:ec:08:2e:79:c2:6d:76:
                    df:99:be:a9:23:fd:07:d3:4a:d7:ea:53:cb:27:64:
                    84:af:99:cb:cd:d1:1b:4c:28:78:a1:22:7a:e7:4e:
                    aa:8a:d9:e4:e9:f4:c1:65:38:08:36:ef:82:83:60:
                    91:a5:5a:51:c6:12:d0:3a:bb:d6:20:bc:a9:4e:51:
                    aa:3b:6e:0b:4d:5c:76:6b:20:92:54:6a:ea:13:09:
                    ba:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:71:B0:51:F7:2A:BA:25:10:69:EE:BA:45:61:02:2F:20:EE:0A:23
            X509v3 Authority Key Identifier:
                keyid:2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:10:23:e1:87:91:71:43:30:45:74:cd:57:77:2b:9b:35:a5:
         d0:c5:d6:3f:a3:19:5a:9b:df:46:08:00:11:3d:76:85:de:2c:
         e5:d9:04:aa:9d:b3:d4:52:89:d6:d3:d3:f0:55:a5:fa:04:da:
         19:44:10:43:01:d2:88:cb:88:26:33:ec:c5:28:55:6c:39:22:
         7f:00:6f:f7:ac:03:41:bc:b3:e1:d5:93:23:be:1e:17:9c:3f:
         9a:6f:c9:10:33:e2:1f:fa:12:86:8c:de:9e:6b:1f:1c:e7:0e:
         40:cd:d1:3d:2d:81:10:75:5a:32:27:83:3e:15:6d:a0:be:cd:
         2c:19:73:ac:33:bd:09:b0:a3:3f:2e:be:11:f9:36:9e:e2:01:
         f1:f9:f2:07:e9:8d:1d:2a:2d:c3:19:02:b9:68:26:63:41:22:
         e4:80:25:99:ba:cc:47:f1:84:52:33:34:41:9f:d4:b0:0d:50:
         b7:a3:14:ae:1a:4a:37:48:05:8c:2e:c7:5c:02:3a:2d:c0:c6:
         20:de:b7:66:b4:24:0e:c0:b5:88:2e:35:e2:7e:8c:18:3b:43:
         f6:12:52:cd:0b:69:fe:e9:bb:31:7f:74:f4:9f:95:c3:df:63:
         e5:a3:1b:7f:f7:4c:c9:58:69:53:70:c7:f9:fe:ff:2d:50:2d:
         a7:ff:3a:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1ZxXVNsrUVpfGCmJBtOvxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNmIzMzQxM2ZhYTVlNWUxZDI3OWEyYTI1ZmY4MWQ4ZDE1
MzI1ZGYwHhcNMjUwNDI3MDQwMDEyWhcNMjUwNDI4MDQwMDEyWjAzMTEwLwYDVQQD
Eyg1YTcxYjA1MWY3MmFiYTI1MTA2OWVlYmE0NTYxMDIyZjIwZWUwYTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA145/fVAQj+f1AzDHFiT3vhBv1i3E
PES3uYVkvcp/QJEr80r5nGyS4urfNg7BLcI0kEx9CG1Xhy72FFk3YvzgMvoBGxnR
7s/5NwpqhhPEcv8JSNkCHxg5KGw4MBTJT3vf0QJ2gWWS2TLU5ecW6gJSSGFnZs4A
zAVM0OryoRcMVnTSTbtHjGlZaDWClVVB9t+mKgLUbA984R9hCiS2+O3I/fmdmIS/
d0fHACMV1ewILnnCbXbfmb6pI/0H00rX6lPLJ2SEr5nLzdEbTCh4oSJ6506qitnk
6fTBZTgINu+Cg2CRpVpRxhLQOrvWILypTlGqO24LTVx2ayCSVGrqEwm6NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpxsFH3KrolEGnuukVhAi8g7gojMB8GA1UdIwQY
MBaAFC5rM0E/ql5eHSeaKiX/gdjRUyXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1zelFULXFYbDRkSjVvcUpmLUIyTkZUSmQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hY2NkZTgtZjQ2Zi00ZWY5LTk0YWYt
OGRkODFlNGIzZTMzLzEvTG1zelFULXFYbDRkSjVvcUpmLUIyTkZUSmQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9hY2NkZTgtZjQ2Zi00ZWY5LTk0YWYtOGRkODFlNGIzZTMz
LzEvTG1zelFULXFYbDRkSjVvcUpmLUIyTkZUSmQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRAj4YeR
cUMwRXTNV3crmzWl0MXWP6MZWpvfRggAET12hd4s5dkEqp2z1FKJ1tPT8FWl+gTa
GUQQQwHSiMuIJjPsxShVbDkifwBv96wDQbyz4dWTI74eF5w/mm/JEDPiH/oShoze
nmsfHOcOQM3RPS2BEHVaMieDPhVtoL7NLBlzrDO9CbCjPy6+Efk2nuIB8fnyB+mN
HSotwxkCuWgmY0Ei5IAlmbrMR/GEUjM0QZ/UsA1Qt6MUrhpKN0gFjC7HXAI6LcDG
IN63ZrQkDsC1iC414n6MGDtD9hJSzQtp/um7MX909J+Vw99j5aMbf/dMyVhpU3DH
+f7/LVAtp/86aw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:45:33 2025 by rpki-client