Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft
File:                     L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft (raw, json)
Hash identifier:          OaGyxU1txqkLovfR8gCIpjdy2KRe9kRRUOWUPPx/lls=
Subject key identifier:   91:E3:D6:B1:04:1A:04:45:8B:89:23:07:9F:8A:37:DB:A6:BF:A7:05
Authority key identifier: 2F:A8:E6:57:EE:AE:07:83:DA:14:A3:DA:2C:A7:4D:DE:C1:5D:D3:08
Certificate issuer:       /CN=2fa8e657eeae0783da14a3da2ca74ddec15dd308
Certificate serial:       01967454A3BCD080E644BBE52F775A574C38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft
Manifest number:          150E
Signing time:             Sat 26 Apr 2025 23:00:26 +0000
Manifest this update:     Sat 26 Apr 2025 23:00:26 +0000
Manifest next update:     Sun 27 Apr 2025 23:00:26 +0000
Files and hashes:         1: L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl (hash: bC7+kI/u20BbUEnRuriVjNT9wa+w3jr6isK5Qw34oL8=)
                          2: O4pL8bOkm7k8Dc5goVDu8nvKS30.roa (hash: gSjW+R9kyQFRuzzqYc+aNmr8UDNGwt1WHFY4+D72xpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:54:a3:bc:d0:80:e6:44:bb:e5:2f:77:5a:57:4c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa8e657eeae0783da14a3da2ca74ddec15dd308
        Validity
            Not Before: Apr 26 23:00:26 2025 GMT
            Not After : Apr 27 23:00:26 2025 GMT
        Subject: CN=91e3d6b1041a04458b8923079f8a37dba6bfa705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:86:5f:a1:71:96:e8:a7:08:75:fe:eb:c0:1a:
                    e2:92:89:a6:85:1d:be:55:7c:d9:53:3e:ff:31:13:
                    1d:68:b2:6d:8d:2b:7b:c9:d2:5b:50:84:52:17:87:
                    01:65:4e:86:3d:db:f2:56:d5:e9:f8:95:7b:6c:0e:
                    12:95:1e:b1:26:f5:d5:46:be:a1:0b:e5:f3:34:2e:
                    c2:62:41:5e:5f:4f:79:2c:20:6c:7e:5b:fe:fa:ce:
                    ae:82:07:8a:c8:6d:b7:56:38:82:67:46:6f:67:76:
                    15:9c:d1:20:d9:58:eb:1b:7d:11:de:07:86:4b:82:
                    3a:0a:d3:1a:11:50:07:fb:52:e9:4c:eb:7d:6e:57:
                    7b:dc:b9:23:a7:37:d6:b6:86:ff:f0:b7:5b:48:62:
                    47:fb:e2:aa:50:90:ca:17:ce:b8:26:10:fd:fc:30:
                    74:32:a4:e8:58:90:c4:97:de:a5:39:bc:94:4a:d6:
                    13:e9:87:59:95:b0:ee:e4:18:af:87:aa:47:c7:91:
                    fc:cd:68:58:8f:25:54:dc:a1:f1:cf:e5:70:a8:95:
                    93:4e:8b:65:21:5e:83:40:3a:e4:65:68:ca:6c:6f:
                    ae:c0:78:72:93:8a:21:10:5e:3d:c3:04:62:a4:05:
                    44:ab:05:dd:37:49:9c:e5:64:72:dd:91:07:89:d8:
                    57:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E3:D6:B1:04:1A:04:45:8B:89:23:07:9F:8A:37:DB:A6:BF:A7:05
            X509v3 Authority Key Identifier:
                keyid:2F:A8:E6:57:EE:AE:07:83:DA:14:A3:DA:2C:A7:4D:DE:C1:5D:D3:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:9d:57:60:10:57:d9:b5:aa:b0:98:94:3b:c7:60:05:3d:e1:
         b7:2d:86:fb:ee:2d:ed:05:64:11:30:d8:4d:c9:86:0c:27:65:
         22:d0:d8:7c:8f:53:0a:30:5c:89:cb:e7:7e:72:46:fe:77:0c:
         d9:76:fa:07:77:8c:50:22:75:e2:a4:a2:a4:74:0b:62:c3:c7:
         35:93:80:58:bf:17:61:e3:d2:c4:52:0f:63:32:7a:cc:91:78:
         0b:58:88:4d:9a:09:e4:f7:8a:b8:70:60:a1:2e:ba:e4:14:ff:
         0b:60:7d:0f:ed:64:3f:86:4a:cb:1a:45:9d:e4:48:de:c2:b4:
         fc:c8:b8:ce:74:eb:e9:04:1c:78:ee:85:5b:19:bb:e0:c2:98:
         e8:9a:df:d6:f3:08:2b:93:47:3f:e2:cb:82:1c:5e:2f:d2:90:
         09:61:f1:1f:0a:eb:d5:5b:ec:f2:93:1e:90:aa:68:e6:b7:4b:
         d7:6e:72:92:09:0c:b6:8e:81:7f:b4:90:1c:aa:4c:c8:08:e7:
         0b:a2:c4:67:43:4d:a5:8b:e6:e6:68:9f:f5:c5:ee:1c:a0:fe:
         1d:bc:94:0a:45:c9:99:c6:5f:cb:fc:34:da:6f:91:1a:a6:46:
         35:50:85:6d:b0:4d:ae:ce:75:01:bb:ef:0f:06:51:dc:27:a5:
         7e:f8:63:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:42 2025 by rpki-client