Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
File:                     lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft (raw, json)
Hash identifier:          bg1m0i49SgVGkC2YqWtZcLFM4yyEyczjlthHbIFkyfQ=
Subject key identifier:   F0:72:3C:C7:98:30:15:41:65:DA:94:09:62:32:5A:9E:DA:C1:69:D4
Authority key identifier: 96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1
Certificate issuer:       /CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
Certificate serial:       019677562F05CB4AD39E45CE1A9309CAFEF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
Manifest number:          0A40
Signing time:             Sun 27 Apr 2025 13:00:58 +0000
Manifest this update:     Sun 27 Apr 2025 13:00:58 +0000
Manifest next update:     Mon 28 Apr 2025 13:00:58 +0000
Files and hashes:         1: lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl (hash: a1XT2lxor3TdYDt4wtu47qAdIyL3IjUXXS+EBOUkmic=)
                          2: v_uqFNyNrjwxcamsF3cO6qzXKVI.roa (hash: 8Loff474F2iUwQ0Ne9OGFLSGYhgKQSa6EgjZzTy3738=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:56:2f:05:cb:4a:d3:9e:45:ce:1a:93:09:ca:fe:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
        Validity
            Not Before: Apr 27 13:00:58 2025 GMT
            Not After : Apr 28 13:00:58 2025 GMT
        Subject: CN=f0723cc79830154165da940962325a9edac169d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:70:70:f4:5f:4a:65:38:e8:7d:6a:36:cc:3d:
                    81:6a:6f:3b:57:5c:99:39:98:62:bf:14:4a:f5:76:
                    67:c5:04:8f:56:4e:dc:99:6b:cc:7f:fa:ac:7f:3b:
                    de:43:3c:03:9d:fb:f8:87:7f:74:7b:5e:42:e8:4f:
                    34:3a:a3:ed:86:17:ea:34:26:33:d3:76:d1:ab:eb:
                    c8:30:55:30:58:59:f3:77:44:15:47:2e:0e:0f:01:
                    f3:15:6d:10:15:b0:65:50:ee:ed:d9:fc:3c:4d:62:
                    a6:20:14:60:96:ec:cf:5e:83:e7:70:e2:42:72:2c:
                    58:e6:0b:b9:7d:34:c1:02:9d:f7:5b:d2:96:bb:78:
                    ae:78:ee:30:b0:30:a0:dd:79:32:c4:48:5d:92:cf:
                    3f:0d:09:25:37:4d:bc:4d:4c:9e:da:5a:38:82:17:
                    b2:e7:a9:a6:53:1d:fb:2b:da:d9:09:47:57:e6:ac:
                    c3:f6:a7:5d:e7:ff:98:e8:ba:8f:76:c5:26:a2:d5:
                    28:74:51:2a:56:bf:6a:6f:a8:fd:5e:4f:d5:cb:20:
                    28:f9:cf:b1:80:ac:18:95:3d:1f:c8:6d:32:0e:ac:
                    9e:ee:b5:0b:37:ae:0c:ea:60:85:1c:ba:6e:f0:34:
                    9f:fb:a4:f9:1d:bc:8b:fa:35:1b:55:c6:91:bc:8d:
                    c2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:72:3C:C7:98:30:15:41:65:DA:94:09:62:32:5A:9E:DA:C1:69:D4
            X509v3 Authority Key Identifier:
                keyid:96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:51:56:ad:8c:f8:7b:2c:84:7f:d9:a2:81:c0:8c:dd:a3:29:
         9c:ed:3c:28:db:36:f8:99:f3:81:00:d7:03:bb:c7:b0:0d:93:
         22:87:7b:1d:71:0a:e1:ff:fd:26:89:3c:98:26:67:02:6d:16:
         4b:19:2b:b4:db:17:1a:40:90:0c:45:17:03:3d:a6:b8:76:93:
         58:c3:88:b6:80:43:b5:3e:8e:71:63:37:07:33:c9:33:1e:33:
         cc:f0:38:d7:0f:b2:7d:3b:5f:71:9c:2d:b3:29:76:bd:06:da:
         4a:90:63:2e:01:0a:37:db:e8:1d:6b:f0:3a:ad:b9:20:3d:78:
         d6:24:f8:f2:9e:bf:19:ab:0f:c8:dd:fa:bd:98:0d:44:13:fa:
         ef:a2:9e:39:5c:25:dd:30:64:5f:99:65:44:f6:3a:b7:7d:4d:
         aa:28:1b:66:c7:f8:ad:b6:9b:12:93:31:e0:f9:46:18:ea:ea:
         2e:57:ab:17:ec:f0:27:57:ea:15:66:da:97:20:b7:30:c6:e7:
         c8:71:4d:28:c3:34:d2:63:37:97:f5:0e:fa:e5:57:14:2b:e5:
         0b:ed:a6:58:2b:1c:5b:df:71:d4:93:86:fa:4e:d4:c4:ba:6c:
         92:8d:13:6b:db:cf:f2:cb:66:6f:a0:b1:02:fa:2b:c9:3d:79:
         bf:68:51:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:20:30 2025 by rpki-client