Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
File:                     l0417CGA2uvRvz3URAOp4L_LVso.mft (raw, json)
Hash identifier:          r9xKScYBJZu5WfRd/Cw3pQ+JEWd0xdhy4djmgxrRvsc=
Subject key identifier:   C8:42:53:DD:1B:80:2B:01:04:BF:28:D0:39:0D:2C:9D:CE:11:FC:8E
Authority key identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
Certificate issuer:       /CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Certificate serial:       01976FD0B85F4D789FED821AF7B15FFC383A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
Manifest number:          0503
Signing time:             Sat 14 Jun 2025 19:00:38 +0000
Manifest this update:     Sat 14 Jun 2025 19:00:38 +0000
Manifest next update:     Sun 15 Jun 2025 19:00:38 +0000
Files and hashes:         1: HxAtI9yKZCbpxH862uX_45QQRAI.roa (hash: 3h+38XAT5SiIVpNs8Lk+14nxc9RTgj1HBur0gfSR11E=)
                          2: d-gD_stjAzo445PqKWpkeuPKi48.roa (hash: N9NpLKhmhDQnk+b+LZB+ZZNehcKI5fvIIHeixBGutWI=)
                          3: l0417CGA2uvRvz3URAOp4L_LVso.crl (hash: qJ94t/cyxGRg8o/qqvGxVJO8tkRxPLyCXH7uCnwQAVc=)
                          4: mEa-TLKrSv59f8M6kG19lj9ZNsk.roa (hash: B4NNTwi5q8vUiOtaP5idLpSIlDDRQuKnJ09MN8x4pKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d0:b8:5f:4d:78:9f:ed:82:1a:f7:b1:5f:fc:38:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
        Validity
            Not Before: Jun 14 19:00:38 2025 GMT
            Not After : Jun 15 19:00:38 2025 GMT
        Subject: CN=c84253dd1b802b0104bf28d0390d2c9dce11fc8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:aa:ef:9a:62:1b:bb:38:6d:bc:a6:19:62:0f:
                    11:ca:77:26:65:08:23:d1:db:1b:5b:1a:cb:16:25:
                    1c:80:6d:87:57:76:41:ea:d4:ee:71:07:d1:52:2b:
                    8d:b7:f1:10:19:ea:0e:a1:d5:14:d2:33:ad:b0:82:
                    be:6a:9f:da:29:39:f2:26:ff:a7:b3:72:8c:57:3d:
                    2d:70:57:eb:3f:65:f2:70:3d:50:70:bf:29:d2:e1:
                    6c:06:f3:8f:a2:ac:21:dc:10:b0:14:2b:f0:70:67:
                    df:5e:66:08:9b:90:5b:74:d0:e7:96:cf:df:8a:94:
                    c7:7c:bb:be:4c:a4:37:a3:67:6b:f6:1e:48:b6:93:
                    a2:54:d5:f0:6f:c4:dd:84:33:74:76:6c:c2:2d:8a:
                    ab:c3:27:9d:12:9f:4e:7b:63:9d:e9:20:35:3a:bb:
                    2d:65:61:d8:fd:4b:86:0d:2b:c8:05:14:a3:ea:16:
                    1f:01:d8:0c:7e:2f:e0:6a:8a:bf:31:5d:0f:97:3f:
                    9e:00:d5:b0:a1:f4:83:ec:fa:4d:2c:d7:0b:d7:06:
                    b5:1d:8d:49:15:88:fd:c4:36:5e:b4:27:fc:01:82:
                    02:b8:14:30:74:0c:0c:a0:03:fd:2b:21:cc:84:88:
                    cd:04:7e:ae:39:7c:29:d1:d9:a6:cc:24:3b:b0:fe:
                    00:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:42:53:DD:1B:80:2B:01:04:BF:28:D0:39:0D:2C:9D:CE:11:FC:8E
            X509v3 Authority Key Identifier:
                keyid:97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:7d:9e:b8:4c:c5:23:a4:62:b0:24:af:9c:e2:19:b4:77:4e:
         c6:2e:d2:c9:eb:b0:91:1f:fa:69:1d:64:16:1f:eb:4b:82:28:
         25:c6:cc:97:94:80:14:9c:4a:cd:16:f2:6d:a3:cd:ee:0f:ac:
         76:4a:9e:15:53:6f:92:a7:2f:71:c2:7a:b7:bd:0f:37:53:84:
         f0:07:07:8d:2f:c3:ce:66:26:1c:e7:cf:19:aa:d7:9c:19:67:
         4b:dd:7f:a0:d1:04:e2:ba:10:68:a8:9c:c9:54:e4:be:c8:62:
         28:97:3e:c0:7c:60:a6:27:cb:7e:06:6c:b4:de:b9:cc:ba:d3:
         62:3c:55:b3:c0:0c:af:ec:dc:dd:5a:eb:75:af:db:23:05:c9:
         3c:c5:0e:4c:29:aa:b6:9c:78:d7:1f:14:7b:47:af:46:53:b0:
         83:3d:e2:ac:da:58:21:d8:a3:f8:90:5e:d8:df:f6:ed:b3:fc:
         ff:62:38:b3:8c:56:29:f5:b9:c5:93:90:94:98:ba:81:4a:48:
         04:e1:ca:6c:23:94:6c:63:ae:2a:98:27:93:93:bd:40:35:70:
         32:3f:6f:71:72:6d:ce:37:25:a5:16:55:eb:6c:4a:81:b2:4f:
         5b:0a:22:0b:6a:c1:9b:ba:ad:f6:49:f5:0d:aa:a3:9d:34:6b:
         73:a8:fc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:47:39 2025 by rpki-client