Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
File:                     LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft (raw, json)
Hash identifier:          Yec2tpsAdAoyHsqqQDUYiV2yqbxIHXoeTZxBkpghie4=
Subject key identifier:   AB:79:F5:53:02:0D:FA:52:D2:D1:AE:16:31:0B:33:99:1F:8E:9A:C3
Authority key identifier: 2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED
Certificate issuer:       /CN=2c571d688aa503a2e566bbc876df0ba455c577ed
Certificate serial:       01964DB4B81CCF3B46931B7D6602612B9C0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
Manifest number:          1503
Signing time:             Sat 19 Apr 2025 11:00:11 +0000
Manifest this update:     Sat 19 Apr 2025 11:00:11 +0000
Manifest next update:     Sun 20 Apr 2025 11:00:11 +0000
Files and hashes:         1: LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl (hash: Cu9PqpV6zBc5LHHdSH+dludBBqzcBWcYCfXzm15tqAY=)
                          2: jw6vhP1XSWL-mJ5DdRhBrk5Uzas.roa (hash: Kw3hAcXjhw+zjLuWTzYjCzsx/BTtTlyQ/NHsrLRcPPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:b4:b8:1c:cf:3b:46:93:1b:7d:66:02:61:2b:9c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c571d688aa503a2e566bbc876df0ba455c577ed
        Validity
            Not Before: Apr 19 11:00:11 2025 GMT
            Not After : Apr 20 11:00:11 2025 GMT
        Subject: CN=ab79f553020dfa52d2d1ae16310b33991f8e9ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d5:36:d4:8f:ce:8c:73:8d:1b:5f:59:5c:60:
                    83:40:6a:b3:66:d7:94:80:9e:6d:29:93:78:f3:0c:
                    aa:47:3b:b2:0d:e5:25:ab:33:04:4a:bd:c2:c1:26:
                    2d:ba:b1:9a:bd:86:75:55:9e:59:fa:f6:0f:e4:95:
                    cc:fe:03:48:19:c5:e1:13:ba:55:5f:8d:7e:b3:e1:
                    35:5d:21:ca:0a:94:4d:31:1f:8f:36:76:6a:17:c2:
                    b4:c3:e4:41:47:61:9b:23:d5:6d:ef:d2:c3:18:8b:
                    17:45:cc:03:dc:44:f2:42:6d:3d:17:92:32:e6:0f:
                    bb:b6:c6:bd:1e:a0:76:cb:48:cc:e9:33:4c:cd:02:
                    da:82:42:92:72:f6:73:f6:a7:fb:31:c4:4e:51:88:
                    af:20:d8:4d:81:0f:74:27:61:90:d7:ae:0d:cc:46:
                    5f:02:3c:73:7d:6f:7d:a9:cb:59:36:2c:5c:70:b9:
                    df:f8:72:ee:24:e7:3f:bd:b6:cb:63:28:3b:d1:12:
                    ba:59:0f:94:2a:06:37:96:72:81:2f:9c:89:d0:2f:
                    e7:3e:36:22:50:60:f4:d0:a6:40:61:65:2d:39:24:
                    8e:66:84:4e:d0:70:35:ce:62:99:20:79:d5:78:88:
                    d3:66:41:bb:13:0c:cc:56:2c:28:d4:89:ee:ab:97:
                    75:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:79:F5:53:02:0D:FA:52:D2:D1:AE:16:31:0B:33:99:1F:8E:9A:C3
            X509v3 Authority Key Identifier:
                keyid:2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:50:5d:9c:07:35:ee:91:0f:2f:e8:b7:e3:3e:39:3e:a8:d4:
         25:56:af:89:3d:09:6d:f0:28:4e:9d:22:a5:48:4b:f1:d0:82:
         d0:6a:b6:6e:30:ec:bf:cb:33:0f:42:0c:85:56:cf:9c:68:15:
         55:8f:e7:df:c1:ec:83:0a:a7:86:77:62:4d:0c:cc:0c:66:f0:
         67:8f:8e:f6:48:79:9d:ef:71:e9:9e:be:1c:c5:de:a0:f8:d0:
         a6:27:23:45:22:64:b8:a1:f6:d3:b7:ed:7b:ec:f9:81:ef:aa:
         b8:a3:dd:c7:e0:f2:fc:db:c1:83:a7:84:34:10:d0:7e:02:7e:
         44:83:3e:47:61:29:84:8b:22:84:85:39:bd:98:1c:ff:56:eb:
         8d:0a:9f:9e:38:f8:45:3b:f8:4a:53:e6:a5:08:b6:fe:cc:11:
         69:ea:fb:9d:91:74:b4:f7:1c:08:de:e8:dc:18:0e:9e:a8:40:
         06:f2:ec:9e:e6:5a:8d:d3:e2:da:5f:58:ff:f1:8f:bb:04:87:
         a6:47:3b:2c:3c:2a:b8:67:03:07:fe:cc:bc:5a:96:f4:ec:69:
         1d:85:a5:29:06:ad:8b:ff:9a:a0:56:24:41:77:bd:9f:4a:88:
         39:bf:f7:d7:3d:64:db:42:87:fd:3b:eb:ac:78:f5:c4:d3:61:
         18:91:00:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:03:23 2025 by rpki-client