Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
File:                     LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft (raw, json)
Hash identifier:          jtdp/F4e6q6lBdnNfHZ6bMqqJcYlbgmfgaqQ+mv08M0=
Subject key identifier:   E8:54:27:2F:14:97:D1:80:4C:97:DF:7B:8E:D8:81:C7:88:43:F1:28
Authority key identifier: 2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27
Certificate issuer:       /CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
Certificate serial:       019645C59BC3863D6E1994E905D5FC8B3B78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
Manifest number:          14F7
Signing time:             Thu 17 Apr 2025 22:01:40 +0000
Manifest this update:     Thu 17 Apr 2025 22:01:40 +0000
Manifest next update:     Fri 18 Apr 2025 22:01:40 +0000
Files and hashes:         1: Jc6JT4xshgQRG7HUAK1HtP9BkTI.roa (hash: hCl5v0Z86Jy7+0GlCW+6oKfv2bUVufzYinCdryb0Gzo=)
                          2: LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl (hash: C5yZgIBXwF4Fb0WRZqGkiUKffnPfQqK0vd3Tk6maokc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:c5:9b:c3:86:3d:6e:19:94:e9:05:d5:fc:8b:3b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
        Validity
            Not Before: Apr 17 22:01:40 2025 GMT
            Not After : Apr 18 22:01:40 2025 GMT
        Subject: CN=e854272f1497d1804c97df7b8ed881c78843f128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6e:47:79:9d:a2:e3:51:8f:f9:bc:6e:6e:13:
                    f8:74:a4:53:73:f5:be:e6:31:b6:ec:fc:76:fd:0c:
                    79:3c:06:80:1a:8e:23:89:01:19:d0:ee:e7:7b:ae:
                    9b:d7:ca:b3:fa:db:d9:54:35:25:0a:23:da:31:7e:
                    ec:24:0f:5a:ab:98:d1:8f:b6:7a:b5:ca:46:ff:45:
                    66:0e:ec:64:28:18:7d:b2:81:95:6f:ee:55:bf:4a:
                    4e:40:5e:2d:bd:58:e9:1d:17:68:1b:84:83:11:e4:
                    15:5f:07:26:a9:b2:69:1f:8f:9b:80:f2:98:64:2c:
                    81:d4:95:42:b1:cb:ae:4f:92:48:1e:ae:9e:ca:0f:
                    21:0b:43:26:e5:7f:df:56:ed:83:63:5d:cb:49:f5:
                    2f:bc:5f:93:d1:f4:10:a8:9d:d3:51:f5:a7:4d:9c:
                    4b:30:bf:09:73:09:1d:e9:34:20:1b:9a:3d:fd:48:
                    d8:49:f3:53:d2:ca:6f:81:a0:6a:9a:13:78:1a:12:
                    5e:b6:51:32:57:03:ec:50:b6:a1:36:7a:5a:93:6b:
                    a7:89:ac:ed:d2:1e:84:e8:1f:87:22:20:51:31:c4:
                    9f:f3:bd:51:8f:ff:ed:f8:78:78:10:1f:7c:b5:2b:
                    6f:93:56:2f:0c:9b:42:32:b5:75:b4:5e:f0:55:c2:
                    67:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:54:27:2F:14:97:D1:80:4C:97:DF:7B:8E:D8:81:C7:88:43:F1:28
            X509v3 Authority Key Identifier:
                keyid:2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:84:42:87:82:ad:38:c9:60:b8:69:c7:12:ba:a5:e0:7f:4d:
         25:f4:db:83:c7:38:fb:c3:67:37:b8:43:fd:64:17:71:e0:53:
         39:a3:4e:25:51:61:53:ae:7f:2f:27:51:b4:ca:c9:d8:8c:24:
         c3:5c:ba:2f:17:78:d8:6b:c9:e9:a4:e3:a1:d9:9a:98:7c:36:
         fe:9c:69:97:d2:06:3d:4f:da:24:4d:f6:d0:c7:d1:4f:97:cd:
         62:67:ee:41:66:c0:9d:76:6c:d9:84:72:b3:9c:84:61:fe:32:
         3e:45:c8:87:08:d8:c6:71:10:6c:e0:e3:22:65:db:58:1f:1c:
         76:5c:4c:5b:f6:c5:62:d2:67:04:32:5e:cd:da:f8:fb:ed:5d:
         08:90:11:bb:43:88:ee:2a:da:f7:ca:fd:26:0d:f5:86:a2:c6:
         a9:94:55:56:7e:22:65:28:23:15:46:71:7f:5e:e1:5c:53:6e:
         cf:e7:7a:61:36:34:ca:49:a3:45:5f:79:14:58:0b:46:6c:d7:
         12:b6:cb:46:41:9b:c1:d2:eb:5a:cf:b6:4b:87:02:33:25:f6:
         c4:f7:4e:3d:d1:00:d3:ab:0e:84:3b:15:27:00:95:6a:54:d7:
         48:f8:4c:bb:23:39:10:51:6e:33:0d:03:a2:c7:44:1d:ea:82:
         a2:51:3d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:30:10 2025 by rpki-client