Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
File:                     xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft (raw, json)
Hash identifier:          oJ5Of01/mS9aMtl1UOhTNIEuxZiCf/kIGd9q4sW3Z2c=
Subject key identifier:   C2:96:CF:2A:C0:E0:3F:78:FB:AD:6C:C1:04:97:40:8F:AE:B6:D7:A2
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Certificate issuer:       /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial:       01964B224AAB6842149671F33BC114ACA1CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
Manifest number:          1506
Signing time:             Fri 18 Apr 2025 23:01:00 +0000
Manifest this update:     Fri 18 Apr 2025 23:01:00 +0000
Manifest next update:     Sat 19 Apr 2025 23:01:00 +0000
Files and hashes:         1: 16AVPBqy4CLiJAk_oq82Ze4GFUc.roa (hash: 8ne68iP0EWlMyJtqhCBtDaybFvVR1nQvVur1A40T90I=)
                          2: VXYSc8jV8LV0YUvD9GqhiG_Wg3I.roa (hash: gf+aTqupU26rjaPk4p/iExUHTOVBZ1BKZ/eBJG/4oJE=)
                          3: kJyTZGrKIJP-guAGkQfidQemnN0.roa (hash: 5VNjlZQ2lTGQgsP/MAa7aAdGIHpHVpDviDdJ3Ul/giI=)
                          4: oZ13AtjecChXKw5f_3lLaOPw8Ks.roa (hash: /XejTxxPIA/m0yG5qUhn06Ei20l/pmuOP7i6MWx0h1U=)
                          5: xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl (hash: TX+FsGA9HbPK0c1MYfoUI/M9OBNCSCwN0yQMk2Ohdxs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:22:4a:ab:68:42:14:96:71:f3:3b:c1:14:ac:a1:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
        Validity
            Not Before: Apr 18 23:01:00 2025 GMT
            Not After : Apr 19 23:01:00 2025 GMT
        Subject: CN=c296cf2ac0e03f78fbad6cc10497408faeb6d7a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fc:90:2f:1e:0c:1a:50:ed:cf:0c:2d:3c:70:
                    98:1c:6e:05:1e:17:08:9c:ce:8c:95:d6:93:fb:9f:
                    3c:c2:5e:7b:ce:1a:12:5e:a9:df:97:5e:8a:90:35:
                    e4:94:f3:ec:e0:c1:04:cb:c4:90:b6:7a:21:b9:e4:
                    1d:a6:91:ec:4f:f8:a7:46:16:f2:64:25:d9:d2:70:
                    0c:83:83:2a:4d:d0:bb:9e:b4:ee:08:ea:6e:fe:ab:
                    a6:da:9e:fc:7e:67:63:47:aa:cf:e1:5c:01:cc:d7:
                    84:b7:87:3b:0c:d0:ab:65:76:c4:45:0f:58:c2:d1:
                    54:1d:49:c7:71:c5:a4:30:b1:95:ab:c2:0f:c2:6d:
                    c3:f3:4b:4c:20:39:0f:4f:2d:39:59:98:0e:6c:d9:
                    32:4b:13:10:8b:6f:30:58:ef:31:38:ad:d3:98:39:
                    7d:e0:58:71:18:6b:52:03:aa:fb:60:3f:84:d5:d7:
                    46:a7:d5:2e:bd:07:9a:0c:0f:d8:f3:6d:a9:9c:aa:
                    a0:ff:15:5a:51:3c:0c:a0:3b:b3:66:e6:eb:92:e3:
                    1f:e8:5c:41:7e:6d:44:49:30:63:ca:83:66:16:6c:
                    5c:6a:7a:55:06:55:00:97:dc:93:1f:89:d5:88:ce:
                    1b:44:b1:b6:ff:5f:e9:c2:4f:f5:89:4a:cb:bc:2a:
                    66:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:96:CF:2A:C0:E0:3F:78:FB:AD:6C:C1:04:97:40:8F:AE:B6:D7:A2
            X509v3 Authority Key Identifier:
                keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:40:b5:de:2d:2d:78:f5:1a:b8:f6:4c:f9:6e:7e:bc:44:f1:
         47:72:90:34:5c:08:22:a7:00:9b:3a:8e:c0:b6:96:a7:46:e5:
         3e:fa:f2:7c:87:3a:fa:e3:fd:a0:fb:50:c6:d9:59:b3:0a:40:
         27:17:a5:0b:c6:09:dd:e2:ac:ab:14:b8:e4:4e:fe:ec:20:4f:
         60:fd:08:8c:f3:7e:de:3f:17:50:42:ab:0f:e7:a5:69:6c:ec:
         fc:3a:59:df:72:73:bb:5c:bc:1f:fa:01:5a:8c:53:20:8a:5b:
         d4:c5:30:69:01:6c:d8:0b:82:32:4b:f0:c1:4b:13:67:1a:4c:
         61:3d:29:68:68:b8:61:c8:cf:d8:37:4a:02:e7:bb:df:e8:91:
         b5:f7:f0:90:33:aa:41:b3:1b:cc:84:a8:a0:14:fb:5c:a6:90:
         db:d3:05:0b:49:b6:ec:44:04:4f:b3:70:a2:eb:b6:65:2e:b4:
         32:b5:13:57:e9:06:f3:ac:cd:07:dd:69:e0:66:58:06:db:04:
         77:71:b1:d8:de:6b:00:10:22:55:dd:33:89:f3:f0:c0:31:c3:
         45:84:5a:0c:42:e7:51:af:80:c9:bb:d0:da:1c:d5:24:31:19:
         64:fe:2e:ce:da:66:8c:8d:99:ec:09:50:3f:09:25:62:c5:4c:
         62:34:81:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:15:28 2025 by rpki-client