Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
File:                     kLihVGbD_x6RXXgKELC6qa1pSGA.mft (raw, json)
Hash identifier:          ejINPYrxoG91PjkVC69EpzZ4aU+YfclzCnsk7hZ4K1s=
Subject key identifier:   01:DF:49:75:D9:CC:D6:DA:B9:BC:DD:9D:22:82:FF:5B:DD:F0:2D:53
Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
Certificate issuer:       /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Certificate serial:       01966D08C4DBA05C07DEB4AE5130297EDD2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
Manifest number:          1469
Signing time:             Fri 25 Apr 2025 13:00:13 +0000
Manifest this update:     Fri 25 Apr 2025 13:00:13 +0000
Manifest next update:     Sat 26 Apr 2025 13:00:13 +0000
Files and hashes:         1: 5ylzUozH0X5KfArQKo4i4yUI-II.roa (hash: /U7VX7N0LYLMWn9ZhI8TzwqGtktcWpOPVB+Ela0LG78=)
                          2: VjZoO_XNq9TUDzr2kG4vDwWvbaU.roa (hash: vk9V2bJryTt5ur720els5LdMqipJhY5ilAwFIvaJkBg=)
                          3: i7xtJNh8nnR1YjvF1KD1JF-TMBI.roa (hash: 6umGEi6/dEe09HM9YM5x0dVLfi2Oz5knxj0Mb66phQ4=)
                          4: kLihVGbD_x6RXXgKELC6qa1pSGA.crl (hash: 6ChXIUCKMN2uyIcDXj51PYF9u5drHcJNpiS8ExDCQOQ=)
                          5: wEHyXMYvuIC-qmVrbjicZQKsZ2I.roa (hash: amx36+55qLX6fzalSFu5jMxR/WTqJpTbag5RROciO1M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Apr 2025 13:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:6d:08:c4:db:a0:5c:07:de:b4:ae:51:30:29:7e:dd:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
        Validity
            Not Before: Apr 25 13:00:13 2025 GMT
            Not After : Apr 26 13:00:13 2025 GMT
        Subject: CN=01df4975d9ccd6dab9bcdd9d2282ff5bddf02d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b3:e5:70:e5:51:56:80:8d:60:a2:8a:db:58:
                    d3:06:87:79:c3:38:15:b0:d5:0b:3f:47:64:e3:fd:
                    18:b7:ac:8a:cb:69:93:2f:d8:3d:a5:69:1d:a5:49:
                    16:5c:61:08:27:f1:fd:ab:1a:f7:43:7e:ab:b3:68:
                    e9:14:32:19:c5:11:ce:8c:55:89:27:de:0c:dc:1d:
                    5d:42:7d:a7:20:70:10:04:a5:9b:74:07:c2:37:7a:
                    cd:6c:ed:02:0c:9f:2a:47:2e:1f:40:19:28:b0:48:
                    12:4b:24:a7:a3:ab:1b:b3:c0:85:12:fe:64:24:9a:
                    7e:09:36:75:2c:8d:c8:98:da:27:42:1c:79:7f:20:
                    76:8d:f2:70:5f:50:87:e1:e9:83:af:1c:2a:ce:40:
                    a0:d3:d4:34:2d:93:d1:3e:6b:22:b4:55:a5:b0:f8:
                    b1:05:c0:b9:2b:59:a9:70:be:df:d8:3d:4e:11:46:
                    d0:e3:c3:39:7d:c4:fc:a2:9b:47:16:8b:6e:91:92:
                    99:7f:73:cb:cb:1f:56:04:25:28:0a:5c:be:9e:c1:
                    53:41:7a:7c:b5:15:9b:a0:6c:e6:da:81:52:cb:67:
                    36:1f:54:fb:a2:1c:5a:5d:18:9e:13:08:fc:ad:2e:
                    35:f5:dd:a3:6c:ae:9a:fb:63:55:8c:61:6f:d5:fd:
                    72:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DF:49:75:D9:CC:D6:DA:B9:BC:DD:9D:22:82:FF:5B:DD:F0:2D:53
            X509v3 Authority Key Identifier:
                keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:4a:43:a0:e7:69:b3:c7:96:cf:be:fb:85:fb:61:3b:07:ec:
         85:95:dd:54:5a:cd:fe:9c:c0:d4:2d:e9:ad:ba:bf:54:24:10:
         4b:2e:c3:7c:bc:61:93:41:b9:8c:2c:02:8e:6e:61:6c:4c:1f:
         af:58:80:2c:01:24:31:49:91:11:94:8e:42:0a:b1:eb:6d:37:
         a8:7d:b3:61:24:8f:bd:f8:bc:83:a7:8a:17:27:55:df:91:9c:
         df:4f:72:c7:41:39:c1:fe:47:fb:95:32:ba:74:a8:ec:5e:85:
         52:f4:a6:96:19:f9:1a:51:41:bd:f5:76:d4:dd:30:8c:07:1d:
         f9:48:88:8c:8d:3b:7f:7d:ed:69:99:f1:31:e7:e2:b4:43:81:
         e2:7f:a1:ae:9a:95:1c:95:01:e5:4d:df:14:12:ee:4a:a6:a2:
         71:c1:0c:91:a8:8e:c7:1a:85:68:b7:29:e6:77:f2:2b:fe:69:
         da:70:2b:f9:1f:33:cb:8f:1e:8d:bf:49:2e:9b:b4:3f:9b:44:
         56:8a:26:2a:d8:af:ef:b2:3c:af:14:f9:ec:09:c0:4a:09:5c:
         02:2d:e0:c1:a1:76:03:55:9d:4b:58:ea:38:da:48:6d:75:95:
         2c:4b:1d:f0:3d:18:68:ac:59:9d:f6:14:8b:cf:88:4a:47:27:
         60:05:58:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:30:30 2025 by rpki-client