Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft
File:                     L2VDasUDgzLnA6277_WBTbgqtD8.mft (raw, json)
Hash identifier:          vZbl48LJAggjG9sS8fmeObO8oAtjQqqhj8xsy6tvGNU=
Subject key identifier:   B6:18:17:1C:5D:FC:8A:AA:82:CF:1E:7C:E6:0F:95:8E:C9:78:E3:E2
Authority key identifier: 2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F
Certificate issuer:       /CN=2f65436ac5038332e703adbbeff5814db82ab43f
Certificate serial:       01964933B04244CF8139E4434CE94E0A43F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft
Manifest number:          0E13
Signing time:             Fri 18 Apr 2025 14:00:46 +0000
Manifest this update:     Fri 18 Apr 2025 14:00:46 +0000
Manifest next update:     Sat 19 Apr 2025 14:00:46 +0000
Files and hashes:         1: JwV0QfsSNHG29kGRpDADqSiaDck.roa (hash: KjOMvzGc/F+OfPiH0IzVXvG5nX5kdmCNZ+EIJh+pYl4=)
                          2: L2VDasUDgzLnA6277_WBTbgqtD8.crl (hash: 3lULajcuZHrRNVzq120edry8yk8QwaTR5snrktPJGj8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:33:b0:42:44:cf:81:39:e4:43:4c:e9:4e:0a:43:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f65436ac5038332e703adbbeff5814db82ab43f
        Validity
            Not Before: Apr 18 14:00:46 2025 GMT
            Not After : Apr 19 14:00:46 2025 GMT
        Subject: CN=b618171c5dfc8aaa82cf1e7ce60f958ec978e3e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:fd:bd:7a:37:48:ae:90:51:24:fb:67:05:
                    d5:5e:d0:f4:55:73:4d:65:9e:38:7e:f9:f7:54:4a:
                    ba:52:28:4a:47:61:2a:e0:c9:b2:51:bc:c6:e6:f2:
                    0d:10:6a:17:aa:17:96:2d:43:e1:f8:f9:49:9c:83:
                    27:a3:d7:cf:b2:20:97:9c:33:73:6a:35:9e:e1:82:
                    35:d9:99:db:06:5d:b5:42:8e:84:dd:16:b4:25:30:
                    44:1e:83:9e:3e:4a:ce:e9:d6:12:7e:f0:7d:26:52:
                    53:fe:fa:ce:3b:a5:7e:50:27:c0:95:a0:80:e7:3c:
                    9b:74:cd:5a:8e:3f:31:29:95:cb:c4:99:7e:a9:b8:
                    27:fa:ea:ee:22:e4:4e:c9:1c:ab:85:cc:9d:de:cf:
                    69:ea:68:03:c9:2c:bb:48:00:4d:72:0b:74:85:37:
                    a0:9d:a0:98:fc:6e:7e:18:80:97:6c:a4:96:3e:a1:
                    b9:be:84:49:f2:30:4d:aa:01:d0:16:97:02:dc:d0:
                    b5:09:66:6e:39:48:9e:c5:7c:00:3b:6b:4e:57:72:
                    14:5c:21:ec:5e:74:4c:ac:4b:a0:48:ff:f7:99:9b:
                    ad:35:cc:40:87:50:6a:ed:c1:e3:36:14:88:c0:a7:
                    3b:ac:9b:73:91:33:5f:79:83:40:db:37:eb:27:99:
                    1a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:18:17:1C:5D:FC:8A:AA:82:CF:1E:7C:E6:0F:95:8E:C9:78:E3:E2
            X509v3 Authority Key Identifier:
                keyid:2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:0a:1a:e8:40:5b:f8:8b:ff:5b:61:10:62:23:ce:b1:de:35:
         04:19:7e:41:68:d0:56:e3:f8:0f:e8:5f:7b:3a:a0:ef:e0:c7:
         b5:01:6f:41:f0:ee:2e:b9:11:01:bb:fb:74:34:a4:37:b0:18:
         65:37:dc:a0:54:45:cb:9a:d9:1c:6a:de:8e:b3:2e:89:d9:70:
         e0:76:b7:e1:5a:ca:79:12:40:46:d1:af:20:89:f7:61:be:7d:
         eb:fd:0c:25:28:29:ad:15:0e:0b:93:3e:05:16:ae:7b:17:73:
         71:a7:bd:9d:41:b7:29:7a:2c:d5:03:f6:6e:23:e1:5b:79:a6:
         41:73:ba:ba:b5:e9:9d:ce:1b:93:96:99:cc:5d:2b:51:20:c0:
         bf:ed:7e:cb:6e:09:bd:a6:44:6d:f6:af:7e:42:5e:53:c9:0f:
         b5:cf:a5:59:f5:ec:1d:35:c7:da:f3:dc:b8:f2:4a:2e:6b:5e:
         9f:c5:79:63:1f:cc:8a:89:3e:fd:c6:00:70:39:a5:cf:9d:10:
         eb:e2:cf:05:b7:ae:3d:c4:27:27:1e:45:ad:3e:b2:ad:b6:3d:
         d1:f4:fe:f6:ff:91:31:c2:2d:69:a9:6d:d1:90:d7:0f:40:56:
         b6:80:d5:b3:eb:53:cd:63:7f:f5:62:26:52:36:ea:28:d3:95:
         1d:09:e1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:19:31 2025 by rpki-client