Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
File:                     lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft (raw, json)
Hash identifier:          JjWyqcnCIJZjJMtOhdsJKEdBr/1qY84PfrT/Mia/g88=
Subject key identifier:   33:3F:DB:D5:9D:6A:5A:D5:B7:15:FE:4D:C9:55:AB:7D:AE:C9:6A:96
Authority key identifier: 96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A
Certificate issuer:       /CN=96448e840d272a3e3159192d1df11f100e506f6a
Certificate serial:       01964EC7DF83CE4113D81E6D2EACA02DBC16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
Manifest number:          0724
Signing time:             Sat 19 Apr 2025 16:00:43 +0000
Manifest this update:     Sat 19 Apr 2025 16:00:43 +0000
Manifest next update:     Sun 20 Apr 2025 16:00:43 +0000
Files and hashes:         1: HRJaIehlqdUQOZwaPo6dI6mb5MQ.roa (hash: NAZLCo/vu2u7I92Xt0rJZZjC+drQdPYyxSFtuqS2OpE=)
                          2: lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl (hash: brS2MaORQxej+RMnP9T8RBUVqII+BBfDLJRnfihNpi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:c7:df:83:ce:41:13:d8:1e:6d:2e:ac:a0:2d:bc:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96448e840d272a3e3159192d1df11f100e506f6a
        Validity
            Not Before: Apr 19 16:00:43 2025 GMT
            Not After : Apr 20 16:00:43 2025 GMT
        Subject: CN=333fdbd59d6a5ad5b715fe4dc955ab7daec96a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7b:05:8b:78:a2:8f:48:38:ec:f4:6a:1c:79:
                    c2:6c:f5:e3:3e:44:75:c8:25:a4:76:10:b0:6d:0a:
                    06:39:36:86:e6:52:cc:cf:2d:7d:2b:84:2c:fa:e0:
                    7d:71:cf:21:d3:65:5e:e0:92:b4:33:5c:60:e2:41:
                    a3:b5:93:eb:71:a9:dd:8a:44:97:fe:86:7a:86:4f:
                    60:41:e9:40:8e:3f:74:02:eb:00:40:b4:b4:b7:7e:
                    b5:ee:2a:75:7e:f1:dc:d1:b0:48:27:fb:3e:02:2a:
                    97:05:1e:e3:3d:a3:8e:78:5b:3a:89:22:9c:db:95:
                    c5:e0:a8:be:cd:78:51:60:be:14:f0:25:13:66:2a:
                    47:bf:13:c9:07:8f:ba:da:75:74:27:ba:77:6d:60:
                    8c:e3:23:4c:7a:7a:9d:a5:25:82:29:69:ff:eb:ed:
                    24:0a:1a:13:b9:cd:07:d8:07:13:62:3a:52:70:ca:
                    d7:ae:bd:67:70:1b:8b:ae:29:b6:a8:48:06:95:56:
                    39:13:78:26:6d:fe:a8:d2:b1:59:da:f1:43:8e:c3:
                    4b:aa:ed:49:f7:49:7a:7d:a6:44:e2:98:b7:9a:49:
                    a4:03:fb:12:4a:d5:da:f8:e3:ae:df:ec:99:9b:68:
                    62:f5:72:66:50:61:54:a5:99:f6:c5:87:c2:54:be:
                    91:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3F:DB:D5:9D:6A:5A:D5:B7:15:FE:4D:C9:55:AB:7D:AE:C9:6A:96
            X509v3 Authority Key Identifier:
                keyid:96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:bf:20:c8:26:ef:0b:e7:0b:77:98:2c:9c:cd:f4:8c:93:cb:
         ac:6b:94:be:a3:ad:26:ba:8d:e0:76:1c:66:fb:3f:92:be:21:
         0c:27:6f:a3:a3:63:81:e9:55:92:59:ed:c1:0d:75:ac:5a:8e:
         09:c7:18:4e:66:28:0e:ef:68:87:34:5e:45:79:61:36:aa:46:
         61:ff:d2:5c:dd:c7:6d:cf:83:82:45:9c:b1:a1:8a:ac:2e:27:
         0f:e4:19:41:02:3c:4a:42:c7:ff:9c:6b:46:4a:de:b4:b8:55:
         47:ff:d0:c2:13:db:ab:78:0d:25:b4:a8:ee:95:03:91:92:f2:
         ec:4e:c4:6a:05:0d:45:52:92:f7:0c:f8:e5:ce:e6:9d:6e:51:
         c0:3c:76:8f:71:c1:07:51:d9:28:6f:a7:ef:a3:80:19:94:3c:
         2f:0f:25:14:d4:dd:db:15:52:a7:63:57:0a:6e:f8:d3:98:c1:
         0e:84:28:99:6a:4f:ec:08:17:b4:f3:52:aa:93:19:51:fa:62:
         d7:0e:5b:0d:19:76:34:be:72:92:2f:5c:06:e2:2b:17:83:c4:
         a2:2f:c0:46:a2:c5:89:45:77:3c:ab:77:db:8b:2b:93:a7:38:
         1c:9d:d2:b4:1d:ca:ee:a6:00:0b:4d:9b:0a:2a:69:3c:b7:7a:
         62:4f:c5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:12:30 2025 by rpki-client