Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
File:                     LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft (raw, json)
Hash identifier:          lAb9mT9J4OYMqdWanyQk2wcJIC4U9IZWMJFMC+UvHtA=
Subject key identifier:   A7:B2:A2:40:74:EF:CA:44:43:5E:1C:1F:88:F9:FB:E0:A2:4E:BF:E4
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Certificate issuer:       /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial:       01965A26F4F95AD214888CE388E1720C79A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
Manifest number:          0143
Signing time:             Mon 21 Apr 2025 21:00:24 +0000
Manifest this update:     Mon 21 Apr 2025 21:00:24 +0000
Manifest next update:     Tue 22 Apr 2025 21:00:24 +0000
Files and hashes:         1: 3-eMi9JT7hPc3NDPKynwHnHwGvg.roa (hash: oSIP6BTgdOLnonKZ26sBvhO6MiVPEpNSBESIrEziWKI=)
                          2: LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl (hash: dMVByjoS3ScGf/Uj82Vnqc0gKTBKUx8CEgaP92/u1q8=)
                          3: dNm1rES2Zl08JygLPN3BuGwOCUM.roa (hash: 7raxOyAsZMXqdmIt6IsBRfrs2D9ul1H2Zd2ogF8bwNk=)
                          4: iZ5BNUFZRJn7y_9ZxCJ-W-SdfaY.roa (hash: pEFIpnuch1qRnOFnkvakcOhoMdolz6e61+pO/vjQc1g=)
                          5: jwJTBwWKLkja_FzcvvrpqgDCjws.roa (hash: 7otd9+EZJqRYx/bzq3vtn+zgaqnh5M1MG1Iibx6PmCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5a:26:f4:f9:5a:d2:14:88:8c:e3:88:e1:72:0c:79:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
        Validity
            Not Before: Apr 21 21:00:24 2025 GMT
            Not After : Apr 22 21:00:24 2025 GMT
        Subject: CN=a7b2a24074efca44435e1c1f88f9fbe0a24ebfe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ab:87:c2:d8:f2:d1:16:7a:32:2b:e7:13:43:
                    38:4f:6d:81:cd:57:39:38:eb:1b:c3:a6:46:c9:86:
                    90:4b:f8:f7:62:d1:82:c0:3e:4a:fd:e0:76:80:1f:
                    4c:45:9c:e2:e7:15:78:70:7f:9c:19:8a:42:f6:16:
                    55:06:bc:44:25:13:7f:aa:16:55:7b:e5:d0:d7:87:
                    00:f6:3b:9b:1c:c0:b6:59:35:fa:64:26:7a:b9:ed:
                    27:c1:92:ac:2a:db:be:fe:f8:58:d2:d1:6d:f4:1c:
                    4c:27:c3:6c:e4:43:2a:17:67:c9:1c:9b:57:ba:16:
                    d5:fc:f6:d7:d1:96:b5:09:d4:1d:17:a7:26:eb:66:
                    09:54:ba:65:9f:98:0b:68:9d:8a:1d:c9:20:9c:73:
                    0b:66:52:43:3c:cd:69:c5:16:e9:ad:32:ad:3f:e6:
                    7d:2c:f1:3e:38:81:e8:d5:19:a0:ba:c7:ec:1b:8d:
                    77:ac:c9:f2:30:a2:53:82:da:2f:a4:d1:09:9d:08:
                    66:dd:52:1d:81:c8:43:08:98:5a:6d:36:ca:e5:82:
                    6f:78:1c:82:03:ff:e8:a4:ea:74:20:05:70:30:45:
                    67:f4:4f:b2:8f:d8:34:e5:d3:cd:38:f9:f0:20:1c:
                    f5:30:40:5c:18:65:a0:19:65:97:66:e1:eb:21:97:
                    ef:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B2:A2:40:74:EF:CA:44:43:5E:1C:1F:88:F9:FB:E0:A2:4E:BF:E4
            X509v3 Authority Key Identifier:
                keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ae:14:43:6b:55:e5:83:2d:6d:40:36:f4:48:4f:b5:ce:2a:
         c6:92:72:7f:97:e3:15:f9:d1:91:93:78:12:f8:0e:21:ca:4c:
         8d:23:07:08:e7:22:53:4a:41:1a:a1:49:20:5a:fe:cf:8e:c9:
         99:fc:39:3c:03:e3:38:9f:34:02:12:3c:8b:78:25:fc:f4:3c:
         3a:b2:33:63:91:13:f6:ab:fa:13:b3:1b:03:0f:a4:eb:9f:eb:
         63:6c:37:86:04:9f:f8:9f:01:11:1a:ae:15:6a:8c:fc:b7:70:
         11:53:b5:5f:d9:21:15:2c:95:0a:4a:cc:bc:99:da:25:cf:cf:
         ee:fb:3e:95:5b:cd:56:1c:bd:2c:be:44:b4:46:8d:5b:36:24:
         9b:5c:5a:9e:36:bc:96:00:0a:dd:91:d9:e1:ce:aa:a2:16:43:
         4e:5f:12:e0:86:14:b6:2e:dd:c3:86:f8:35:0b:ab:5a:fa:f8:
         83:4b:73:b0:4b:bc:cf:45:e3:bb:03:38:8f:47:7a:e7:cb:fa:
         5e:87:3b:e9:1c:7c:f6:b9:c5:17:c1:0c:c2:42:a3:08:86:28:
         3e:76:4c:c4:6a:4d:9a:f5:4c:26:1a:7c:ef:26:3c:9f:38:a0:
         97:96:c2:3a:84:48:5d:a4:92:19:4e:15:77:5e:02:bb:8b:35:
         2c:af:45:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:19:19 2025 by rpki-client