Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
File:                     lDBvaK6kuuEk-shfLJqj9a6FARM.mft (raw, json)
Hash identifier:          Da9IFRdUYGn/oahq8ZWyU6McMuxYyEags7MXAWe/pUI=
Subject key identifier:   9C:C2:35:C1:A9:FF:84:ED:F8:58:D9:91:F6:DC:6D:D9:07:37:82:B7
Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
Certificate issuer:       /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Certificate serial:       01974140A8CE5D3B7E1858D2328EF69D3DF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
Manifest number:          0294
Signing time:             Thu 05 Jun 2025 18:00:45 +0000
Manifest this update:     Thu 05 Jun 2025 18:00:45 +0000
Manifest next update:     Fri 06 Jun 2025 18:00:45 +0000
Files and hashes:         1: FYcjZuHT4JZu7kEqPYetpvF-Qx0.roa (hash: L5G/m+Q1fagnOrSl7UqJpYi3BYMPHAymC5hLCegmYeg=)
                          2: QALT4vP68jQK_Ar_borHkTlaA3c.roa (hash: sVdKC/vvWqKqYdfIyWzeWLHS2Hbp0xOgwsKlY4l69YU=)
                          3: R2xDf0hT3bwTslHF7Ulhf-HarRU.roa (hash: NAVYlsHQmPmwP3TvDnFkO23YGDJlDkO0kffvGr4O5Zs=)
                          4: lDBvaK6kuuEk-shfLJqj9a6FARM.crl (hash: ADHcTt1Tg28ccnBSBX3Ty45X2SoE82PE6e4RUQHEb5U=)
                          5: uzUGTfjtsuHWlcN_I0IA8CMrfBY.roa (hash: vK/HOcliDT8rJeC9+pxXMkuRxyO7UoQeXCrhqdkwGeA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Jun 2025 18:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:41:40:a8:ce:5d:3b:7e:18:58:d2:32:8e:f6:9d:3d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
        Validity
            Not Before: Jun  5 18:00:45 2025 GMT
            Not After : Jun  6 18:00:45 2025 GMT
        Subject: CN=9cc235c1a9ff84edf858d991f6dc6dd9073782b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b6:02:14:dc:71:dd:b1:a0:27:5e:4e:66:df:
                    34:da:b7:4b:93:8e:80:42:c1:6e:6d:b1:6c:05:5e:
                    d4:2c:05:56:52:66:2d:18:d5:74:d0:23:e7:68:1f:
                    a0:e9:14:be:10:ae:fc:8d:40:d1:fd:b1:b7:73:a8:
                    dd:ab:de:03:6a:b2:5d:d4:c0:eb:03:e9:43:f2:02:
                    7a:02:c6:86:de:03:7b:a8:47:98:ca:47:6f:d3:aa:
                    60:05:73:34:de:60:cc:b4:c0:99:2e:04:31:18:e7:
                    a2:ae:f6:83:06:b7:c3:7a:82:68:32:a4:80:d6:eb:
                    60:56:35:f7:0f:f9:78:c8:39:b2:9c:b0:d4:2e:90:
                    e1:31:85:65:54:5e:84:69:29:e1:ac:d7:38:82:56:
                    b1:3b:4c:8e:ac:1f:1b:2e:dd:3c:47:cf:8c:bf:58:
                    57:31:d5:8b:eb:92:a3:f8:4e:fa:c9:40:87:da:59:
                    95:95:ed:5b:88:f8:a2:d7:85:20:8b:47:68:02:e6:
                    48:38:e1:db:b5:8a:9d:37:43:4e:6f:40:9b:fb:48:
                    c3:80:e9:7e:79:e2:c9:0f:5b:7c:a2:fb:09:86:e5:
                    c7:7d:0e:6f:69:74:f8:1e:a5:df:82:4f:be:82:9d:
                    c8:44:24:75:c8:90:18:31:c7:85:fb:9d:3a:d0:86:
                    7a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C2:35:C1:A9:FF:84:ED:F8:58:D9:91:F6:DC:6D:D9:07:37:82:B7
            X509v3 Authority Key Identifier:
                keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:5d:7d:64:1d:66:90:90:0f:95:1b:ef:c2:6e:d7:6f:2a:fa:
         cb:bc:b2:20:e8:a5:8a:60:df:68:ad:8e:bc:f1:98:e1:6b:b5:
         ce:a8:7a:50:0b:53:b2:10:78:72:82:65:e0:6e:51:48:27:2a:
         f1:ad:e3:49:87:12:79:ec:27:9e:aa:51:02:27:53:ff:03:8d:
         c3:64:5b:61:f7:3e:44:83:f9:9b:d0:96:e8:a3:66:00:c1:78:
         91:45:5e:c9:77:11:c3:19:32:ad:90:a1:5a:e8:ca:d8:09:0c:
         59:d7:68:ae:ae:d5:91:e0:b6:9a:c4:34:92:68:1a:00:c6:49:
         16:a4:ed:ff:1e:7b:3d:81:93:fe:ae:a4:36:8c:b7:6a:17:8e:
         81:b8:06:b4:4d:a4:c3:e7:f6:ca:10:70:9f:81:6d:70:69:56:
         3a:3a:d8:c1:5b:1c:db:cb:9c:7b:8a:72:79:7e:11:71:41:3b:
         0b:1d:67:c5:4f:81:9a:77:cf:90:77:d5:98:6a:cd:ac:ea:53:
         8a:fc:a4:20:82:da:6c:00:6b:7b:62:89:88:9e:91:c6:ce:ec:
         8b:f4:f5:55:98:d5:cf:3e:fe:33:0c:2b:04:c2:4b:84:78:97:
         8d:1a:98:70:5c:ab:37:fe:39:a7:98:a1:9a:f7:90:9d:0d:b5:
         71:50:41:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 03:14:24 2025 by rpki-client