Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
File:                     LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft (raw, json)
Hash identifier:          HA9SwTQKFnx5Q2geSnvYQkyetMpt1uDgML5vGTqhQGk=
Subject key identifier:   1F:A2:3A:3E:27:C4:42:A9:4B:D5:95:73:03:FC:C1:9D:6B:0D:45:EB
Authority key identifier: 2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61
Certificate issuer:       /CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961
Certificate serial:       01964AB417E6ACA60955F456D4EE97429277
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
Manifest number:          129E
Signing time:             Fri 18 Apr 2025 21:00:38 +0000
Manifest this update:     Fri 18 Apr 2025 21:00:38 +0000
Manifest next update:     Sat 19 Apr 2025 21:00:38 +0000
Files and hashes:         1: 7iP4nOGy_JVuI8qnvDv60a6BhYQ.roa (hash: 4s47hXyI0ed0XFx6LcF7wuk0vSfFs0i5LsinZAkAZPs=)
                          2: LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl (hash: SzsgOVBn5R+mYudT0YqixGUt4i5V64Nt/W2T86PBCgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:b4:17:e6:ac:a6:09:55:f4:56:d4:ee:97:42:92:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961
        Validity
            Not Before: Apr 18 21:00:38 2025 GMT
            Not After : Apr 19 21:00:38 2025 GMT
        Subject: CN=1fa23a3e27c442a94bd5957303fcc19d6b0d45eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:52:b7:0e:85:75:0f:a1:ca:3f:cf:47:08:e8:
                    ab:5d:a3:86:52:b2:e5:d9:eb:8a:5c:18:b9:21:40:
                    2b:b0:3e:f9:20:f3:e4:c7:32:17:dc:f7:99:44:e0:
                    a6:e4:e1:66:97:18:df:3b:0a:4b:94:72:76:88:b9:
                    34:68:60:04:f8:4f:92:73:46:b4:15:69:b8:10:50:
                    45:ed:9d:27:63:5b:41:ed:28:a3:c0:90:dd:0d:c3:
                    2e:9f:6a:87:29:0b:fc:bd:28:5a:22:da:46:57:cf:
                    82:ae:06:b5:75:f6:6c:05:89:05:7b:7d:ce:7a:c3:
                    e2:b9:0b:fc:8f:8f:c5:98:a4:bb:60:82:f4:35:73:
                    e8:94:f4:91:d1:88:a0:a8:31:fb:7b:41:f4:c4:08:
                    56:2d:0f:c6:d8:1b:a5:36:aa:35:40:83:a8:3c:5d:
                    ae:86:bb:df:28:18:24:3b:e8:1d:a1:5f:37:9d:63:
                    9e:53:4f:b8:1e:3b:19:37:67:14:00:53:c1:30:3b:
                    54:86:09:94:c7:a5:a8:86:df:cf:b5:11:24:7d:f1:
                    f2:ad:73:61:fe:e3:84:3c:61:77:4f:8e:42:3b:45:
                    85:fa:57:42:59:02:a0:82:7f:a7:68:ae:05:1d:a3:
                    9c:a5:76:6a:58:59:ee:4d:67:b1:c2:e3:29:6c:0a:
                    8c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A2:3A:3E:27:C4:42:A9:4B:D5:95:73:03:FC:C1:9D:6B:0D:45:EB
            X509v3 Authority Key Identifier:
                keyid:2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:4b:0c:1d:41:61:8b:a0:57:5d:a8:0a:a5:79:12:b2:19:05:
         8a:b6:86:0a:bc:5c:80:50:79:dd:14:b0:df:59:4a:5f:16:f3:
         24:e6:f8:e1:d8:34:8e:ec:9b:91:14:c3:71:6f:5c:13:21:c1:
         bc:46:53:47:04:b8:e3:1c:da:98:0a:b0:eb:e2:6c:b2:f3:45:
         8b:3c:2b:f2:34:02:c1:c5:61:85:c7:2d:f2:64:fb:64:1a:4a:
         f0:9c:27:c7:58:92:39:43:f6:ef:c6:11:f4:06:67:dc:cf:86:
         05:ba:40:74:b6:bd:a1:34:d4:27:2d:f1:3d:24:c8:c5:9f:2a:
         9d:05:6f:20:9e:2f:82:9d:d6:2f:a9:5a:e1:d7:a6:f1:4e:e0:
         d7:aa:19:a3:41:c4:fd:1d:dc:8a:e6:44:36:4c:17:07:3d:cd:
         86:76:cd:93:24:c3:75:1a:08:41:f6:f2:3c:28:6d:64:2f:f1:
         10:be:21:79:9b:f8:3a:cc:ae:8c:0a:ae:82:33:aa:f4:71:e2:
         3f:ec:5c:eb:27:e3:dc:20:d9:16:ee:7f:59:96:4f:81:6f:37:
         f5:3f:89:c0:a8:54:cf:9f:e5:2c:0c:7a:58:65:b7:3b:3a:2c:
         e8:8e:ca:a6:7c:ba:28:85:ab:b4:a0:2b:80:c2:92:5a:db:e8:
         9b:0a:7d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:36:00 2025 by rpki-client