Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
File:                     LS19l0PeLvovYzN4omj1jyqhYFA.mft (raw, json)
Hash identifier:          KEsChSvi3usM8mHN2uiC7Fr1wKOwHhPVE3mCqfuWebI=
Subject key identifier:   E2:C6:0C:B7:83:6B:F3:4E:0D:48:74:2F:F2:FF:5D:E8:B9:7B:4B:83
Authority key identifier: 2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50
Certificate issuer:       /CN=2d2d7d9743de2efa2f633378a268f58f2aa16050
Certificate serial:       0196512420BB71CBAFF32884F7A50C3590D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
Manifest number:          13AB
Signing time:             Sun 20 Apr 2025 03:00:44 +0000
Manifest this update:     Sun 20 Apr 2025 03:00:44 +0000
Manifest next update:     Mon 21 Apr 2025 03:00:44 +0000
Files and hashes:         1: 1-buam4cvzrUESLjjB1PACZifMOE.roa (hash: +T6bdmpI7/RrpdxHnXaaldhbLqtyNHZghNENwZHAAMA=)
                          2: 1Xxzpu5NB_tAOFF7vKFky5CdRts.roa (hash: n+JshJ/fSDMDcSDZOom+oloo+zJzlcN/7rhG+Doia9U=)
                          3: LS19l0PeLvovYzN4omj1jyqhYFA.crl (hash: //gjq2Dpvklz0Vbcm3xfGJur6kKTkoy3uE7qRdv4hpE=)
                          4: fKVvugVq57Vok-HeOBFsVeEq_KY.roa (hash: F7Yehco5YSDWcARYN+I7zPfrg1uSQ0Y+IfgsllPqsIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:24:20:bb:71:cb:af:f3:28:84:f7:a5:0c:35:90:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2d7d9743de2efa2f633378a268f58f2aa16050
        Validity
            Not Before: Apr 20 03:00:44 2025 GMT
            Not After : Apr 21 03:00:44 2025 GMT
        Subject: CN=e2c60cb7836bf34e0d48742ff2ff5de8b97b4b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:80:8f:3a:8d:33:2c:a9:1b:d7:b4:5d:63:da:
                    69:07:16:0b:f5:cb:77:1b:0e:fc:73:64:20:34:3a:
                    f3:d9:11:47:f0:db:ac:67:f7:49:bd:91:3c:30:d4:
                    26:3f:a5:a4:2f:eb:18:dd:9f:92:61:a0:78:48:2c:
                    48:41:83:c8:50:f1:3f:d1:d8:c9:b1:21:05:42:e3:
                    10:d9:9f:fe:82:fb:2d:0e:d3:18:94:c8:98:3c:77:
                    2c:74:0f:d9:38:dc:93:5d:72:ba:f5:b5:b7:48:4f:
                    a5:88:99:90:31:0b:c0:bc:bc:bf:14:95:8d:32:a6:
                    47:b3:00:b8:6c:5b:d6:1b:1a:64:99:13:a7:9a:e4:
                    9b:9d:52:a6:39:e5:c8:63:82:1f:02:74:27:37:87:
                    92:84:4e:7e:d3:23:71:13:dc:74:d9:41:2f:4e:29:
                    b4:f9:79:08:63:1e:ac:bc:48:30:8c:29:83:61:77:
                    8f:29:b0:91:20:bb:f4:63:2c:42:09:5f:ca:91:55:
                    37:5c:fc:b8:16:89:14:f3:d7:45:39:83:1e:13:77:
                    10:e0:6b:e0:1f:d9:88:b5:7f:a4:4b:fb:a4:0f:5b:
                    00:e8:99:bd:29:b3:53:ce:b9:f6:ee:cf:38:33:3a:
                    bd:a0:2e:77:d6:2b:a5:cd:42:02:28:81:e3:75:58:
                    fc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C6:0C:B7:83:6B:F3:4E:0D:48:74:2F:F2:FF:5D:E8:B9:7B:4B:83
            X509v3 Authority Key Identifier:
                keyid:2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:73:3e:4c:1e:ab:20:b7:ed:84:ad:38:99:5a:f1:18:22:98:
         c5:52:a7:af:1c:c2:61:a1:9a:fb:69:08:ec:2c:86:df:95:91:
         c8:ce:e3:e7:99:90:7d:ba:d1:65:3c:b8:97:1f:3f:d1:bf:50:
         09:42:78:80:83:00:48:09:77:8d:5e:c5:18:ff:69:84:72:d0:
         29:e9:2e:ae:23:9c:74:a3:e4:4f:a5:25:bc:0a:c8:75:ca:a7:
         5f:d6:96:1c:ab:7c:60:3b:20:4a:5e:ef:fe:5e:03:3a:d9:84:
         f8:fa:e6:68:8a:bb:34:b5:8d:61:5c:3a:10:f0:62:b2:1c:ba:
         c6:a8:b7:2e:b5:f2:b1:0e:0a:20:84:9a:73:63:4a:46:5a:b2:
         68:1c:72:0c:af:c5:1f:e7:3a:76:1c:53:7d:13:02:0d:7f:54:
         5b:c3:6d:91:fe:26:2c:f3:59:7a:18:95:8c:fd:9a:59:11:67:
         ee:ac:2a:a6:dc:44:a5:54:8c:17:78:45:bb:77:80:a4:55:c0:
         37:ca:67:9a:99:ee:54:65:c9:8e:60:64:e6:ee:37:98:c7:10:
         31:10:17:ae:11:14:7b:2d:3b:e5:a5:f9:b3:a4:24:81:4e:cd:
         0b:5d:75:49:7d:ce:e0:ce:c6:23:ad:ca:6f:7d:0c:25:97:b9:
         85:b2:e2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:20:11 2025 by rpki-client