Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
File:                     LzFLwAp-WuIzSeBUBik6fWBgzaE.mft (raw, json)
Hash identifier:          QwQvBu+bx+tyjlz+LBAlGbZIrYQtG/qVJv3rzpO9/kg=
Subject key identifier:   82:6C:73:E8:C1:D8:D0:24:12:0A:88:27:2E:CF:5B:E2:E4:A9:E1:8D
Authority key identifier: 2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
Certificate issuer:       /CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Certificate serial:       01963EAFEA403159D2D918B18E7F51EAD5CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
Manifest number:          11B4
Signing time:             Wed 16 Apr 2025 13:00:38 +0000
Manifest this update:     Wed 16 Apr 2025 13:00:38 +0000
Manifest next update:     Thu 17 Apr 2025 13:00:38 +0000
Files and hashes:         1: 1-d5J5W-VmdNEPvaUUIc9QmXJa7c.roa (hash: WEje3N6tM8UQY4DTr2W4pxQIyOYapcmAGgNCDl+FllM=)
                          2: LzFLwAp-WuIzSeBUBik6fWBgzaE.crl (hash: VIA7+Q4FfihZXoNdrVu6z6Bmay9bFB1eDH7Tx3JYREs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3e:af:ea:40:31:59:d2:d9:18:b1:8e:7f:51:ea:d5:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
        Validity
            Not Before: Apr 16 13:00:38 2025 GMT
            Not After : Apr 17 13:00:38 2025 GMT
        Subject: CN=826c73e8c1d8d024120a88272ecf5be2e4a9e18d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c1:b1:c7:e3:fa:a7:f7:64:3f:d9:45:3c:ed:
                    c0:d2:28:a9:eb:94:91:63:42:bf:73:d4:07:36:21:
                    de:71:ac:01:2e:ed:bb:1e:a4:48:fe:88:ff:2d:60:
                    20:db:c9:1b:87:8c:48:84:8a:3b:de:bd:bf:58:13:
                    38:d0:7b:cb:08:0b:b2:0b:39:c6:03:49:c8:53:32:
                    6d:17:92:9e:93:38:6a:36:23:8d:fd:93:be:fe:f8:
                    c9:7b:5d:d8:a7:df:29:87:a5:5f:a1:42:8e:3a:ee:
                    dc:9d:34:da:ce:5e:19:13:8c:27:a2:04:2e:20:dd:
                    b5:76:73:c1:c7:bc:e4:89:e0:ff:b8:a1:d3:bd:18:
                    af:d7:f0:97:0f:82:be:22:76:a4:19:8c:fb:58:65:
                    4b:27:49:34:9d:43:4b:ff:77:0f:a6:25:7b:d1:a4:
                    5a:58:43:16:cb:38:41:c1:8b:95:d7:70:e9:24:0e:
                    b7:f1:bc:7f:e5:68:50:bd:de:3d:61:92:96:9f:9d:
                    69:9e:47:7c:cc:6b:2d:d1:4d:85:80:0e:b0:62:9c:
                    e6:33:35:00:dc:14:af:4c:bd:72:74:5d:a0:ca:d7:
                    f6:31:0a:fa:ee:d3:cc:84:08:43:2b:1d:cc:8f:8b:
                    ef:00:d1:22:9c:f0:fa:49:d0:55:86:05:cd:9c:8b:
                    af:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6C:73:E8:C1:D8:D0:24:12:0A:88:27:2E:CF:5B:E2:E4:A9:E1:8D
            X509v3 Authority Key Identifier:
                keyid:2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:08:33:a7:ce:4b:a3:55:48:04:36:c0:47:a8:53:0c:f7:51:
         92:a7:7a:eb:79:be:d4:cd:ac:bb:4c:5e:a7:d7:cf:35:bb:f4:
         5b:fb:5b:90:44:cc:a4:3d:b2:3f:c0:0f:c9:56:0d:2b:f9:2f:
         49:d2:2b:b8:0e:95:f3:8d:cf:ed:4f:08:a3:85:94:9f:b2:ea:
         b9:9b:b9:fa:1c:81:df:1c:0c:d4:0a:cf:64:af:7f:ea:bc:fb:
         04:b2:96:d3:e3:58:f6:32:63:47:ca:b4:b3:77:45:59:bb:b7:
         52:07:13:5f:19:d1:17:d2:15:31:eb:ac:ee:15:d7:b4:a9:eb:
         bd:76:89:3c:99:61:b0:73:84:56:33:ef:1d:f5:01:61:e7:8d:
         c7:f1:df:66:eb:6b:de:79:c4:bf:71:1c:88:ab:e6:a8:53:b2:
         43:b6:f3:b2:05:67:97:bd:4f:3f:69:56:8e:63:13:ff:e6:d6:
         99:7b:5b:10:87:d8:b9:74:1a:e2:16:95:8f:c1:c8:1b:8f:c7:
         09:5d:dc:df:56:54:18:28:8e:48:55:38:1c:e9:57:b5:a8:6f:
         1b:ae:18:2b:3e:75:d1:16:ab:7b:82:61:c1:70:97:34:0a:9b:
         95:45:29:93:14:ea:21:cb:0a:25:42:ce:03:57:4b:ac:5c:cd:
         85:ff:67:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY+r+pAMVnS2Rixjn9R6tXKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMzE0YmMwMGE3ZTVhZTIzMzQ5ZTA1NDA2MjkzYTdkNjA2
MGNkYTEwHhcNMjUwNDE2MTMwMDM4WhcNMjUwNDE3MTMwMDM4WjAzMTEwLwYDVQQD
Eyg4MjZjNzNlOGMxZDhkMDI0MTIwYTg4MjcyZWNmNWJlMmU0YTllMThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8Gxx+P6p/dkP9lFPO3A0iip65SR
Y0K/c9QHNiHecawBLu27HqRI/oj/LWAg28kbh4xIhIo73r2/WBM40HvLCAuyCznG
A0nIUzJtF5KekzhqNiON/ZO+/vjJe13Yp98ph6VfoUKOOu7cnTTazl4ZE4wnogQu
IN21dnPBx7zkieD/uKHTvRiv1/CXD4K+InakGYz7WGVLJ0k0nUNL/3cPpiV70aRa
WEMWyzhBwYuV13DpJA638bx/5WhQvd49YZKWn51pnkd8zGst0U2FgA6wYpzmMzUA
3BSvTL1ydF2gytf2MQr67tPMhAhDKx3Mj4vvANEinPD6SdBVhgXNnIuvHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJsc+jB2NAkEgqIJy7PW+LkqeGNMB8GA1UdIwQY
MBaAFC8xS8AKflriM0ngVAYpOn1gYM2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHpGTHdBcC1XdUl6U2VCVUJpazZmV0JnemFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jNWY0OWQtMTBiMC00ODE4LWEwYzQt
N2MwYjliMTlmY2ZiLzEvTHpGTHdBcC1XdUl6U2VCVUJpazZmV0JnemFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9jNWY0OWQtMTBiMC00ODE4LWEwYzQtN2MwYjliMTlmY2Zi
LzEvTHpGTHdBcC1XdUl6U2VCVUJpazZmV0JnemFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmwgzp85L
o1VIBDbAR6hTDPdRkqd663m+1M2su0xep9fPNbv0W/tbkETMpD2yP8APyVYNK/kv
SdIruA6V843P7U8Io4WUn7LquZu5+hyB3xwM1ArPZK9/6rz7BLKW0+NY9jJjR8q0
s3dFWbu3UgcTXxnRF9IVMeus7hXXtKnrvXaJPJlhsHOEVjPvHfUBYeeNx/HfZutr
3nnEv3EciKvmqFOyQ7bzsgVnl71PP2lWjmMT/+bWmXtbEIfYuXQa4haVj8HIG4/H
CV3c31ZUGCiOSFU4HOlXtahvG64YKz510Rare4JhwXCXNAqblUUpkxTqIcsKJULO
A1dLrFzNhf9n3A==
-----END CERTIFICATE-----
Generated at Wed Apr 16 18:32:32 2025 by rpki-client