Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
File:                     LNpfA-r1E6d_LsIN5bsWcsXSeas.mft (raw, json)
Hash identifier:          BSkwTmoMrCP0IcRb5LumGlW2Z4WnsEqwvxd/I/g7nYQ=
Subject key identifier:   A0:4D:44:4F:A3:36:40:7A:64:0E:A9:24:2A:5B:F7:0A:43:B0:E0:37
Authority key identifier: 2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
Certificate issuer:       /CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Certificate serial:       01962B97792048BFEE8EA2B60F86D638C92B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
Manifest number:          14E8
Signing time:             Sat 12 Apr 2025 20:01:09 +0000
Manifest this update:     Sat 12 Apr 2025 20:01:09 +0000
Manifest next update:     Sun 13 Apr 2025 20:01:09 +0000
Files and hashes:         1: I_El3VD2zizuoyNdnUn9kOdcLek.roa (hash: 74aqpCJ0dpEabBMkIS/h3jijqMv/0y3rfXL3oZ/vRAo=)
                          2: LNpfA-r1E6d_LsIN5bsWcsXSeas.crl (hash: iAT4hW+Pyl+rXotfe8ytdtHMKtgTI+GrMEkmnay9jG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 18:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2b:97:79:20:48:bf:ee:8e:a2:b6:0f:86:d6:38:c9:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
        Validity
            Not Before: Apr 12 20:01:09 2025 GMT
            Not After : Apr 13 20:01:09 2025 GMT
        Subject: CN=a04d444fa336407a640ea9242a5bf70a43b0e037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:75:5b:92:38:1c:48:e3:ea:07:d9:cc:6c:c7:
                    ac:57:32:06:ec:e0:98:9f:ad:46:15:87:dc:7a:34:
                    e7:d8:80:e7:a8:cc:9b:16:04:e0:6a:fd:2d:a0:39:
                    09:7d:77:26:1c:44:e0:e9:33:ca:01:cf:94:57:c2:
                    ca:ae:b9:bf:a6:a1:8a:b2:02:0f:b7:02:e6:33:85:
                    c7:d0:6d:94:1b:4e:a5:08:35:ec:60:bc:b9:02:e9:
                    49:7a:3c:ed:0f:24:ac:c5:83:d9:f6:3a:54:ee:2f:
                    a1:d7:5f:0e:26:f9:c0:9d:59:44:0d:b1:36:2f:b9:
                    f7:5b:60:d5:67:e5:5a:bb:bd:c5:ab:03:47:5d:3d:
                    d3:3b:e4:0d:20:d6:6b:45:ec:71:68:c3:fe:4a:54:
                    96:65:c7:fa:29:e7:a5:55:a7:bf:d6:e5:3f:d5:29:
                    56:6f:ab:a1:f2:0f:f4:1c:ca:72:5e:e3:b2:15:87:
                    94:a9:8d:a7:8a:5f:14:d9:92:75:e8:f3:a6:b8:35:
                    e5:1c:45:51:d1:5d:9d:41:ce:29:8b:dc:e1:cd:e5:
                    a7:9e:6c:97:4f:a4:12:cd:ac:46:3a:81:23:c5:50:
                    ce:61:39:6f:d5:e2:41:2d:a6:96:7b:70:0b:30:33:
                    5e:cf:02:b1:62:26:c1:14:84:00:bc:bb:ed:d4:0f:
                    93:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4D:44:4F:A3:36:40:7A:64:0E:A9:24:2A:5B:F7:0A:43:B0:E0:37
            X509v3 Authority Key Identifier:
                keyid:2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:bb:63:56:68:c2:7e:d5:77:5e:44:56:f6:ae:17:39:55:7a:
         78:79:45:ca:6b:ed:df:48:88:3d:4a:3c:fd:86:8b:c1:42:84:
         38:89:b9:b5:f9:1a:aa:0f:ae:54:38:ab:15:90:3b:5c:7e:0f:
         44:d9:5e:51:94:b5:a2:81:e7:05:2f:9d:8b:a9:4c:21:26:fd:
         be:14:1f:0b:a2:1c:fb:bf:ca:c5:b9:4c:df:9d:f3:b9:80:4f:
         62:fd:3d:a5:1b:1a:32:12:41:a4:d8:ee:a9:b1:a2:88:0b:6e:
         c0:0f:40:8d:c6:4a:91:02:93:be:ea:5b:35:b0:8f:85:24:e8:
         0a:e5:b4:ba:1a:63:4a:2a:23:17:ba:76:08:56:fa:3b:eb:cb:
         11:43:06:ee:cc:98:7b:8f:59:c9:6b:2f:37:0a:63:71:49:0f:
         b1:c6:97:d0:6c:b1:8e:c8:ae:7b:60:86:76:55:37:c1:18:b1:
         bd:0d:bd:78:6c:7b:2e:ef:72:a7:91:e4:cb:07:1b:f0:4a:65:
         b4:f9:31:16:c6:cc:ab:c0:12:22:40:a9:a5:9e:89:13:b3:e1:
         fc:90:20:a6:2c:ce:05:03:a6:ed:84:64:ab:c9:43:ce:7f:45:
         f6:26:9e:0a:5a:04:31:30:38:82:67:95:f2:80:5d:53:40:16:
         3d:bb:1e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:42:31 2025 by rpki-client