Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
File:                     Lz6vTsdU9KDj2EyiU61AbunH3hU.mft (raw, json)
Hash identifier:          s/Df7S8hITqyZBAD4FL2bHnPOt2ikcM62ta9gz3p37U=
Subject key identifier:   0A:49:39:6C:B5:34:4F:26:07:A0:6E:46:46:DD:23:8A:8E:EE:AA:8F
Authority key identifier: 2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
Certificate issuer:       /CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Certificate serial:       01964556887EA35C24FCF8D9DAD5935A99C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
Manifest number:          1172
Signing time:             Thu 17 Apr 2025 20:00:20 +0000
Manifest this update:     Thu 17 Apr 2025 20:00:20 +0000
Manifest next update:     Fri 18 Apr 2025 20:00:20 +0000
Files and hashes:         1: GGXhG4jYLlNwNhb_4jLsATV3sZ4.roa (hash: coSPb15gvXo5/kLV6jjcSbTa8zuHjiQZwBsQ1ZTodzg=)
                          2: Lz6vTsdU9KDj2EyiU61AbunH3hU.crl (hash: KqiM/zT8c70krnS9dv1Ua45RMu0rKqXf6a3EhuT6vFk=)
                          3: ffIXUQgNnNxkun86gvscnN9T0cI.roa (hash: VW5SzImNSTB3Slsj3lqEAsmeeuKYUrnsLBc5k+WJ/m8=)
                          4: lVizdiQgX20fzcRSA4GIK4wJrtQ.roa (hash: XzPZ+5jYbipWydPDPeCQpQP8Pnh6Ui1fyKGQoWrzSvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:56:88:7e:a3:5c:24:fc:f8:d9:da:d5:93:5a:99:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
        Validity
            Not Before: Apr 17 20:00:20 2025 GMT
            Not After : Apr 18 20:00:20 2025 GMT
        Subject: CN=0a49396cb5344f2607a06e4646dd238a8eeeaa8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1f:e4:02:6b:a4:c8:4b:8a:35:ef:e1:da:e1:
                    ab:7a:8e:b0:05:89:7b:b9:a4:e2:39:73:aa:0c:3c:
                    96:01:68:85:2b:ea:62:5e:db:5e:f1:d9:56:a4:0c:
                    26:4c:aa:1c:a6:81:4a:ea:da:b1:b7:31:c8:cd:4c:
                    56:5c:38:20:cd:08:cf:8d:dd:25:5c:4c:e7:29:0a:
                    a9:e2:64:47:61:24:ed:1b:75:1e:a6:03:a3:6b:e0:
                    42:c7:27:99:19:42:b6:33:a9:39:b1:b6:80:f5:4c:
                    33:88:3e:08:34:58:28:07:47:70:d5:b0:c2:7f:bd:
                    cc:61:6b:3d:ad:23:38:15:bd:a8:09:05:68:96:cc:
                    e7:91:65:f4:81:85:aa:c8:2b:33:8c:1b:e9:dd:31:
                    e8:cb:d3:33:b9:fd:0a:ca:4b:28:75:ab:5c:63:1d:
                    d3:27:ba:ad:10:39:bb:28:2e:dc:71:cd:e1:a8:32:
                    e7:f5:eb:50:d9:bf:a3:c2:b5:12:34:f5:97:e8:a3:
                    1c:93:b4:94:34:18:04:2b:57:33:89:49:26:c5:40:
                    1f:e9:10:95:ff:13:84:73:df:e6:56:31:cd:0b:1a:
                    0e:bf:fb:1e:98:cd:85:50:a7:76:9a:d2:d0:98:42:
                    33:22:d9:d7:0e:77:72:72:0b:dd:70:4d:f5:54:0d:
                    7a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:49:39:6C:B5:34:4F:26:07:A0:6E:46:46:DD:23:8A:8E:EE:AA:8F
            X509v3 Authority Key Identifier:
                keyid:2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9e:f0:81:fb:55:67:67:80:b6:7f:cc:65:76:e4:12:d6:90:
         bd:59:4e:85:7c:9d:b8:32:85:b3:07:38:c5:4c:13:6c:89:2e:
         1e:61:6e:bc:c5:12:86:2d:85:ca:8b:b0:58:76:16:8d:d8:df:
         53:cf:af:4e:25:53:68:23:57:05:fe:85:fb:77:dd:f8:2b:e4:
         9e:2a:27:aa:39:91:d9:f4:3a:bc:b2:3c:c4:d7:23:b4:3a:5c:
         bd:11:d9:7b:55:6b:1a:04:1e:3b:8e:1e:bd:e9:a8:f9:39:0e:
         26:50:36:e1:d8:f2:6d:b8:96:f5:26:de:5a:96:3e:57:54:52:
         c9:80:18:46:b4:8b:46:22:2c:8d:95:5f:cc:42:bc:6c:4d:a9:
         6b:aa:2c:7f:82:55:ee:6f:ba:ba:fd:55:99:9d:37:c8:fa:2f:
         06:8c:ae:61:6e:82:6d:e9:83:a1:cb:ca:43:84:0b:ba:c7:b6:
         50:46:3e:3f:04:c5:b7:3b:91:8e:5b:a0:c4:3a:c9:b5:59:36:
         34:ff:29:44:e2:4a:15:e1:d4:cd:ac:a8:8c:2b:fa:79:34:b7:
         ee:b3:56:67:7f:c4:78:63:c6:70:b0:60:61:2a:34:36:2f:0e:
         a0:30:80:9a:31:f9:5b:a7:f6:16:a2:f9:d0:1e:69:80:32:02:
         5a:b9:af:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:35:22 2025 by rpki-client