Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
File:                     LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft (raw, json)
Hash identifier:          O3vyuP8M0iBg4j4zjC+5digeKrE6RWRZoCMA08nwkqA=
Subject key identifier:   E0:F4:7C:74:97:9A:86:1E:FA:5A:70:F0:C2:A8:C5:9C:59:F6:0D:DC
Authority key identifier: 2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36
Certificate issuer:       /CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
Certificate serial:       0196B4B43B539E7AF1881FF5CFCD622FBCC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
Manifest number:          1442
Signing time:             Fri 09 May 2025 11:00:32 +0000
Manifest this update:     Fri 09 May 2025 11:00:32 +0000
Manifest next update:     Sat 10 May 2025 11:00:32 +0000
Files and hashes:         1: LAKkoAndva90SPNLZD7phJpzuqA.roa (hash: OPV3y3ajSvAOqXe2gXH83vJ/FKUxnXcCmYMqv/uyJZU=)
                          2: LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl (hash: 0aNFyQOHuCM6wJETircgXl8M9U/IiK5s9KYh0g2xfcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b4:b4:3b:53:9e:7a:f1:88:1f:f5:cf:cd:62:2f:bc:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
        Validity
            Not Before: May  9 11:00:32 2025 GMT
            Not After : May 10 11:00:32 2025 GMT
        Subject: CN=e0f47c74979a861efa5a70f0c2a8c59c59f60ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:54:52:61:20:12:29:b0:45:b7:d9:2f:aa:88:
                    ed:b3:74:81:23:1b:6d:f5:10:94:f4:3d:56:f3:54:
                    fa:51:fb:36:28:37:81:be:7f:9a:cd:fb:cc:63:b2:
                    69:b3:d5:5f:ee:16:ce:99:04:4c:d1:c0:c1:0a:dd:
                    82:42:a7:2b:ca:8f:01:15:70:76:e7:ac:a8:e6:09:
                    dd:a8:30:20:91:96:56:70:c7:7c:a5:a9:36:99:02:
                    49:c1:c8:55:d4:e2:61:e6:77:17:34:39:da:96:47:
                    f4:f0:56:28:01:31:9f:eb:5e:9f:32:8b:6f:05:32:
                    cd:15:93:59:e5:de:7d:31:43:7f:81:14:6c:45:dc:
                    10:f6:a8:79:0a:37:98:dd:f5:03:88:2c:18:8d:e5:
                    ee:f3:fd:fb:3e:5e:73:7a:57:89:12:7d:df:86:c1:
                    20:5f:94:c6:b1:cc:a9:d4:d6:64:77:72:67:8c:a5:
                    26:ba:39:1e:00:37:f3:c0:55:06:cb:d2:6a:7e:57:
                    ae:66:73:cc:87:ff:0c:b4:de:a8:a3:94:47:29:86:
                    d2:a2:e6:73:05:fe:09:3a:c8:f2:5b:e2:51:e1:58:
                    8a:71:c1:ce:ae:21:0b:a6:95:b8:65:9f:7e:5e:9c:
                    1b:27:b6:48:3c:e5:81:fc:e4:d4:49:4d:25:ca:1c:
                    27:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F4:7C:74:97:9A:86:1E:FA:5A:70:F0:C2:A8:C5:9C:59:F6:0D:DC
            X509v3 Authority Key Identifier:
                keyid:2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:06:de:b5:b1:0b:b2:c2:2f:8e:92:0c:e6:cd:c1:4e:95:da:
         d8:10:96:90:d1:5c:47:e5:a1:3e:65:e7:21:1b:92:4b:34:d8:
         5b:58:4c:91:1f:f1:1b:74:af:ff:10:cd:7d:6b:3b:98:5f:e1:
         fd:24:18:e8:6d:06:cf:08:7f:72:bd:0c:46:44:04:f5:43:18:
         3d:7c:73:99:33:eb:72:e3:db:df:09:7a:f6:09:2f:5d:d3:85:
         c1:ca:44:93:af:5e:05:be:3b:1e:a0:59:64:7b:31:11:6e:be:
         f2:01:0e:ab:a2:21:4b:cd:13:e0:b5:8d:7e:ca:cd:21:46:f1:
         38:f3:d8:02:bb:73:94:b6:f8:4d:d2:bd:9e:c2:32:9f:cf:dc:
         e2:8b:fa:67:4b:22:54:72:a7:24:cb:9d:60:13:30:3b:3e:6e:
         58:58:f1:8a:ab:14:5f:49:a1:18:52:e0:91:d6:46:c5:d2:b8:
         84:c1:e8:85:d1:e1:c2:31:cd:72:07:c0:49:14:ac:7c:a2:02:
         5d:45:e7:d9:a3:10:13:e3:87:49:3f:d0:cb:11:6f:fd:1a:09:
         5e:0e:4c:92:a5:53:11:d1:00:ef:bf:fe:2c:85:89:22:06:56:
         54:f9:5b:6d:f1:90:de:eb:af:66:71:18:fd:11:6d:1f:97:0d:
         73:dc:a1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:40:15 2025 by rpki-client