Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
File:                     lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft (raw, json)
Hash identifier:          77r0p5GL4o1wY9LUJXSqRW8nX0wlqR0HnDvuGIxtycc=
Subject key identifier:   47:46:95:DC:2D:23:93:F3:59:B0:C6:D2:C1:83:59:CA:F1:87:8B:71
Authority key identifier: 94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
Certificate issuer:       /CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Certificate serial:       0197B6D74041ED1BDCE1A2C7828862706442
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
Manifest number:          056E
Signing time:             Sat 28 Jun 2025 14:00:49 +0000
Manifest this update:     Sat 28 Jun 2025 14:00:49 +0000
Manifest next update:     Sun 29 Jun 2025 14:00:49 +0000
Files and hashes:         1: AlvpwmlHKsdZ888v6OW9e2qX7Cs.roa (hash: 0uWxwNIZbut6gct98ZOv80/LRPh9PRZxkpCS9vIEkzY=)
                          2: lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl (hash: 3Dt4NQQ/gD3qHs5xLP9bpgdVlqJ5JahpbgTUwhyqje8=)
                          3: mhy_PjfAH7Am8DYx1tO3WTSt-G0.roa (hash: I3P915hVSsXgQ5UO/istQ1xrxwtkn+jwbAOJufOB6ts=)
                          4: oGXIgL4XeGgFsoOzE_plr2AX24g.roa (hash: h9S8MEgqkl0Mx1T5bmYSQIXTjB58xAGkLJVMidxjJTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:40:41:ed:1b:dc:e1:a2:c7:82:88:62:70:64:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
        Validity
            Not Before: Jun 28 14:00:49 2025 GMT
            Not After : Jun 29 14:00:49 2025 GMT
        Subject: CN=474695dc2d2393f359b0c6d2c18359caf1878b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6b:06:0f:28:c6:12:28:d9:45:8e:54:e0:38:
                    80:17:1e:80:67:06:43:b0:3e:fd:b0:ec:e8:00:0d:
                    98:cf:6b:a4:b4:93:e6:07:df:44:5a:54:20:43:28:
                    f7:68:96:46:56:7c:76:07:71:b0:92:cb:77:3a:da:
                    23:e8:1a:c2:bb:cf:9b:9e:f7:00:64:90:fc:32:73:
                    bc:22:4d:9b:96:7a:c0:6c:91:28:ad:02:79:40:78:
                    93:75:89:a2:5e:4e:da:f0:25:82:4b:4f:c5:3a:29:
                    98:8a:6b:f0:82:85:3f:e3:2a:1d:e5:ec:cc:52:2c:
                    32:0b:55:be:b2:29:a1:e7:ad:cf:de:95:ed:ed:9c:
                    4b:6a:c6:1e:54:c8:a3:05:a2:22:97:fd:81:72:91:
                    6f:af:e6:7a:07:5d:50:f6:58:7d:3c:0c:13:d9:10:
                    f0:79:43:aa:67:76:70:3d:4a:4e:92:9e:cd:21:ac:
                    95:ec:6f:8c:4e:dc:08:8d:fa:e5:82:a8:32:7b:e9:
                    ee:54:5d:19:a4:a0:fd:0d:8c:06:10:11:79:0d:2f:
                    a3:c7:68:2d:95:42:1c:8e:6d:88:5b:4a:69:80:f8:
                    5d:8a:c5:10:27:0c:75:73:1f:1c:6a:c6:c5:bb:10:
                    70:81:5e:e5:0b:e4:2a:ec:87:47:82:d2:39:b2:29:
                    db:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:46:95:DC:2D:23:93:F3:59:B0:C6:D2:C1:83:59:CA:F1:87:8B:71
            X509v3 Authority Key Identifier:
                keyid:94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:fc:99:07:fc:1c:c5:b7:1d:13:82:d1:49:b8:2e:46:d2:74:
         cc:97:c7:5e:45:16:10:43:ba:51:05:fd:a4:9d:65:cf:1a:0d:
         a9:e2:35:3a:8f:77:6b:f5:9a:d9:4c:a5:5c:ff:a8:07:af:46:
         08:a7:0a:8b:45:a9:e5:c1:fb:f7:b2:c9:08:1c:57:ff:41:85:
         e5:5e:95:be:78:02:02:03:66:58:a1:83:10:c1:bc:34:ed:36:
         1e:ed:60:c5:73:fb:37:47:e0:8e:65:2a:0d:cd:16:21:14:3e:
         e8:5b:4f:dc:57:ea:e3:1f:c1:74:57:80:de:0f:9f:17:0b:2f:
         1e:e4:fb:16:37:f8:17:10:60:99:c5:06:16:33:f5:b7:31:bd:
         fa:d6:d9:86:95:fe:e5:51:e3:a2:60:38:94:1b:c6:39:5c:93:
         00:94:bb:9f:04:03:3e:53:ad:53:a9:e2:ed:4b:b2:f3:d5:50:
         44:36:f0:12:a3:ef:31:0f:71:7d:cd:e6:16:f8:78:5d:22:2e:
         30:a1:55:23:d1:9a:9d:f5:cd:f1:3c:bb:68:c5:ec:de:5c:4a:
         10:db:0e:e6:e0:89:d5:cd:30:47:21:b5:23:33:70:4c:05:bd:
         b0:dc:df:06:b5:94:a0:72:e9:e8:da:2a:16:30:b3:89:7c:79:
         e1:b0:51:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:46 2025 by rpki-client