Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
File:                     l0kuzDe64rn4HaApOFgX1DPFBGc.mft (raw, json)
Hash identifier:          kBIz3Z+KTOGHiJpdKVAjJ6xryZolt42z3o3YTOe39xo=
Subject key identifier:   6E:FD:D1:76:33:7C:48:6D:D8:BB:D6:B4:12:0E:9D:D4:7A:D7:5F:17
Authority key identifier: 97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
Certificate issuer:       /CN=97492ecc37bae2b9f81da029385817d433c50467
Certificate serial:       01969E6343119A48363D70273553E900330F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
Manifest number:          0A1F
Signing time:             Mon 05 May 2025 03:00:27 +0000
Manifest this update:     Mon 05 May 2025 03:00:27 +0000
Manifest next update:     Tue 06 May 2025 03:00:27 +0000
Files and hashes:         1: l0kuzDe64rn4HaApOFgX1DPFBGc.crl (hash: oxhtI2/1Fr0CBovLb2w8FjNYS3fIICNG6iXTtcbLu0Q=)
                          2: wvepJ_S5tr7m_zhxo8MkVscbOBo.roa (hash: 3bW1rADdI6dgzgPslPIXDLnlwFBtZeQLDvcY24JdJFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:63:43:11:9a:48:36:3d:70:27:35:53:e9:00:33:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97492ecc37bae2b9f81da029385817d433c50467
        Validity
            Not Before: May  5 03:00:27 2025 GMT
            Not After : May  6 03:00:27 2025 GMT
        Subject: CN=6efdd176337c486dd8bbd6b4120e9dd47ad75f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:87:3d:a1:7d:86:e0:e5:20:e9:75:48:ae:b7:
                    4c:8d:4f:e8:aa:14:24:d8:9f:96:00:97:38:bc:da:
                    d8:28:cd:0c:ed:30:2a:06:e1:ba:c1:95:c4:37:89:
                    69:c2:3c:a9:93:04:df:5d:53:75:3e:a4:29:e5:fa:
                    1d:6f:af:ed:d5:4c:d3:fe:24:4b:89:7c:ca:8d:82:
                    76:d1:cf:fd:29:66:48:30:b8:dc:5b:1d:15:8a:04:
                    63:25:96:f3:fc:9e:2d:83:cb:39:1f:df:c9:7f:ab:
                    92:ca:11:0f:d2:3f:b1:79:86:54:f2:4f:f7:15:1e:
                    cf:91:c2:29:35:20:ad:8c:d1:0b:4f:5b:b2:e9:08:
                    95:f2:b4:cb:39:d1:9a:81:ce:24:85:01:d2:ff:22:
                    c5:70:a4:22:d8:b7:c0:f9:52:4a:62:e0:df:61:e1:
                    b4:bb:af:5e:b5:e2:10:e2:af:5a:4a:e9:0a:fc:78:
                    33:85:6e:f2:9a:75:04:11:de:34:69:89:72:c9:cc:
                    c2:7b:c3:e7:b7:ec:36:9f:ae:95:ee:51:e5:4a:b2:
                    58:80:49:09:66:08:e2:97:fe:71:15:92:9a:70:7e:
                    0c:88:50:71:d4:5d:6a:ea:80:90:e1:31:82:96:f9:
                    be:48:6a:9b:7d:aa:ce:2f:dd:0f:39:95:c2:2f:6d:
                    24:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FD:D1:76:33:7C:48:6D:D8:BB:D6:B4:12:0E:9D:D4:7A:D7:5F:17
            X509v3 Authority Key Identifier:
                keyid:97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:cf:71:01:f8:bd:37:4e:e5:7e:39:13:97:af:07:f4:38:57:
         01:ff:29:b0:32:0e:e8:7b:b5:e6:ef:9a:73:28:51:66:75:13:
         5d:c4:a9:ce:e9:06:66:c3:7b:0f:f1:7b:21:b6:e2:65:43:96:
         18:65:8f:bd:2f:77:4c:7a:13:1d:9c:39:4c:66:be:7a:b5:a0:
         ce:d1:f8:51:36:ff:5b:f6:ad:05:04:f1:78:af:4f:75:12:a1:
         7a:de:d7:f7:99:b1:0f:fb:72:f1:e6:06:80:44:85:15:a7:97:
         60:77:dd:44:68:e1:d3:2d:ab:49:c2:79:e1:65:f5:98:97:25:
         a1:65:c3:26:a6:c4:7c:de:51:54:96:0d:f9:91:42:f4:36:6a:
         78:20:64:17:f4:df:55:ac:34:11:7f:32:12:ae:da:b9:bf:7d:
         b3:09:fb:58:14:e6:ae:bc:79:c0:42:c6:e9:3c:75:07:67:4e:
         ad:31:11:87:d8:c4:f3:13:df:41:ba:9c:8c:17:98:80:d7:1b:
         b9:c9:0a:12:32:94:93:66:c9:6f:c8:63:09:f4:69:7d:5a:66:
         e3:9f:2b:55:cc:f2:28:9a:d9:6d:0d:24:0d:a9:47:80:57:82:
         a8:d7:ab:ae:1c:c4:b9:de:b3:9c:2b:8e:01:88:59:95:85:48:
         93:ba:89:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:36:45 2025 by rpki-client