Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
File:                     _LVQtxDX8PlLDOQyzw5OlQzE4co.mft (raw, json)
Hash identifier:          xFCraMiT+K31dyif9YhJvH08X48fmzji+jS/izuu8OY=
Subject key identifier:   2D:54:EE:F5:4A:CF:3D:4C:47:B5:03:91:2F:51:7F:56:FD:A4:E1:A7
Authority key identifier: FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA
Certificate issuer:       /CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
Certificate serial:       0196C3146C544AF0FEA894F75C8E7297B6A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
Manifest number:          0352
Signing time:             Mon 12 May 2025 06:00:17 +0000
Manifest this update:     Mon 12 May 2025 06:00:17 +0000
Manifest next update:     Tue 13 May 2025 06:00:17 +0000
Files and hashes:         1: _LVQtxDX8PlLDOQyzw5OlQzE4co.crl (hash: suuVQ7wgb3IeVdrXQ6FksSR3A+Qg6rGBacyDaOzCBgs=)
                          2: nFeHU4vrYRFo-11ovr0Tku54r4I.roa (hash: LbVqewnx/HQRoXd8S+Bxr4d2t69NAHQNt9Q/3oZNLT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:14:6c:54:4a:f0:fe:a8:94:f7:5c:8e:72:97:b6:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
        Validity
            Not Before: May 12 06:00:17 2025 GMT
            Not After : May 13 06:00:17 2025 GMT
        Subject: CN=2d54eef54acf3d4c47b503912f517f56fda4e1a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4d:f4:5c:70:53:37:4d:97:ce:a5:fc:29:41:
                    25:53:43:76:ea:9f:f5:b5:27:36:37:94:54:ea:ae:
                    29:97:fa:6b:46:62:a9:e8:e0:04:3a:c0:79:f7:cf:
                    56:13:9f:63:f7:82:09:ad:d5:e0:d6:9b:3f:d4:ea:
                    8d:aa:70:a5:38:b5:65:70:4e:b5:d3:8d:a1:cd:e3:
                    00:6f:bd:be:32:e1:15:80:40:7c:7c:41:44:6f:9a:
                    fe:12:04:a4:17:45:88:0d:30:3a:ba:d6:5c:aa:72:
                    b3:74:31:1c:e0:5c:ef:0e:7b:34:83:15:99:6f:7a:
                    47:76:da:b2:32:eb:b9:5a:cc:98:e6:7b:3b:6e:d3:
                    88:93:39:81:b9:dc:26:bd:a4:ee:73:55:58:46:3d:
                    ec:61:40:c7:43:10:bf:a9:99:1c:84:1a:a9:9e:c3:
                    32:0f:fd:19:10:c5:30:ee:e2:a5:b7:02:20:fc:5c:
                    e8:a7:6e:fe:97:f3:01:0d:5a:8a:5a:d6:cf:ab:fc:
                    1d:28:a2:a8:06:1a:e9:52:a7:56:a7:3c:2e:b2:30:
                    78:0e:ce:03:d8:09:30:35:eb:fd:ae:73:3d:5f:9d:
                    50:f5:eb:f9:81:b3:2e:d1:e2:be:65:db:83:d9:cb:
                    69:52:be:c0:cd:e9:18:47:1e:d2:77:f8:c1:2a:67:
                    c7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:54:EE:F5:4A:CF:3D:4C:47:B5:03:91:2F:51:7F:56:FD:A4:E1:A7
            X509v3 Authority Key Identifier:
                keyid:FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:10:45:15:95:d9:c7:04:ef:93:e1:44:89:a3:6e:0a:58:b2:
         64:f8:5a:5c:81:28:e9:69:80:7b:05:fd:1a:e2:cd:f1:52:86:
         df:54:ea:ae:b8:4e:52:4e:93:b6:32:1f:ae:8b:e4:d7:24:64:
         5b:2c:7d:1f:11:89:5c:a2:81:a0:86:f9:95:da:99:89:0a:33:
         91:40:29:f0:9b:c0:dd:c8:27:f8:50:17:ef:79:cf:e4:19:f1:
         bc:33:7e:d9:f8:33:cb:36:18:b4:f4:47:c6:99:59:75:49:fe:
         4c:2c:b2:11:4c:44:23:6e:a6:10:4c:62:54:06:a5:37:a7:66:
         43:fe:e0:cb:ea:34:8f:ac:e4:e8:71:c4:12:96:02:22:02:05:
         24:d7:25:7d:2f:a1:f8:24:f0:86:37:a1:80:38:af:6a:d9:bc:
         a3:bd:2b:6c:9a:e5:57:ca:fb:c5:1f:f3:46:a4:7d:98:ca:71:
         0c:59:7d:21:02:2e:32:e5:79:b8:cb:4f:f3:4a:02:0e:40:85:
         da:f3:b7:4d:18:ae:48:06:88:d2:2d:ef:64:5a:8d:56:8d:88:
         bf:3c:92:9f:f1:41:d6:b1:69:02:fa:8a:7d:a7:d6:da:45:93:
         79:4d:6d:ac:e9:6f:88:ee:95:37:d5:ae:14:3d:ab:31:75:7f:
         53:a9:4f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:55:40 2025 by rpki-client