Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
File:                     LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft (raw, json)
Hash identifier:          MMtF38EYGRCPlrTBk3IDcBtihxdCL9KmF49l2qrTIvw=
Subject key identifier:   13:D2:0E:35:93:98:8F:50:66:94:35:04:E8:8B:FD:6F:B6:10:2C:C8
Authority key identifier: 2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB
Certificate issuer:       /CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab
Certificate serial:       0196C53A525282516B257899C1899CB61D3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
Manifest number:          1533
Signing time:             Mon 12 May 2025 16:00:55 +0000
Manifest this update:     Mon 12 May 2025 16:00:55 +0000
Manifest next update:     Tue 13 May 2025 16:00:55 +0000
Files and hashes:         1: LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl (hash: kOVxXL8JizRXv9MSByi+ZRH3KBTG1BMjDnEbFL4Cxzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:3a:52:52:82:51:6b:25:78:99:c1:89:9c:b6:1d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab
        Validity
            Not Before: May 12 16:00:55 2025 GMT
            Not After : May 13 16:00:55 2025 GMT
        Subject: CN=13d20e3593988f5066943504e88bfd6fb6102cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5d:54:57:7c:13:c9:2d:3d:ae:7d:24:e9:a3:
                    5b:84:f2:66:49:ce:7d:80:97:6e:06:2c:0c:ff:8d:
                    a6:19:07:e8:d4:15:d1:ff:09:e6:fb:b3:0a:5a:32:
                    5f:ca:5a:3b:dd:f0:d2:25:38:20:bc:08:e1:6f:f7:
                    64:2c:06:9e:3a:7b:b9:23:2e:78:fb:64:d9:01:d9:
                    d0:2c:85:ef:17:08:ac:91:76:ad:78:1a:92:24:cb:
                    61:0c:32:28:46:dd:91:78:24:2a:41:86:e2:23:1d:
                    7b:12:a6:e1:98:c8:91:f1:4f:b5:ed:d8:44:75:62:
                    31:e3:30:12:c1:ed:34:c6:5a:63:1e:81:c5:39:cb:
                    b1:c9:0c:26:dd:b1:d6:19:48:6d:8a:cf:be:2a:22:
                    e1:e8:a5:2c:71:8e:72:35:7f:19:70:ce:f0:69:a1:
                    4c:3e:ad:9c:9c:43:5e:14:dd:28:10:35:cd:d8:55:
                    a9:e7:21:7c:da:78:b8:9e:32:c7:3a:28:5a:a8:d5:
                    b7:33:45:9b:02:d8:74:ff:c7:39:66:94:e8:11:ef:
                    62:cb:fb:3b:74:b2:98:51:6e:1b:01:0e:6f:2a:4e:
                    9b:41:5d:e8:0a:c8:af:a1:29:24:1d:3d:e8:db:c7:
                    93:21:54:33:ce:d5:70:36:f1:40:ee:57:e4:f2:e3:
                    6d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D2:0E:35:93:98:8F:50:66:94:35:04:E8:8B:FD:6F:B6:10:2C:C8
            X509v3 Authority Key Identifier:
                keyid:2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:0d:d7:07:82:7e:d6:97:bd:38:51:c2:79:f5:02:44:93:e0:
         b0:d8:cc:47:51:e1:98:84:c2:a7:5e:7b:23:f0:46:11:a2:61:
         b3:d1:ca:35:7c:b5:76:c0:52:3b:ca:64:35:99:35:2b:2a:57:
         a5:be:14:48:66:a4:3e:2e:bb:8b:1a:f4:9d:2d:69:37:c0:6b:
         a7:50:fc:d2:36:57:c4:6f:3c:24:e4:b3:4f:b0:8a:d7:7c:34:
         ec:d5:0e:f6:06:01:5e:8d:3f:f2:49:ec:92:94:63:ff:88:33:
         85:0f:f0:2c:ad:4a:4e:7f:af:50:2e:96:6b:84:59:1e:a9:87:
         8b:62:22:ec:91:b9:a4:75:0b:63:3c:fa:e8:d2:59:57:09:04:
         c2:f4:d1:fd:ec:1d:b6:ea:70:c0:43:6f:0d:58:e8:93:5f:34:
         5d:8b:39:37:8f:a7:37:b4:38:75:36:eb:c8:0f:fb:0c:e7:0f:
         e0:1b:96:cf:a9:66:5c:d0:b4:a8:c5:58:8f:ab:f9:96:4b:e8:
         9b:54:c5:f3:54:dd:91:c6:25:96:ad:37:bb:5c:01:14:1e:bf:
         47:98:6d:8f:89:b5:96:72:ef:f0:29:18:40:46:4c:30:a8:1e:
         03:2e:2d:02:45:b2:1e:56:0f:53:e8:3c:4d:6f:98:49:ed:4c:
         1b:29:1b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:05:59 2025 by rpki-client