Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
File:                     lD4_SFbawqAFw6UjRxFN7EU5NLg.mft (raw, json)
Hash identifier:          JfiHS5hdT7VEMozgvGddgTYncgKUAhbJV2W+cEwOyrg=
Subject key identifier:   96:61:9D:C8:D1:3F:09:F1:CC:B8:12:E5:1B:72:FA:90:5C:05:F0:2A
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Certificate issuer:       /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial:       0196BA11C3EEE1CAAF27BC0A3BA416547A6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
Manifest number:          153F
Signing time:             Sat 10 May 2025 12:00:48 +0000
Manifest this update:     Sat 10 May 2025 12:00:48 +0000
Manifest next update:     Sun 11 May 2025 12:00:48 +0000
Files and hashes:         1: 1-wnHFiYjnB24GxLV0meyzqsLFuM.roa (hash: LOVK3lUPwn84ZhS3ik+53n7gRvihYYPhPwXZjIMuf0A=)
                          2: WkUeJeS2VIWyHMQB6OP6WxpRtuE.roa (hash: moR9C1uw6Uz7LXM37ENpKv40O3dD16LP7ICWKr7IDI0=)
                          3: Z0VohfzyIiLuyi-Hcs3EfPggoAs.roa (hash: dePmJdyQAMKfk9z1bRk5VV+9WiuJD5hNdYIl1QjUe2w=)
                          4: _9QXHDXD2W0fy8-Ix1_61oUgOdw.roa (hash: PBxel1cKi46iaG0YRLkS2zvm3xWWCreZ2nu/52SigQM=)
                          5: djxHGgUqKdNcqVM8z_uuH6OIUlc.roa (hash: wgIdr0CUuczPiiAnFOZrV9fosozOElD12J6XrjtfSGs=)
                          6: lD4_SFbawqAFw6UjRxFN7EU5NLg.crl (hash: k+JXS7aSjRBVaaLTBQIosmAwfwS0hJ3/BUDkTWMDifk=)
                          7: vgcjTeJgjqzs04Lo8DPrBtZnGbs.roa (hash: iV57rW45EBrtatSEbslptILthc80jn2LQS91fPeJvUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:11:c3:ee:e1:ca:af:27:bc:0a:3b:a4:16:54:7a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
        Validity
            Not Before: May 10 12:00:48 2025 GMT
            Not After : May 11 12:00:48 2025 GMT
        Subject: CN=96619dc8d13f09f1ccb812e51b72fa905c05f02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c9:d8:45:fa:00:2d:eb:c0:e8:21:a8:48:3d:
                    6d:83:f3:93:79:22:7b:01:79:2b:2d:69:74:41:1a:
                    19:94:f9:04:f4:5d:61:b2:63:59:06:63:f7:f7:83:
                    a8:92:e6:cf:4b:97:ea:0c:d1:0e:9c:8f:49:36:0c:
                    2b:ea:f0:a2:da:58:35:88:e1:91:32:29:f3:cb:57:
                    73:7a:f2:dc:d5:f1:03:64:55:2e:ab:1e:82:a5:85:
                    0c:9f:73:46:b4:d0:21:ec:8c:ab:4d:98:b0:22:5c:
                    9b:88:3f:16:99:c0:1d:4f:74:65:69:c5:a0:26:3f:
                    8b:07:84:a0:74:14:72:3b:9d:fa:a0:29:a2:21:6f:
                    d7:94:b8:96:f6:84:32:31:50:0e:22:28:96:b4:d1:
                    7b:92:2c:d8:36:81:db:a0:03:e4:10:5f:8c:20:60:
                    c6:cd:07:5b:61:8b:21:2b:ab:f4:de:2b:81:34:c9:
                    28:ec:2b:48:88:eb:7a:14:5f:77:c6:38:3f:d5:87:
                    51:f9:76:69:cd:9a:15:fb:fd:60:00:b7:f8:5d:3e:
                    56:52:d3:3a:f8:ea:fc:a0:33:95:d3:25:33:f9:83:
                    04:e9:76:37:ac:3b:11:0a:f4:4e:21:42:00:98:5d:
                    00:38:a3:81:31:cf:81:92:74:cd:5e:93:18:6f:a8:
                    71:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:61:9D:C8:D1:3F:09:F1:CC:B8:12:E5:1B:72:FA:90:5C:05:F0:2A
            X509v3 Authority Key Identifier:
                keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:57:c3:53:e1:b4:5a:e2:0f:59:23:39:1b:29:ef:fa:48:8d:
         1e:93:a2:45:17:1f:7a:79:a2:06:7c:d7:6d:4c:98:4d:6d:9b:
         a4:cb:22:a9:68:b8:53:49:b3:30:96:9c:66:14:a4:18:c2:13:
         f3:60:a8:77:a7:d3:6e:68:61:4e:4a:57:24:78:7e:ac:98:d0:
         b8:bb:90:8e:7e:04:6d:20:3c:9f:ec:04:00:42:4d:fd:72:8c:
         63:15:42:c1:ff:5c:96:3d:7a:84:2a:1c:ff:8f:da:86:f6:9d:
         a4:41:03:0a:ad:91:cc:2b:cc:ec:51:49:09:59:f1:6f:98:69:
         e6:7e:22:19:c5:0b:54:ca:9b:a7:ad:35:cf:fc:26:14:4e:52:
         ac:2a:f1:de:84:97:30:a4:da:4b:f3:85:3d:d1:19:19:4b:d9:
         83:6a:2c:29:f9:2a:ad:32:94:1b:e4:3f:fa:46:6b:90:38:e2:
         5b:59:d7:1d:26:67:7d:05:20:f2:7e:a2:6a:13:03:d0:26:7b:
         8c:72:3e:ab:5c:2e:eb:45:82:0e:bb:c6:5f:7a:ff:4c:57:9a:
         cb:96:0c:57:e1:1a:e0:0f:cc:d7:a3:94:e5:7a:fa:44:3b:81:
         08:f5:3f:09:c5:a4:dc:a5:51:0c:79:ba:c1:51:6e:93:27:fa:
         84:a0:ab:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:06:30 2025 by rpki-client