Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft
File:                     LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft (raw, json)
Hash identifier:          dzaSvVUeUL8wyrkenxGRC8TAtEKjuJEaV+jUps4EwUQ=
Subject key identifier:   A8:B6:10:FE:2A:A2:FB:2B:F1:92:1F:01:33:80:C7:91:6C:3C:06:06
Authority key identifier: 2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2
Certificate issuer:       /CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2
Certificate serial:       0196BA487E6958C33CFEB7BED921B8C3529A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft
Manifest number:          0CA4
Signing time:             Sat 10 May 2025 13:00:35 +0000
Manifest this update:     Sat 10 May 2025 13:00:35 +0000
Manifest next update:     Sun 11 May 2025 13:00:35 +0000
Files and hashes:         1: LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl (hash: ylxJqLr1mEztibdhYqP0s3+Xv3PIfMh9leMCUtOPGXE=)
                          2: OelzXCNyRdJDcTAMZ4XyMzIgxcQ.roa (hash: bMfXjKhotrEhF8a4BqCjobsAnEO9NWeA0d2QlYefuYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:48:7e:69:58:c3:3c:fe:b7:be:d9:21:b8:c3:52:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2
        Validity
            Not Before: May 10 13:00:35 2025 GMT
            Not After : May 11 13:00:35 2025 GMT
        Subject: CN=a8b610fe2aa2fb2bf1921f013380c7916c3c0606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ca:7d:15:a9:ad:b2:e5:45:98:69:a3:9e:14:
                    cb:4e:d9:02:46:98:f2:38:11:cd:31:61:44:47:1c:
                    0a:92:1a:f4:c4:06:a5:44:73:3a:ba:06:3e:49:3c:
                    84:72:a6:44:8b:78:2f:fc:fc:f8:7b:7a:b6:dc:b7:
                    4d:ca:d0:a4:0b:e2:c8:f5:ce:e9:52:3c:9e:b8:d4:
                    0a:5e:1b:36:7b:62:cb:41:8b:de:6e:69:54:88:09:
                    13:bd:06:6b:33:a6:8a:3d:b3:cc:de:a2:b4:f9:07:
                    e6:bb:7b:53:6a:fc:c4:5c:ef:6f:67:3f:54:39:50:
                    e1:54:a6:b6:8e:f4:1e:c8:6f:04:fe:49:0e:c2:63:
                    05:4a:68:09:f2:e1:d4:9c:d8:c5:08:81:37:e4:24:
                    0d:7d:ab:13:89:03:af:f0:eb:e2:f7:9e:4e:68:d9:
                    e5:6a:a8:1b:ca:a2:1c:20:1d:1f:85:63:5d:99:38:
                    ce:16:51:41:45:d6:b7:85:ee:07:e3:97:80:3f:ff:
                    4e:e9:45:d6:bf:be:96:58:55:e7:4f:5f:fb:cf:ed:
                    93:6b:86:2e:45:c2:8b:6a:ab:e6:d5:be:fe:36:2a:
                    98:c1:b4:c2:be:20:1e:13:37:6a:a7:c7:0e:6f:08:
                    91:f4:2f:d1:21:3d:78:fe:64:66:69:3f:a6:7b:57:
                    2e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B6:10:FE:2A:A2:FB:2B:F1:92:1F:01:33:80:C7:91:6C:3C:06:06
            X509v3 Authority Key Identifier:
                keyid:2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ca:99:e6:da:0e:cf:3b:5d:65:ff:45:9c:b1:2d:05:71:71:
         b1:06:62:24:05:1c:7c:07:9c:80:89:bc:e8:16:84:a0:3c:cf:
         ae:10:39:e7:b7:d7:d7:b5:df:3b:0d:ef:78:55:9e:25:d9:83:
         b9:4c:4a:71:bc:b3:f2:4f:ef:be:82:cf:94:c8:9e:10:21:4b:
         b2:ff:a6:9e:44:7d:6f:02:63:46:1a:58:0f:40:10:dd:71:58:
         8a:89:f8:75:05:2b:79:44:aa:8d:31:91:61:42:7e:c1:be:b9:
         3b:5d:a5:a0:67:ac:8e:46:c0:f4:51:71:86:98:48:af:63:58:
         92:e2:b5:4d:13:3c:79:f9:82:94:2f:fc:2c:d1:7a:08:82:18:
         a3:ea:cc:85:6e:59:e9:75:d6:a0:6f:48:55:05:7c:26:c7:ab:
         bc:ac:d9:ab:93:98:78:7a:b5:9c:68:a7:89:be:80:9d:40:d6:
         b7:32:aa:99:1e:6c:d3:d3:2f:f5:0b:1c:03:8a:7c:98:84:1f:
         11:41:90:f0:4e:c4:d3:65:28:48:70:70:c3:b2:29:8a:1b:b2:
         86:ee:16:d2:88:d4:c2:43:c9:2a:d2:0f:58:b3:b7:55:68:64:
         29:c4:90:9c:0d:68:b5:70:06:ff:7e:01:46:c4:c1:c0:95:f5:
         a1:4c:09:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:40:14 2025 by rpki-client