Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
File:                     hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft (raw, json)
Hash identifier:          gJ2par+1x0B3jQCAJ8Rh5mJNG+CDBFhpGrv3LCMknjI=
Subject key identifier:   9E:46:A4:54:26:D8:56:DF:95:9E:E8:F1:24:43:64:61:9D:B5:71:FB
Authority key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
Certificate issuer:       /CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Certificate serial:       0196B85A502CDC217D88C9C4155F2889D512
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
Manifest number:          1385
Signing time:             Sat 10 May 2025 04:00:48 +0000
Manifest this update:     Sat 10 May 2025 04:00:48 +0000
Manifest next update:     Sun 11 May 2025 04:00:48 +0000
Files and hashes:         1: LES-4NZ2gVtnFASVcYj5bV4jo4M.roa (hash: 2G3ShlRTsn405STqDwUmkyh047FRwXPBWPG0OI/1t/0=)
                          2: S6pEjPdKiDCWT5YS10t21bo7p-Q.roa (hash: pTlwMPVuX2tODYiLJ6YhmWJdp6Y8iDisqjt0seyZtRU=)
                          3: SKBCllM8zLJEbYHJd_EV3itY7MY.roa (hash: Zfen1G7f+hqJM+l1P8PiztKtQe2yRYBq/nE3Qk55hCM=)
                          4: hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl (hash: y0l0+4niE7RdKyUfyh4wosE6Dg1VjpYdCkxvwcBhavw=)
                          5: s8MofJ3kjxOEIcJCRG7XRBu9KS8.roa (hash: Pq2tE0OOs+hTFPNcOAxmOBUj8Uu1ECYXKDV5TZ3hyck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:5a:50:2c:dc:21:7d:88:c9:c4:15:5f:28:89:d5:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
        Validity
            Not Before: May 10 04:00:48 2025 GMT
            Not After : May 11 04:00:48 2025 GMT
        Subject: CN=9e46a45426d856df959ee8f1244364619db571fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d7:77:fc:e7:05:43:32:bb:79:c8:0c:ad:54:
                    42:2b:4a:d1:2e:65:1f:24:5d:4a:03:d1:97:d6:f4:
                    25:2e:97:57:32:db:45:98:bf:b6:0c:f8:14:ce:e4:
                    74:58:6e:fb:78:af:3b:b7:5d:50:ee:6f:38:a3:ea:
                    12:b1:44:e2:ab:45:5e:7d:33:24:5e:9f:5a:7b:8e:
                    1f:96:cc:a4:8e:bb:79:22:e5:f9:84:eb:d1:bb:c6:
                    e1:12:a6:7f:15:e0:f2:84:f5:57:73:67:b6:8e:0a:
                    90:2b:61:31:1f:5c:44:eb:5f:69:9e:1d:20:ff:f4:
                    ee:f6:ce:ea:a7:fb:c0:31:f9:c3:4a:9e:37:d8:20:
                    c6:c7:cf:66:05:e9:8e:08:37:85:e3:59:d3:6b:e9:
                    14:1a:ed:46:16:0e:c5:3f:02:d5:86:7f:fd:68:9f:
                    3f:22:c7:ce:66:0b:30:16:10:09:80:35:db:05:25:
                    59:39:1a:9a:37:8b:64:67:66:b3:a8:59:0b:5c:b9:
                    c3:ac:b9:0d:3d:11:b0:b1:dc:55:bd:42:3d:8d:6a:
                    c4:f9:22:38:b0:7d:f9:94:2f:c7:2a:27:45:b0:82:
                    62:a3:bd:20:43:dd:65:ec:cd:f3:15:11:a1:4b:6c:
                    0b:90:64:7a:59:8b:b3:57:fe:8e:6f:58:0e:a2:a7:
                    97:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:46:A4:54:26:D8:56:DF:95:9E:E8:F1:24:43:64:61:9D:B5:71:FB
            X509v3 Authority Key Identifier:
                keyid:84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:98:ed:5e:54:a9:57:5e:2c:cc:49:cb:3d:f8:12:24:36:ea:
         49:94:a4:a0:03:3f:8f:26:b0:14:d5:37:cc:fa:69:51:7f:fa:
         75:22:93:ef:45:ab:97:a3:df:16:31:e0:5d:e9:0b:b7:13:7a:
         b5:1b:00:26:e3:e1:a3:54:89:ea:a5:68:63:09:08:a9:17:df:
         cf:d3:70:9d:e6:87:ba:4c:89:1a:f6:0f:43:44:d9:e7:8e:3e:
         ce:a5:62:ed:af:89:3b:99:19:03:b2:6e:9c:df:1f:6d:fa:92:
         ee:a5:db:4d:44:69:ec:48:69:7e:35:81:71:d3:2c:81:c3:bd:
         85:35:3f:58:bd:70:fc:48:77:87:6f:c2:ee:0b:ac:e2:23:d7:
         e5:9b:12:d8:c3:1b:c1:f4:64:6e:c4:47:08:81:29:64:f7:a0:
         08:3a:47:3a:67:ef:3e:df:eb:29:8a:65:7e:65:46:74:a8:fc:
         47:ce:78:4e:d1:75:7c:50:55:bc:e0:02:e9:e9:bc:68:bb:0a:
         ad:be:8d:62:32:01:cd:da:5c:be:b8:a2:f8:0f:70:ee:2e:9c:
         92:dc:a2:85:94:24:07:db:a2:dd:29:e8:f1:84:5a:29:e6:f4:
         3e:97:ee:7b:35:43:02:76:f4:4c:9c:91:69:b2:4f:d5:33:85:
         23:3b:39:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:41:47 2025 by rpki-client