Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
File:                     lv9F5t5Iv8A5faytg6hIMdt5UtE.mft (raw, json)
Hash identifier:          KzL/QeMGiEGQcFYTiwC+AbA/+yVK1D6urrDaeJePqFk=
Subject key identifier:   E6:A0:20:AE:BC:38:59:A8:5C:72:B7:B9:16:97:02:A6:60:C3:2D:B9
Authority key identifier: 96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
Certificate issuer:       /CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Certificate serial:       0196B7B5696B289D8A5ED4CBFDF3B24896A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
Manifest number:          0C7A
Signing time:             Sat 10 May 2025 01:00:41 +0000
Manifest this update:     Sat 10 May 2025 01:00:41 +0000
Manifest next update:     Sun 11 May 2025 01:00:41 +0000
Files and hashes:         1: BtyxmQt-yF5Itrxy7RzgES75cCE.roa (hash: j8jLpS73B8XEvRgoeYut2S/JGAmztzXRK1Z6kg/eRK4=)
                          2: abefSJyNsQ4kIHg_JbBrvyMZNs0.roa (hash: R4sEc9WgkQp8S9L0gh+lAeV2TR1f+UNjjiBWxu0UkWE=)
                          3: guRmkEKKRi3yIA2ms7Lm_Uw6LLU.roa (hash: GzLvOZNBYSJ/eLCppkRql6pMeRHG+UlZlmhw3iYs8mo=)
                          4: lv9F5t5Iv8A5faytg6hIMdt5UtE.crl (hash: awBK+lIYQxiasWDEdzkJmMJIFI6F+rL5hgFO+oGBKDA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 01:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:b5:69:6b:28:9d:8a:5e:d4:cb:fd:f3:b2:48:96:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96ff45e6de48bfc0397dacad83a84831db7952d1
        Validity
            Not Before: May 10 01:00:41 2025 GMT
            Not After : May 11 01:00:41 2025 GMT
        Subject: CN=e6a020aebc3859a85c72b7b9169702a660c32db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:dc:ac:bd:f5:b4:1c:b7:b5:41:06:01:34:7f:
                    83:d1:2c:67:88:39:33:ed:23:63:93:40:4b:ee:96:
                    ab:2f:a3:c3:3a:a5:b8:9d:73:90:74:69:8f:d2:f7:
                    e5:9a:80:90:5b:8e:37:28:4a:4d:db:34:b8:c8:85:
                    1a:c5:da:46:f5:dc:d3:39:5a:cc:a1:ce:57:ef:60:
                    78:99:40:9f:fd:32:8c:81:04:3c:54:c9:8d:6e:9d:
                    f2:8c:19:02:40:62:a0:a9:a6:6b:70:ce:35:03:77:
                    48:3f:4e:86:38:8d:27:20:27:ae:24:69:62:ca:40:
                    0c:c5:fb:10:26:5c:ca:e7:f7:a3:3a:1e:dd:03:98:
                    48:27:59:6b:f9:75:fe:9d:e9:90:47:db:48:62:b0:
                    a4:a3:fe:a3:df:83:af:5f:bf:6e:57:b7:40:64:57:
                    35:37:7b:c0:96:24:03:6c:75:4f:4c:a7:e8:17:10:
                    6b:04:e2:cd:d9:1e:de:b1:23:ca:a8:50:97:8a:87:
                    7c:d3:23:f4:fb:7b:40:00:e3:fb:19:f5:89:19:a3:
                    45:78:a6:bf:58:79:1f:93:3d:a5:11:c3:73:d0:5d:
                    0d:3e:5c:6b:ad:50:66:de:32:8a:fe:48:01:20:16:
                    48:37:4d:db:41:40:7f:c4:3b:5d:3c:f9:b5:8d:24:
                    72:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A0:20:AE:BC:38:59:A8:5C:72:B7:B9:16:97:02:A6:60:C3:2D:B9
            X509v3 Authority Key Identifier:
                keyid:96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:7b:c8:cd:f9:84:82:db:a0:4e:93:4a:5f:a9:f7:30:52:49:
         de:77:69:fa:7d:ee:35:3c:11:51:12:3d:31:15:64:78:99:19:
         52:45:5e:ce:fb:32:8e:2b:af:4a:50:ac:c5:3a:10:47:34:b0:
         5c:37:88:fa:b0:89:fd:d2:42:94:4a:9e:a6:84:47:c5:93:83:
         e4:56:48:48:25:56:46:48:9a:97:28:8c:65:45:05:2b:de:19:
         ba:8b:36:3c:f5:cd:85:a4:64:0a:f4:be:66:34:ea:c8:99:8d:
         01:c0:b9:f1:1b:c5:e3:a8:5a:55:e2:35:79:76:f9:ae:23:35:
         aa:4f:d6:39:4f:25:e5:72:97:31:f1:9f:81:c8:d8:3e:b3:57:
         26:be:8e:3c:fe:a9:18:c4:1b:39:d1:dc:11:0f:f7:db:cc:fe:
         35:29:7e:b6:80:52:49:ca:af:89:3c:1f:64:9b:30:c7:51:6e:
         6b:2c:d4:b9:94:d6:5d:04:85:19:58:4a:f7:14:5b:ec:39:ca:
         9e:e2:eb:0f:94:6d:db:a4:27:96:40:e1:e2:73:5c:e2:cb:9b:
         fb:cd:b4:7e:79:af:bf:58:93:d5:76:6d:f8:2a:81:48:e9:9d:
         fd:b5:f2:42:21:5c:45:00:07:7f:58:a2:7f:f1:3d:19:af:c5:
         c9:25:18:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:30:20 2025 by rpki-client