Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
File:                     Lt7Joglt7BA7ri18N5bg1HCFwgI.mft (raw, json)
Hash identifier:          VGTzHiqpDOHVnR1+5BDIQ/jSHTAINwX05HzV+T18drE=
Subject key identifier:   00:A4:7D:14:DE:9A:AE:AE:D0:07:A0:D3:C6:1A:34:BC:A6:0A:45:E5
Authority key identifier: 2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
Certificate issuer:       /CN=2edec9a2096dec103bae2d7c3796e0d47085c202
Certificate serial:       0196BF011E47A3CA42899D0DCC3887FB7939
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
Manifest number:          045A
Signing time:             Sun 11 May 2025 11:00:43 +0000
Manifest this update:     Sun 11 May 2025 11:00:43 +0000
Manifest next update:     Mon 12 May 2025 11:00:43 +0000
Files and hashes:         1: 1--dh8h3abapBU31_SJb0tICxWyY.roa (hash: gh7e8+8RLdU8Cqp+9LrY341h9N8Mjd03If+6kczgoM8=)
                          2: Lt7Joglt7BA7ri18N5bg1HCFwgI.crl (hash: fxAzv25cqm4Z7/TlKviGZxvkFQoTlEflaV++41FfD+c=)
                          3: gomnRiII4UUcGSHuI8nXBgSpWmo.roa (hash: Rx7SYdS0kAPSQJ6WBVcTiVGAF8kqx/mt3lPi/ehy1+s=)
                          4: mv2c9mpu4nsKL2iXSU5ybGfbMyA.roa (hash: n7gKzzkF9393BLuqwZ2ZBCD9txFPO+ZrNkXIbbBUXgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:01:1e:47:a3:ca:42:89:9d:0d:cc:38:87:fb:79:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2edec9a2096dec103bae2d7c3796e0d47085c202
        Validity
            Not Before: May 11 11:00:43 2025 GMT
            Not After : May 12 11:00:43 2025 GMT
        Subject: CN=00a47d14de9aaeaed007a0d3c61a34bca60a45e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4e:3c:13:69:9b:44:a8:b8:cd:04:89:aa:9d:
                    ba:a5:3f:47:3c:31:02:c0:72:5c:bd:e9:15:21:71:
                    40:20:1b:6c:f3:00:b3:8e:52:91:2b:2f:0b:e0:07:
                    ff:cb:4e:d0:93:45:08:93:47:ee:55:43:0a:71:4d:
                    19:24:ed:92:7d:54:40:a7:3f:d3:84:9e:de:9a:b6:
                    35:99:42:55:11:e9:c9:b4:dc:dd:28:07:ff:a9:d0:
                    b5:83:9a:ff:ad:0a:04:47:d7:2e:af:3e:f5:f9:80:
                    a5:51:84:a8:e0:12:99:af:37:44:90:a7:ee:d9:b6:
                    9a:3c:4c:18:9e:92:09:44:69:d5:ca:7f:6e:f8:f5:
                    55:16:5a:ca:94:9c:d8:f3:ce:e2:ff:71:a9:93:e4:
                    85:a5:75:9c:78:54:89:77:e5:2d:60:72:00:dd:77:
                    21:2c:47:9d:be:fd:f2:c0:f2:fc:3d:1c:05:29:c0:
                    2d:a1:5a:6e:1b:5e:cd:f1:a1:73:85:f6:e9:bc:17:
                    a8:70:a8:9b:fc:87:51:57:9d:fe:b2:fd:d7:79:d4:
                    cb:99:3e:36:29:40:c5:25:9a:87:c4:28:22:85:b1:
                    44:2a:d5:97:73:57:6f:5f:3b:5f:1a:8f:cf:fd:3c:
                    1e:79:8c:2c:e3:05:4b:8a:be:a5:4c:4a:cf:1e:02:
                    36:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A4:7D:14:DE:9A:AE:AE:D0:07:A0:D3:C6:1A:34:BC:A6:0A:45:E5
            X509v3 Authority Key Identifier:
                keyid:2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:32:a9:a4:11:b1:70:f1:e4:a8:53:1a:79:a1:87:35:fd:ec:
         fe:b2:51:94:05:2a:f8:71:6c:be:b6:4b:ff:ec:d5:de:e5:a7:
         28:9a:e6:8f:5c:cc:ad:eb:71:3b:d3:19:46:3a:89:4c:df:c0:
         ad:b8:89:95:30:31:68:ae:13:dc:98:f6:82:dc:47:91:1b:8a:
         d9:68:2d:6b:42:a9:ed:fe:cf:c4:31:37:f1:93:dd:c4:68:3a:
         73:7b:9d:23:eb:d3:62:5f:82:f2:c0:fa:ca:3c:17:4a:64:06:
         66:91:22:27:c2:7f:02:27:2f:ed:ec:d1:70:58:60:c4:fb:45:
         e4:14:84:38:56:92:eb:5f:78:fa:86:92:8d:6f:40:b1:5d:a6:
         ad:72:87:45:45:d1:88:31:1c:14:2e:e2:ef:0a:13:5d:e6:a3:
         02:c8:78:3f:f1:e7:33:39:f1:2d:90:d4:38:c4:ca:10:80:be:
         d6:40:e7:ad:bc:ac:f4:d6:1d:91:3c:68:f8:9e:e4:34:e1:c3:
         98:74:f4:80:46:43:64:a7:30:59:09:15:27:d4:f1:55:e8:95:
         58:52:fa:89:e1:e1:4c:98:ad:bc:c4:29:3f:1c:87:f8:cd:71:
         ee:52:ba:fb:6a:0c:9a:48:0b:3a:2d:25:68:b2:3f:78:2f:b1:
         b6:9d:d5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:37:48 2025 by rpki-client