Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
File:                     LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft (raw, json)
Hash identifier:          RQYXb9WN0jYmdP5vkYMmQc/R+DVfI0p+7xr9/4nHch8=
Subject key identifier:   8C:9E:A8:96:DE:74:81:9A:88:E3:2B:30:C6:70:3E:83:C9:88:5F:4F
Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
Certificate issuer:       /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Certificate serial:       0196B66B9D32936A79750001DFAD05A9ECFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
Manifest number:          1532
Signing time:             Fri 09 May 2025 19:00:27 +0000
Manifest this update:     Fri 09 May 2025 19:00:27 +0000
Manifest next update:     Sat 10 May 2025 19:00:27 +0000
Files and hashes:         1: LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl (hash: 1Ix0IDj6Z1W2TFI8R7nN3OmbOVDX09CBtMchS8SE5LQ=)
                          2: TZLeuUkI4CjEnpLLtWGzEA-joRI.roa (hash: YPtfqltU/oN+o/HH/QLZS2oxA/bwOyzCiodegvrQed4=)
                          3: ai_A7AG70LoK-2voHZXOhAOVMf0.roa (hash: hn2u5HU4dhrWeJ6INpgfQ8ZAf8MY3atf6SETHEmPiMU=)
                          4: c_zOfM7vLQJCIH9ZtTubpG60GUI.roa (hash: PR+2Ofr0AqtJDndUiUP4vY2xuU8uzBfHcV/JcyjNBZU=)
                          5: vMV24DhvZ51gpTgovgA0DHavZ5Y.roa (hash: pvB3MpylBNAYQdSCjBtx8G9c34zYXq6BUWOPnr06JNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:6b:9d:32:93:6a:79:75:00:01:df:ad:05:a9:ec:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
        Validity
            Not Before: May  9 19:00:27 2025 GMT
            Not After : May 10 19:00:27 2025 GMT
        Subject: CN=8c9ea896de74819a88e32b30c6703e83c9885f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:22:2b:5c:80:fc:ad:a8:70:e3:23:58:cf:c0:
                    4b:f5:37:fe:f7:ed:8c:e6:e1:1d:b6:2c:0c:9c:b5:
                    74:a3:32:6f:9c:80:8c:db:2c:66:51:fa:59:16:14:
                    1e:3b:01:cd:99:7b:21:31:dd:f9:56:53:3f:95:1d:
                    b7:b3:be:32:8e:46:e7:94:c2:cc:53:cd:6d:a6:94:
                    6b:ec:62:f8:9e:f9:35:fa:e6:87:81:6d:c8:f8:7b:
                    e6:51:6d:dd:ae:ab:44:49:82:bd:74:16:cf:b2:68:
                    43:0f:4d:13:b2:18:8a:50:dc:48:f3:ce:06:da:cc:
                    69:33:1d:7d:e2:cc:2c:02:be:01:4a:ef:c1:10:c8:
                    6a:8c:aa:11:f0:b8:f8:84:5e:d2:49:30:8b:55:aa:
                    1f:2f:a8:09:49:d9:76:4a:7e:b8:7a:59:17:44:66:
                    40:f2:b9:6e:57:53:03:f6:4a:e6:cc:e4:23:7e:fc:
                    6a:13:5b:d8:ed:90:a8:cc:62:ea:b2:56:99:b8:5e:
                    e9:31:21:35:31:3c:2b:94:5f:a3:e2:53:23:98:6c:
                    24:f7:6e:e9:da:b5:01:6c:3e:30:c6:63:5b:06:20:
                    0b:71:61:df:a6:b4:92:da:f7:d4:07:f1:e5:ef:70:
                    89:17:3b:2e:5f:58:92:63:fa:0a:52:cd:1a:ed:6b:
                    39:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9E:A8:96:DE:74:81:9A:88:E3:2B:30:C6:70:3E:83:C9:88:5F:4F
            X509v3 Authority Key Identifier:
                keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:76:ef:dd:85:82:fd:ae:e8:52:ba:b5:45:a9:11:60:fd:0a:
         23:90:7e:90:ff:06:3a:fc:7b:0c:c3:d5:de:d8:07:5f:bd:45:
         b5:ca:8f:d1:b3:f7:ad:2e:17:1f:83:f8:7e:c5:b6:07:20:3b:
         92:ac:20:41:b7:17:49:2d:ca:42:ba:61:9a:d7:ed:5e:35:61:
         be:27:fd:8d:a5:4c:1c:4d:ff:03:8a:bf:bb:39:ec:0f:5a:dd:
         ae:10:ea:1c:fc:1b:c5:13:f0:4a:52:3d:60:ae:14:62:10:97:
         83:5e:35:5d:58:e2:56:83:3f:aa:97:a3:8a:59:b7:93:2e:ae:
         1d:79:3f:fb:fd:0a:92:fb:47:98:9e:28:88:e6:ed:fb:e3:d1:
         74:f4:73:73:44:9b:2b:4b:1a:cd:2f:87:54:0e:be:6a:fd:6b:
         1a:a2:55:59:54:09:a8:13:88:8d:ce:39:8b:2a:55:3e:ea:f9:
         8f:50:dc:b4:49:b4:a6:98:d5:7e:9d:c3:c2:11:49:f4:93:ff:
         35:49:8f:86:41:f6:8e:8f:d5:9a:d8:f4:24:30:89:cc:ea:d1:
         2d:ea:ac:78:7d:25:dc:ea:60:52:60:ae:de:76:08:7a:98:2e:
         b9:94:02:72:79:e6:6a:63:0b:54:d1:b5:b2:1c:92:42:42:e6:
         0a:52:96:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:52:29 2025 by rpki-client