Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
File:                     LgojFvTptYqlLe7lx9H0uER27IY.mft (raw, json)
Hash identifier:          niDh/qcBxK5SKjAGvsXbZYi8ITn5dF9kcwA0froA4p8=
Subject key identifier:   C3:CF:58:71:47:5D:B2:7A:B8:86:56:35:98:56:C6:9E:51:ED:DF:0F
Authority key identifier: 2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86
Certificate issuer:       /CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
Certificate serial:       01969E9A98F3DD9CE2A47AD5F64BF58145DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
Manifest number:          0405
Signing time:             Mon 05 May 2025 04:00:53 +0000
Manifest this update:     Mon 05 May 2025 04:00:53 +0000
Manifest next update:     Tue 06 May 2025 04:00:53 +0000
Files and hashes:         1: LgojFvTptYqlLe7lx9H0uER27IY.crl (hash: WigoUojPwnnEN1FpRpzlCARfnWGbsTHqiGKolB8vjhc=)
                          2: vD_wlkgUOjWQBEijGo7zeI_oZVI.roa (hash: IGyJ6LlIsYwYqLNNokHWFdPflPgBGjUNsyBItLlUI9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:9a:98:f3:dd:9c:e2:a4:7a:d5:f6:4b:f5:81:45:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
        Validity
            Not Before: May  5 04:00:53 2025 GMT
            Not After : May  6 04:00:53 2025 GMT
        Subject: CN=c3cf5871475db27ab88656359856c69e51eddf0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:25:64:e7:a1:dc:46:fc:20:fc:0e:f1:f3:9c:
                    1d:80:81:e4:6e:be:d7:ff:44:62:29:ed:d9:2c:fd:
                    d8:ae:fd:4f:5e:2e:18:b8:6b:55:b3:dc:0e:cf:39:
                    38:ea:c8:fb:fe:ed:17:19:92:01:1d:53:98:d9:da:
                    84:3e:9f:1b:f1:79:42:ee:5f:c0:b7:f5:c4:b1:b2:
                    a3:66:69:64:25:19:ce:91:03:ea:19:9a:18:b0:9d:
                    b9:3b:8b:6e:63:24:b5:0c:cf:f0:f4:6e:4a:f2:e0:
                    8e:9d:c8:7e:55:b6:5a:4d:13:55:f5:c2:8d:b6:67:
                    e6:ea:3e:b1:80:58:0a:fe:99:1d:8b:19:fe:91:94:
                    9b:72:88:43:46:89:b3:85:c9:56:03:30:a9:f9:ac:
                    22:ee:14:a1:75:bc:e5:2a:63:51:fb:06:c6:4a:d9:
                    29:e8:64:1d:7e:ee:38:b5:2a:a8:4d:d5:c8:01:ec:
                    bb:af:6c:75:07:45:be:86:94:d6:09:18:bf:ef:81:
                    95:c0:0c:45:f6:df:83:f0:45:64:eb:ab:e9:72:24:
                    a4:56:4b:ab:78:55:8b:80:81:38:16:f0:17:a4:98:
                    76:8b:e2:50:2f:7c:29:b9:cd:3a:69:8e:9f:b7:60:
                    bf:21:e6:73:93:5b:fb:d2:b7:0c:6d:05:60:37:01:
                    c5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CF:58:71:47:5D:B2:7A:B8:86:56:35:98:56:C6:9E:51:ED:DF:0F
            X509v3 Authority Key Identifier:
                keyid:2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e0:e4:57:4d:6c:30:c1:11:14:ea:22:80:0a:1e:24:df:35:
         fe:74:67:e9:39:04:9d:91:18:73:cc:4d:de:01:19:0e:e2:3c:
         79:41:06:cd:8d:49:e3:d4:fb:78:0f:59:4a:dd:5a:af:9a:5d:
         95:fd:cf:34:b1:89:df:ca:f2:5e:d0:f4:a2:4a:37:a6:61:58:
         53:64:13:51:dd:75:4c:a0:d0:93:a9:af:cd:9a:c4:e9:fc:81:
         e4:5e:73:9c:c5:c1:bb:c8:3b:ce:6e:0a:6c:32:b0:8b:af:bb:
         26:b9:de:5c:a0:ca:a8:a4:aa:4b:72:d1:a2:8b:3c:f3:e1:42:
         fd:2e:50:3d:9a:7a:78:a8:dc:b2:38:15:65:e7:53:da:4c:d3:
         ca:00:fa:d6:6c:e8:4f:ac:78:16:f7:f7:7e:66:34:8b:9a:09:
         55:4b:98:55:dd:95:b3:a1:ee:00:7a:59:44:f3:e7:2f:5b:78:
         83:fa:6c:29:a2:38:29:67:ba:49:f1:e5:4f:41:cc:20:10:e0:
         a2:a2:b0:64:2c:a0:eb:7b:3f:76:9f:0a:50:51:04:28:a5:d0:
         57:da:7f:31:e1:ba:7c:68:23:f1:65:f3:cf:09:a5:4e:7c:58:
         ed:c9:c5:4f:61:17:c4:f1:a5:f8:f8:29:d4:6d:7c:6a:5d:54:
         19:52:a4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:17:13 2025 by rpki-client