Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
File:                     L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft (raw, json)
Hash identifier:          8xq+RBSLZPrgmbfzLdme5VtZ0FLemSrkqXPrH50xHns=
Subject key identifier:   54:31:04:03:F6:A7:6C:58:D4:02:6E:B5:5C:8D:66:6F:07:0D:DB:B4
Authority key identifier: 2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20
Certificate issuer:       /CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120
Certificate serial:       01976960A30E80B67AB6EF796011AA47DA5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
Manifest number:          1588
Signing time:             Fri 13 Jun 2025 13:00:30 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:30 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:30 +0000
Files and hashes:         1: L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl (hash: FE8FFY5WFH5s6YR4pU5Akrk2RNsVa34SnZlmqKHMF4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:60:a3:0e:80:b6:7a:b6:ef:79:60:11:aa:47:da:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120
        Validity
            Not Before: Jun 13 13:00:30 2025 GMT
            Not After : Jun 14 13:00:30 2025 GMT
        Subject: CN=54310403f6a76c58d4026eb55c8d666f070ddbb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:17:5a:ff:36:57:b4:4d:8c:e2:32:2d:0e:c0:
                    69:cc:75:2d:0b:f3:21:bf:dd:73:72:66:0b:95:b8:
                    fe:c8:ff:8a:3c:34:18:d0:19:d8:0e:ed:a1:46:09:
                    90:ff:56:dd:85:35:a4:65:6b:20:5b:ab:28:ba:4c:
                    1d:fe:b4:1a:03:f7:41:f6:b4:bf:32:38:38:fe:d5:
                    5c:8a:8a:4f:0b:10:75:72:7a:87:9b:19:c3:8f:fa:
                    4c:2a:9e:14:bc:2f:ca:7d:00:b3:45:b7:df:01:c6:
                    cd:6e:f8:47:5a:82:5f:56:6b:b3:b2:30:05:e3:62:
                    01:e5:fe:4d:53:82:c7:08:0e:45:f8:b7:84:57:e3:
                    81:ff:60:3b:62:2e:32:0f:7c:a4:72:c1:6d:78:91:
                    2e:a0:95:e9:20:a4:6f:30:f4:ab:50:99:5a:8b:cb:
                    9a:94:de:aa:1d:bf:ae:e4:25:ea:f5:fe:3f:95:b7:
                    46:db:10:ed:20:8e:89:7f:63:49:49:d7:23:89:59:
                    ea:38:19:fc:43:07:aa:5d:88:9f:a7:28:ff:90:68:
                    61:16:05:08:56:c5:1f:46:3f:f5:a8:19:21:65:fd:
                    d3:77:06:b3:a7:e4:8a:b7:4a:91:43:74:52:92:b0:
                    5e:4a:a9:71:29:47:15:e7:78:0f:26:92:37:b8:76:
                    23:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:31:04:03:F6:A7:6C:58:D4:02:6E:B5:5C:8D:66:6F:07:0D:DB:B4
            X509v3 Authority Key Identifier:
                keyid:2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:85:57:df:5b:2f:b2:6a:ba:61:ca:ea:15:ef:3d:11:ff:c2:
         84:f5:e5:c2:83:0a:39:eb:27:63:84:3b:24:31:5d:96:a1:14:
         72:01:e7:ea:0a:e3:3e:e6:6f:fb:d2:2a:94:38:d3:52:20:35:
         86:89:22:9f:23:d9:53:a1:9a:12:bb:4b:9f:3f:0c:80:46:f8:
         dd:56:0a:4a:14:9a:b0:97:b6:8f:4d:b7:3b:30:da:4a:a7:84:
         37:0a:66:c8:e0:23:53:77:1e:b3:2f:fa:0d:3f:f8:7e:4c:d0:
         58:ca:de:d5:18:c3:3c:d8:52:3b:ce:4d:92:22:2b:9e:66:17:
         39:5f:d2:f7:97:ac:e4:32:59:4c:61:76:fd:2b:1d:e2:3b:af:
         a9:89:d7:c5:d9:60:7e:dc:d6:9c:dd:52:31:2f:02:3a:fa:1e:
         9e:0f:01:14:44:71:4d:1a:27:f3:5f:be:e9:f3:e1:73:a8:71:
         ed:a7:5a:2f:11:d9:13:be:8e:fe:3e:b6:0e:96:e6:8c:e9:ea:
         b1:5c:c3:ec:2b:4d:f4:7f:c4:9e:e8:aa:00:d1:15:76:54:e1:
         68:af:92:b9:23:e5:50:58:0d:a0:e2:4c:06:e7:43:e5:4b:3e:
         cd:6d:e9:65:7f:9b:c8:5a:b3:14:c6:aa:9c:4e:d9:3d:ee:dd:
         14:88:da:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:51:37 2025 by rpki-client