Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft
File:                     LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft (raw, json)
Hash identifier:          tBNG8CzpUyHAavEXFev1RpFbySCA94yj1oGjazZjpVI=
Subject key identifier:   53:61:F3:1A:8B:D6:42:27:74:60:6F:36:E7:DF:CD:ED:26:1B:DC:80
Authority key identifier: 2D:C5:6E:E0:CC:43:CE:E2:28:C4:0C:E4:FC:47:2D:D4:EB:DB:1D:FC
Certificate issuer:       /CN=2dc56ee0cc43cee228c40ce4fc472dd4ebdb1dfc
Certificate serial:       01976DAB8E6DB8A928F809C95CA54A93D594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LcVu4MxDzuIoxAzk_Ect1OvbHfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft
Manifest number:          0245
Signing time:             Sat 14 Jun 2025 09:00:49 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:49 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:49 +0000
Files and hashes:         1: 5e9MeZDhShrujLkSqLN7eYMHWl8.roa (hash: /dmgZK0n8EohgIkkcn1lUf0J3aamzQZdCxpas+dAOSo=)
                          2: LcVu4MxDzuIoxAzk_Ect1OvbHfw.crl (hash: Na67nWNsUL/p9AwUnaGxMX80x+6RAiyE0PzBuGgSnv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LcVu4MxDzuIoxAzk_Ect1OvbHfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:8e:6d:b8:a9:28:f8:09:c9:5c:a5:4a:93:d5:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dc56ee0cc43cee228c40ce4fc472dd4ebdb1dfc
        Validity
            Not Before: Jun 14 09:00:49 2025 GMT
            Not After : Jun 15 09:00:49 2025 GMT
        Subject: CN=5361f31a8bd6422774606f36e7dfcded261bdc80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:3a:9b:2a:ad:27:13:42:23:80:18:12:54:24:
                    93:bc:f1:10:41:08:ee:c5:68:72:34:f2:c8:f6:0a:
                    a8:8d:40:f8:73:42:44:42:ea:9b:94:b4:c6:fb:f1:
                    a4:0f:06:47:8b:cd:21:a8:f7:9c:2a:af:40:44:e3:
                    7b:e7:65:a6:dc:dc:5f:fe:fe:91:28:e5:5c:ab:5a:
                    80:1e:c4:d7:bb:2e:2b:44:ab:50:d4:12:9b:ea:0e:
                    6c:a0:78:e2:97:61:24:f0:f3:db:d8:51:0a:43:a4:
                    d9:40:c4:12:06:1c:a2:bd:4a:24:a1:d2:37:7b:03:
                    67:05:6c:23:a2:ba:94:41:4e:13:65:b4:66:5e:54:
                    b1:99:6a:b3:71:52:7e:9a:8d:e9:cc:46:3e:4c:37:
                    56:cd:82:aa:2c:05:5d:fa:29:a5:a5:e1:9a:35:55:
                    4d:b8:7a:2f:f1:d5:d5:31:f8:7c:ff:20:b6:54:20:
                    b4:56:b4:8e:1b:29:3d:6a:15:1d:e6:ee:ba:71:cc:
                    42:14:98:17:cd:a6:cc:47:f9:9b:7b:a0:6e:73:45:
                    33:c3:2a:28:20:95:ff:07:e8:1b:23:ac:4f:08:35:
                    0c:ab:0f:f4:e9:33:5a:0a:c7:6c:11:02:9d:4c:a0:
                    25:da:df:27:ad:67:29:20:36:17:44:f3:ab:5b:cc:
                    05:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:61:F3:1A:8B:D6:42:27:74:60:6F:36:E7:DF:CD:ED:26:1B:DC:80
            X509v3 Authority Key Identifier:
                keyid:2D:C5:6E:E0:CC:43:CE:E2:28:C4:0C:E4:FC:47:2D:D4:EB:DB:1D:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcVu4MxDzuIoxAzk_Ect1OvbHfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:93:ed:d9:56:c0:ce:08:19:e6:0c:9f:6e:85:49:36:a9:d3:
         90:9f:0f:80:72:d4:76:78:48:7e:cf:03:72:af:72:c9:2b:7f:
         3f:50:02:b7:2b:ba:11:e3:3b:76:a2:46:5a:cd:28:66:c9:31:
         37:8c:a8:57:68:e3:09:f5:5d:e4:f7:55:12:83:ba:63:49:e0:
         80:b9:ad:14:19:35:5f:e7:29:98:d2:da:bc:33:f2:bd:65:76:
         65:00:c8:87:0e:bd:b4:6b:19:9a:b1:e7:54:e8:f0:06:a4:88:
         63:ff:35:ab:ae:ea:44:b8:b9:cb:71:8e:37:57:bd:46:8a:d5:
         aa:38:b7:f3:0e:f4:03:4b:3b:89:32:7a:5c:9c:a6:5a:2f:ed:
         27:87:8a:43:94:82:94:94:fb:5c:9b:e4:e0:2b:1e:bd:e1:6e:
         8a:bb:02:38:f7:b6:98:74:c3:5a:7a:f7:12:d9:78:67:52:20:
         b4:ee:82:b0:8a:3a:4c:57:eb:c1:c5:ef:b7:44:36:a6:54:6a:
         41:17:4b:87:8d:8f:b4:2c:fc:02:11:92:01:e6:23:b4:e6:4e:
         91:46:76:99:64:0e:03:55:8d:37:9c:04:38:be:07:f1:41:86:
         fa:ae:2a:d9:2b:25:3d:85:a0:24:07:e8:ae:14:e6:bc:38:5a:
         f1:27:82:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:57:13 2025 by rpki-client