Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
File:                     lbmAuBA5WB4NLDelEhbNeXKbDHE.mft (raw, json)
Hash identifier:          pfJCcNMfV7o1Uz5zJd61g/IZoePOnVZ5rWP1c427kYQ=
Subject key identifier:   61:60:FB:A4:BF:4F:00:00:FA:DB:DE:09:80:4F:B6:6C:33:39:EB:A8
Authority key identifier: 95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
Certificate issuer:       /CN=95b980b81039581e0d2c37a51216cd79729b0c71
Certificate serial:       01976F9A58794A2534165F1A8FA413DFA27B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 18:01:15 +0000
Manifest this update:     Sat 14 Jun 2025 18:01:15 +0000
Manifest next update:     Sun 15 Jun 2025 18:01:15 +0000
Files and hashes:         1: ANSAYrE9HNntD61TvEpJUmG8rgw.roa (hash: 4+iM21UqhAp7nE5c7mZKQw9TVqg+SMBpGm5UpV8V8dc=)
                          2: PJ5ra5RQEPuenhUZKqA-ySi8au4.roa (hash: HAE/ZYsuA8aESklvJ9Rn5+/ozrtEQRVx0jFM8lv6NbI=)
                          3: lbmAuBA5WB4NLDelEhbNeXKbDHE.crl (hash: TEUr+/MYE9m2id/JSMDAkwrCZt8rLOgLc+WhLisRWzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:9a:58:79:4a:25:34:16:5f:1a:8f:a4:13:df:a2:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95b980b81039581e0d2c37a51216cd79729b0c71
        Validity
            Not Before: Jun 14 18:01:15 2025 GMT
            Not After : Jun 15 18:01:15 2025 GMT
        Subject: CN=6160fba4bf4f0000fadbde09804fb66c3339eba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bd:8e:6c:d9:83:94:67:91:d8:03:7c:9f:1b:
                    7a:15:fb:a0:08:c0:44:dd:70:12:f4:74:5d:5a:52:
                    3f:99:39:6e:1d:76:0b:22:5c:39:96:f1:05:3f:cd:
                    88:3b:57:04:cb:7e:7b:f1:8e:e5:9e:93:00:75:41:
                    71:33:dd:69:03:55:8b:70:a6:4e:e9:9e:ab:3c:6d:
                    c6:92:c0:e4:7e:ad:34:f8:a1:0e:7e:be:38:ca:c9:
                    08:44:d1:1d:93:7b:7d:71:d5:2d:e3:aa:e1:83:06:
                    69:17:9c:fc:8c:0e:ee:22:5d:69:4e:32:a8:fa:df:
                    61:ee:cc:25:95:95:3d:4f:c2:38:71:2d:3a:cd:83:
                    5f:50:50:77:c6:71:1e:23:6c:ef:fe:24:62:15:b2:
                    24:d0:d9:6e:03:d0:2e:48:45:97:81:46:84:2b:9c:
                    b7:09:33:73:39:2e:fa:7b:8a:57:55:10:55:ec:7b:
                    52:3b:cc:7d:54:44:cc:34:8a:ba:cc:05:a8:b2:58:
                    00:9b:47:f9:ed:5b:ff:f2:a5:79:0c:8d:36:27:dd:
                    bf:45:ee:a4:4a:79:f0:d7:1f:1a:4c:fc:8b:a5:c5:
                    26:e1:9a:65:e1:06:53:59:f4:c3:9c:6e:32:fc:a1:
                    b8:c1:12:5c:41:c1:9f:3b:b7:64:00:cb:29:a6:61:
                    cd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:60:FB:A4:BF:4F:00:00:FA:DB:DE:09:80:4F:B6:6C:33:39:EB:A8
            X509v3 Authority Key Identifier:
                keyid:95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b4:b1:58:c8:2e:19:6e:88:d3:24:8a:52:16:da:f8:f6:0b:
         6d:71:9c:b7:05:b1:e3:a9:c4:60:85:36:a7:06:d6:8e:f6:38:
         2d:e3:0d:f9:8b:31:ea:76:d7:ee:24:1c:88:9f:93:03:09:e9:
         32:fc:3c:dc:28:1c:5c:e6:25:4f:08:3c:9f:21:95:fa:1b:86:
         82:52:43:21:32:ee:03:4a:7d:bf:e2:46:38:20:18:41:92:85:
         5e:2a:b2:12:b1:9b:48:f0:dd:56:67:ed:ce:d9:87:99:e3:dd:
         4c:2f:9a:9d:0f:18:0c:04:74:ad:67:5d:d7:1b:b0:59:8f:77:
         3f:47:98:08:b3:3f:67:46:bb:fc:57:8d:27:7f:60:8b:f3:78:
         48:96:4a:17:52:0f:6a:7f:a6:3c:1b:8b:da:84:e1:6a:9b:04:
         05:07:28:ec:b4:b9:0b:fd:b4:5a:01:24:4f:39:9e:1c:89:a6:
         69:f4:e0:cb:dd:72:c2:a6:dc:a8:93:45:0c:bc:ca:07:9d:75:
         f2:04:89:c9:e2:b4:4a:62:8f:53:27:1c:33:2f:f3:e8:db:d3:
         19:ae:ed:2d:f3:7a:2a:6a:44:fc:d9:15:3e:0c:53:8d:4f:1f:
         47:64:df:7c:e3:fc:e8:97:2b:6f:e0:2f:d4:05:d3:d4:34:ad:
         01:e0:86:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmlh5SiU0Fl8aj6QT36J7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1Yjk4MGI4MTAzOTU4MWUwZDJjMzdhNTEyMTZjZDc5NzI5
YjBjNzEwHhcNMjUwNjE0MTgwMTE1WhcNMjUwNjE1MTgwMTE1WjAzMTEwLwYDVQQD
Eyg2MTYwZmJhNGJmNGYwMDAwZmFkYmRlMDk4MDRmYjY2YzMzMzllYmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv72ObNmDlGeR2AN8nxt6FfugCMBE
3XAS9HRdWlI/mTluHXYLIlw5lvEFP82IO1cEy3578Y7lnpMAdUFxM91pA1WLcKZO
6Z6rPG3GksDkfq00+KEOfr44yskIRNEdk3t9cdUt46rhgwZpF5z8jA7uIl1pTjKo
+t9h7swllZU9T8I4cS06zYNfUFB3xnEeI2zv/iRiFbIk0NluA9AuSEWXgUaEK5y3
CTNzOS76e4pXVRBV7HtSO8x9VETMNIq6zAWoslgAm0f57Vv/8qV5DI02J92/Re6k
Snnw1x8aTPyLpcUm4Zpl4QZTWfTDnG4y/KG4wRJcQcGfO7dkAMsppmHNkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFg+6S/TwAA+tveCYBPtmwzOeuoMB8GA1UdIwQY
MBaAFJW5gLgQOVgeDSw3pRIWzXlymwxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJtQXVCQTVXQjROTERlbEVoYk5lWEtiREhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82MzQxNzItYmIzNy00ZDgyLTg4YTIt
OTQyZDJjNmM1ODU2LzEvbGJtQXVCQTVXQjROTERlbEVoYk5lWEtiREhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC82MzQxNzItYmIzNy00ZDgyLTg4YTItOTQyZDJjNmM1ODU2
LzEvbGJtQXVCQTVXQjROTERlbEVoYk5lWEtiREhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7SxWMgu
GW6I0ySKUhba+PYLbXGctwWx46nEYIU2pwbWjvY4LeMN+Ysx6nbX7iQciJ+TAwnp
Mvw83CgcXOYlTwg8nyGV+huGglJDITLuA0p9v+JGOCAYQZKFXiqyErGbSPDdVmft
ztmHmePdTC+anQ8YDAR0rWdd1xuwWY93P0eYCLM/Z0a7/FeNJ39gi/N4SJZKF1IP
an+mPBuL2oThapsEBQco7LS5C/20WgEkTzmeHImmafTgy91ywqbcqJNFDLzKB511
8gSJyeK0SmKPUyccMy/z6NvTGa7tLfN6KmpE/NkVPgxTjU8fR2TffOP86Jcrb+Av
1AXT1DStAeCGKg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:38:40 2025 by rpki-client