Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.mft
File:                     lwVGLL_Idkd35toxtZXXzL_jgkM.mft (raw, json)
Hash identifier:          vQ7kihCDCKXsOnFOGoZwusBZWcsD+uWCfg4LR93aBdM=
Subject key identifier:   2D:A0:34:3F:66:0B:E4:47:AE:47:78:2F:30:27:E3:94:A3:94:8A:6E
Authority key identifier: 97:05:46:2C:BF:C8:76:47:77:E6:DA:31:B5:95:D7:CC:BF:E3:82:43
Certificate issuer:       /CN=9705462cbfc8764777e6da31b595d7ccbfe38243
Certificate serial:       01976BF45273E76710634F1CBC2586C92102
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lwVGLL_Idkd35toxtZXXzL_jgkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 01:01:03 +0000
Manifest this update:     Sat 14 Jun 2025 01:01:03 +0000
Manifest next update:     Sun 15 Jun 2025 01:01:03 +0000
Files and hashes:         1: 9EmaRE56MhxkySrgldeCqIzjdb4.roa (hash: 1f+hqjqOUpzqbgERzyV2EMzT2kIlImzsUPPui1WSWLA=)
                          2: lwVGLL_Idkd35toxtZXXzL_jgkM.crl (hash: GsvWurXo3uTL45G6XW/v67Zr0vkeTXiCeQsUNjA0p34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lwVGLL_Idkd35toxtZXXzL_jgkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f4:52:73:e7:67:10:63:4f:1c:bc:25:86:c9:21:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9705462cbfc8764777e6da31b595d7ccbfe38243
        Validity
            Not Before: Jun 14 01:01:03 2025 GMT
            Not After : Jun 15 01:01:03 2025 GMT
        Subject: CN=2da0343f660be447ae47782f3027e394a3948a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a8:c5:8d:46:61:0e:64:e8:83:26:89:8c:52:
                    00:ba:45:b4:d0:51:26:50:7e:5d:81:19:e7:d8:3d:
                    27:a8:19:4e:55:33:a7:1c:c6:59:f7:4d:4c:91:8c:
                    bd:82:8d:df:f2:ae:2c:9a:5c:8f:54:7b:4f:6e:4c:
                    d8:0c:a6:25:f9:3a:fc:2b:3f:17:e3:c2:7a:81:1d:
                    95:aa:17:57:94:14:17:93:54:e5:0b:7f:19:d6:4a:
                    67:08:26:f2:6d:e1:e5:29:e9:58:73:26:9b:36:7d:
                    f8:3d:ec:fc:9a:5d:b5:f7:0a:a7:b8:c6:9e:74:a5:
                    51:b6:43:3b:e2:e7:9d:57:cb:68:67:f0:66:2b:5e:
                    f1:d4:3c:83:19:68:6b:02:05:94:3c:6c:b4:9d:7a:
                    0d:12:52:72:fd:c1:de:a6:cd:56:06:de:42:1f:c4:
                    e7:f6:ac:9c:43:e1:1c:37:18:cd:4d:29:02:41:3f:
                    01:01:c1:6c:b5:e1:46:c9:01:7d:8e:50:e0:fa:8c:
                    92:b0:7c:10:5d:6d:04:98:5b:a5:2b:7f:c1:f4:57:
                    3b:25:c5:a1:22:fa:4f:e7:df:25:cd:80:46:fe:5c:
                    7a:28:c2:f4:c8:af:bd:72:5f:5d:96:e6:56:b7:b0:
                    85:4d:fc:37:c7:78:a1:7a:90:7e:55:24:bb:6a:3e:
                    1e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A0:34:3F:66:0B:E4:47:AE:47:78:2F:30:27:E3:94:A3:94:8A:6E
            X509v3 Authority Key Identifier:
                keyid:97:05:46:2C:BF:C8:76:47:77:E6:DA:31:B5:95:D7:CC:BF:E3:82:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwVGLL_Idkd35toxtZXXzL_jgkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:e1:d5:76:4a:84:2d:c9:29:3e:8b:6e:a8:4b:80:31:c3:da:
         23:1b:c2:15:6d:1b:4e:e8:a7:d8:da:5f:32:e6:5b:bd:f4:32:
         54:d5:98:a5:9c:79:74:00:64:97:b5:7e:92:d3:4e:0c:0e:51:
         e1:32:7e:a9:cc:e9:7e:db:0f:0b:30:5e:97:4e:c7:3b:8d:83:
         d2:3a:ae:1f:17:05:90:88:5f:73:c1:92:4e:1e:80:9d:32:61:
         d8:a7:06:dc:d7:ed:8e:0a:5d:30:95:7d:0f:e3:e4:96:25:b3:
         e5:f5:7e:b6:84:4e:93:74:e4:62:2f:0b:1c:9e:d8:04:b5:48:
         81:5f:c1:85:f1:3b:28:d4:3c:fb:25:d7:24:ef:69:57:89:d1:
         57:38:b6:b4:8d:d0:79:09:7f:91:53:fb:2e:b4:e2:97:2b:69:
         d6:6a:4f:fc:88:ee:e7:55:e0:13:79:05:d9:1a:c8:f8:d7:94:
         22:3d:de:e0:03:e4:42:c7:ff:6e:8a:df:34:7d:6c:f3:86:67:
         c9:d6:3d:07:11:d7:20:ce:1b:4b:88:07:27:39:22:40:7a:8a:
         40:66:77:92:9e:8c:43:30:5a:1d:f8:0c:a4:c7:ba:8a:b2:50:
         54:76:c5:96:d7:ba:8e:a4:63:7b:38:62:50:b4:25:63:4c:ce:
         60:47:81:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:10:05 2025 by rpki-client