Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft
File:                     LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft (raw, json)
Hash identifier:          uw/HC0v8sSU5VXSR6x2MA+jZ0WgWsl3OX3EDEYO3/RQ=
Subject key identifier:   16:16:4E:DF:0D:1E:82:78:44:CB:1C:06:2A:E1:1E:B1:19:5B:F8:69
Authority key identifier: 2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2
Certificate issuer:       /CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2
Certificate serial:       01976D3E1DEAB6314A9EC1F02288565044F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft
Manifest number:          0D01
Signing time:             Sat 14 Jun 2025 07:01:16 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:16 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:16 +0000
Files and hashes:         1: LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl (hash: fxMBqeMkSc3iJzLDCowEIijPM8grXu0K1Zocb6taoOo=)
                          2: YwSn1lGGwl7KLAZTYR2zvBndC9g.roa (hash: 8r7UZf1B94Wo3xzBwCz0diJ6mM+rBducaQI/NNaX0EM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:1d:ea:b6:31:4a:9e:c1:f0:22:88:56:50:44:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2
        Validity
            Not Before: Jun 14 07:01:16 2025 GMT
            Not After : Jun 15 07:01:16 2025 GMT
        Subject: CN=16164edf0d1e827844cb1c062ae11eb1195bf869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b0:c9:e0:68:bf:28:7b:9e:b0:50:fc:05:60:
                    33:d4:10:1d:09:4c:74:94:9d:d3:0c:26:7c:37:9f:
                    7a:56:2c:cb:23:c5:eb:4c:de:dd:6c:b6:c3:06:47:
                    1c:4e:0c:9c:00:fd:2b:b7:2e:be:b8:2d:4f:ef:19:
                    66:7c:c8:f2:11:90:22:a9:1a:12:18:92:41:e6:b9:
                    36:23:2f:86:c0:e3:eb:85:ab:1a:24:8c:73:e5:29:
                    8e:0b:ea:94:5d:74:f6:e8:c6:f7:ca:d5:b3:5b:5a:
                    ba:a0:30:e7:a6:cc:5b:30:a5:86:ee:6d:6a:cd:69:
                    ea:40:da:d7:b9:47:f3:24:94:e7:21:f1:ce:e0:cf:
                    3f:ca:18:50:51:0f:b7:2d:ba:d7:29:ff:89:c9:e6:
                    ba:72:fc:7d:40:9f:6e:72:93:7d:74:53:07:62:64:
                    4a:22:b3:b1:cc:66:2a:62:ed:8b:b8:12:3d:e6:a3:
                    91:e5:41:21:c5:92:a2:39:20:cb:bd:23:98:f7:04:
                    24:bf:db:7d:09:4c:bf:af:f2:b2:d7:63:04:58:4b:
                    2b:5a:c3:3b:02:78:92:e3:71:e4:a3:4a:44:e3:53:
                    b5:7a:07:80:00:b9:e5:17:e0:ca:77:3e:4f:76:4d:
                    d6:2c:15:d3:b1:7d:c5:ad:d3:d1:19:ab:9a:75:60:
                    bf:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:16:4E:DF:0D:1E:82:78:44:CB:1C:06:2A:E1:1E:B1:19:5B:F8:69
            X509v3 Authority Key Identifier:
                keyid:2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:e5:9b:09:6c:b9:4f:7b:94:03:3a:f7:18:e6:d7:23:84:c8:
         05:b9:45:b7:19:fe:71:4c:22:b6:60:c2:8d:2e:1a:f8:4b:67:
         98:e1:5b:8c:d2:ea:da:8d:8c:a7:8e:70:33:0a:49:98:52:6b:
         13:04:d7:88:10:80:43:d3:b8:89:e3:f1:e3:3c:7f:85:06:f4:
         4b:28:00:ed:41:32:f4:7c:39:15:6d:71:95:47:b9:5c:35:ed:
         a9:30:bf:8e:97:02:5a:67:d8:96:0b:5f:04:d1:ad:a1:27:a8:
         52:f2:a3:38:11:44:41:47:ef:35:c7:92:5f:32:b8:2c:3f:4b:
         ce:ac:ac:2f:ae:67:50:09:a5:63:a6:87:7f:fc:6b:e5:a6:d3:
         40:d2:56:2a:59:0f:a0:5b:d2:35:db:c9:e1:a1:c1:8d:69:e8:
         6d:d9:2f:ed:dd:66:13:b8:d0:96:42:05:8a:f6:b9:a7:f5:2d:
         d8:98:1e:3f:eb:be:aa:d9:4a:7a:05:37:c4:70:03:45:f2:29:
         b6:3c:ed:7a:56:6e:20:f5:7b:9c:25:44:71:c1:53:db:04:be:
         28:b1:61:99:a3:a9:52:9e:6c:f1:58:32:47:a6:20:31:fc:67:
         85:14:c2:d6:95:6d:ee:a4:c4:78:00:9e:36:bb:29:40:83:89:
         dd:0c:90:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:09:23 2025 by rpki-client