Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.mft
File:                     LG1GLWWE49of8lFVSjReScatD7E.mft (raw, json)
Hash identifier:          hO0CHpzKgkyW1FO6ysHtJE/NAkDIT3y+rBKIBePRfVo=
Subject key identifier:   2D:A9:F4:9A:C6:AA:9C:84:C4:EB:C8:A8:6C:F0:4A:56:0C:7E:F5:F0
Authority key identifier: 2C:6D:46:2D:65:84:E3:DA:1F:F2:51:55:4A:34:5E:49:C6:AD:0F:B1
Certificate issuer:       /CN=2c6d462d6584e3da1ff251554a345e49c6ad0fb1
Certificate serial:       01976D3DE9A4CFB4BFB2D098B8BC5D191727
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LG1GLWWE49of8lFVSjReScatD7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.mft
Manifest number:          158D
Signing time:             Sat 14 Jun 2025 07:01:03 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:03 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:03 +0000
Files and hashes:         1: LG1GLWWE49of8lFVSjReScatD7E.crl (hash: Dq5WQUC/WJjaevxiNfxemyqPu5uXEwGsjPvKbyKdsQA=)
                          2: PlTGp6Ho-NUz3UJ_pTXgK1lVgrA.roa (hash: 9OM5uBqz0hnAImE+ogfgxUlyhO9v7s+esgTavmxFQEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LG1GLWWE49of8lFVSjReScatD7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:e9:a4:cf:b4:bf:b2:d0:98:b8:bc:5d:19:17:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c6d462d6584e3da1ff251554a345e49c6ad0fb1
        Validity
            Not Before: Jun 14 07:01:03 2025 GMT
            Not After : Jun 15 07:01:03 2025 GMT
        Subject: CN=2da9f49ac6aa9c84c4ebc8a86cf04a560c7ef5f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a4:1d:61:91:23:f8:9f:23:d6:3f:a8:c2:07:
                    4c:40:b8:e7:fe:31:46:28:43:45:29:75:14:8f:56:
                    e8:57:0b:77:13:28:a5:2a:bb:2d:10:28:1b:66:05:
                    f8:72:1b:67:05:95:cc:03:43:ea:1e:82:bb:2e:d2:
                    2b:a3:8d:14:fb:0d:e3:38:2c:be:17:32:34:c1:eb:
                    b5:2d:5c:5b:4f:80:e9:7d:dc:42:72:0c:ad:2b:14:
                    29:c1:f7:fa:06:14:b6:1e:91:61:59:b3:70:14:8a:
                    41:e7:8c:bd:70:8d:99:5b:67:d8:28:3d:19:6c:d2:
                    aa:7e:ec:f7:49:a7:89:41:e5:ed:92:a0:56:49:26:
                    c6:be:df:01:ef:31:37:bd:af:c8:2b:c3:cc:d6:45:
                    f8:66:1a:d0:4b:a3:c3:7b:01:0c:89:1b:c0:17:e5:
                    8f:d0:ae:78:c0:94:c4:bb:ed:f6:b5:61:fa:6a:82:
                    ae:1b:6b:97:48:fd:81:4e:93:74:30:f3:8b:4a:49:
                    11:94:92:3d:a7:4f:fd:a2:3c:ef:b5:d6:24:72:75:
                    e8:96:46:bf:4c:53:7c:93:92:d4:d1:fe:ea:f1:7d:
                    81:39:7c:41:30:36:ce:9c:8a:09:1a:7b:01:90:5c:
                    0a:b6:24:35:e4:23:49:11:d7:f5:c3:72:a1:46:25:
                    62:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A9:F4:9A:C6:AA:9C:84:C4:EB:C8:A8:6C:F0:4A:56:0C:7E:F5:F0
            X509v3 Authority Key Identifier:
                keyid:2C:6D:46:2D:65:84:E3:DA:1F:F2:51:55:4A:34:5E:49:C6:AD:0F:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG1GLWWE49of8lFVSjReScatD7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:51:b4:66:91:9e:ae:43:c3:1e:f1:24:7e:19:eb:69:52:b4:
         8c:d4:8e:a3:18:63:90:30:22:db:fb:22:7c:3c:97:8d:66:c6:
         ab:de:64:b1:0f:9b:ec:2b:39:b2:a6:96:6d:20:e3:89:97:03:
         98:6d:55:81:3f:a4:2d:66:77:c1:a7:89:da:74:79:3e:94:0f:
         bc:b5:9a:61:83:5f:da:00:3a:6c:87:e0:b5:df:cc:ef:22:d1:
         d8:18:4c:cf:34:04:ed:9c:ce:7a:93:ec:96:c6:2b:e7:e9:3c:
         8b:fa:45:b6:54:51:de:c0:1b:73:c2:60:47:a3:3c:fe:a1:4b:
         f2:2d:57:2a:6c:fc:a4:71:fd:97:5f:a8:5c:25:cb:81:fe:57:
         b1:62:29:70:fe:32:90:bf:3d:d1:6e:12:40:cc:91:d5:ad:2a:
         bd:d8:2a:05:6a:8e:bf:5e:51:c3:34:61:0a:3e:8d:1b:53:a3:
         0e:5b:90:47:d3:c5:b4:fb:c7:2e:36:f1:da:82:bc:02:3b:b0:
         f5:a6:a3:78:79:36:62:08:a4:54:4a:09:30:ee:c2:5c:b2:11:
         e7:26:07:43:95:22:1b:d8:40:4c:e6:63:4d:3e:da:d1:78:75:
         59:9d:27:b1:99:06:21:df:6b:ff:35:66:4e:0b:cd:1f:44:5d:
         c3:ad:4a:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPemkz7S/stCYuLxdGRcnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNmQ0NjJkNjU4NGUzZGExZmYyNTE1NTRhMzQ1ZTQ5YzZh
ZDBmYjEwHhcNMjUwNjE0MDcwMTAzWhcNMjUwNjE1MDcwMTAzWjAzMTEwLwYDVQQD
EygyZGE5ZjQ5YWM2YWE5Yzg0YzRlYmM4YTg2Y2YwNGE1NjBjN2VmNWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaQdYZEj+J8j1j+owgdMQLjn/jFG
KENFKXUUj1boVwt3EyilKrstECgbZgX4chtnBZXMA0PqHoK7LtIro40U+w3jOCy+
FzI0weu1LVxbT4DpfdxCcgytKxQpwff6BhS2HpFhWbNwFIpB54y9cI2ZW2fYKD0Z
bNKqfuz3SaeJQeXtkqBWSSbGvt8B7zE3va/IK8PM1kX4ZhrQS6PDewEMiRvAF+WP
0K54wJTEu+32tWH6aoKuG2uXSP2BTpN0MPOLSkkRlJI9p0/9ojzvtdYkcnXolka/
TFN8k5LU0f7q8X2BOXxBMDbOnIoJGnsBkFwKtiQ15CNJEdf1w3KhRiVibwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2p9JrGqpyExOvIqGzwSlYMfvXwMB8GA1UdIwQY
MBaAFCxtRi1lhOPaH/JRVUo0XknGrQ+xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEcxR0xXV0U0OW9mOGxGVlNqUmVTY2F0RDdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC82NzU3MDQtOGQ3ZC00N2ZhLTgyZTQt
YWZlOGNkOTRhOGQ5LzEvTEcxR0xXV0U0OW9mOGxGVlNqUmVTY2F0RDdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC82NzU3MDQtOGQ3ZC00N2ZhLTgyZTQtYWZlOGNkOTRhOGQ5
LzEvTEcxR0xXV0U0OW9mOGxGVlNqUmVTY2F0RDdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1G0ZpGe
rkPDHvEkfhnraVK0jNSOoxhjkDAi2/sifDyXjWbGq95ksQ+b7Cs5sqaWbSDjiZcD
mG1VgT+kLWZ3waeJ2nR5PpQPvLWaYYNf2gA6bIfgtd/M7yLR2BhMzzQE7ZzOepPs
lsYr5+k8i/pFtlRR3sAbc8JgR6M8/qFL8i1XKmz8pHH9l1+oXCXLgf5XsWIpcP4y
kL890W4SQMyR1a0qvdgqBWqOv15RwzRhCj6NG1OjDluQR9PFtPvHLjbx2oK8Ajuw
9aajeHk2YgikVEoJMO7CXLIR5yYHQ5UiG9hATOZjTT7a0Xh1WZ0nsZkGId9r/zVm
TgvNH0Rdw61KWA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:33:37 2025 by rpki-client