Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
File:                     LcgdJMRd2qNF-QZN4p-8p7EppSw.mft (raw, json)
Hash identifier:          J9wh4QKm/HJohTv5XAZSZgLGS0E/ogQBKC+Xe1Idbno=
Subject key identifier:   1B:C3:68:9A:95:DB:4A:52:C6:F7:81:B3:25:5C:B4:8F:72:CC:4A:A5
Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
Certificate issuer:       /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Certificate serial:       01976E871941753E613BC020955BF2DA0D8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
Manifest number:          15A3
Signing time:             Sat 14 Jun 2025 13:00:36 +0000
Manifest this update:     Sat 14 Jun 2025 13:00:36 +0000
Manifest next update:     Sun 15 Jun 2025 13:00:36 +0000
Files and hashes:         1: 1-Gxr6vIW4yBzcBwkpTyv09TdOlo.roa (hash: Ez8uNLSpiX9S8lz0pVk5NS7jK9ai+KC6g5pGfPW50c4=)
                          2: LcgdJMRd2qNF-QZN4p-8p7EppSw.crl (hash: YV2ma6YcA+mTd/4LVZGJ4aaYDy7aTu6LV9hisNPzC7s=)
                          3: Tqry6ntz7b3kTeJ5OCnwPvloJIw.roa (hash: y/Hg2mPZLnUNHUkA7kXq+J0F+bsaFDCzyOC2OJvkyTk=)
                          4: fd3RJJ6-t5MPxFMjaOieMyrNj1Q.roa (hash: Gp0oxYbqR8uF0JIVNiZGflyEv6T2n/2lVC4AqntijqM=)
                          5: iCEtvdo35QYS0XZzbCSkUBvLIzs.roa (hash: zyoo6UPzEwr9Wic7Dppcx0mzsl7aajEnMpuXSdefYMA=)
                          6: yGvOgFMZISJsfSPqCjNlOqtAHMM.roa (hash: Y4gEqzV+We8lCW3rGQRh7ia7nliYhdhTWgBtjF9WRdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:87:19:41:75:3e:61:3b:c0:20:95:5b:f2:da:0d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
        Validity
            Not Before: Jun 14 13:00:36 2025 GMT
            Not After : Jun 15 13:00:36 2025 GMT
        Subject: CN=1bc3689a95db4a52c6f781b3255cb48f72cc4aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b6:e5:aa:59:c0:88:8c:04:d1:8c:03:20:10:
                    da:27:ad:32:4a:1e:bb:c9:21:66:c3:32:29:23:a0:
                    2d:53:c9:c4:32:22:b7:b6:32:90:2b:f6:a3:32:73:
                    ae:7f:e8:72:fa:cc:55:8c:b4:19:0c:8d:76:17:82:
                    0d:3f:b5:9f:81:88:be:1c:85:60:ea:6e:e2:4a:b5:
                    c1:36:43:f1:59:f6:31:78:82:c2:e8:b6:96:f2:26:
                    57:49:e5:fa:d4:67:71:2f:92:29:cd:a7:74:fa:4f:
                    ea:e9:5f:a0:66:41:4e:95:d2:ad:3f:75:d1:15:61:
                    bb:d1:97:20:8a:f4:0b:4a:8d:2d:2f:57:98:25:b4:
                    0c:ca:37:fc:fc:a1:f6:13:5b:18:d5:4e:e3:c2:5d:
                    48:6a:16:2a:fe:92:36:07:4c:7d:fc:0a:25:fc:e8:
                    de:5d:ab:38:e7:58:15:35:33:d4:3f:30:93:58:73:
                    43:44:42:c5:6b:ef:4e:2f:46:fa:dd:98:e5:3b:64:
                    8f:fb:1c:bf:1e:22:bc:18:7c:4c:be:cf:77:ea:64:
                    c7:f3:6a:d0:42:61:45:e2:87:44:db:c2:c0:56:50:
                    27:32:d4:a1:0f:b5:6d:d6:18:0d:88:dc:e0:86:71:
                    23:ef:42:63:14:49:4d:5f:3b:b1:20:9e:db:08:98:
                    cd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C3:68:9A:95:DB:4A:52:C6:F7:81:B3:25:5C:B4:8F:72:CC:4A:A5
            X509v3 Authority Key Identifier:
                keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:59:9c:a2:5f:05:97:d8:c0:dd:f0:18:43:35:bb:81:fe:7c:
         af:f2:66:9c:8e:e8:6c:d4:46:f2:66:89:01:a3:bf:23:1d:a4:
         a5:74:e8:d3:86:da:cf:a4:a1:18:3a:cd:9d:10:ab:2a:79:04:
         1f:b8:a0:ec:4a:fe:52:a1:6f:5d:95:7a:ee:c7:99:6a:a9:c4:
         d2:47:73:dd:b3:cf:0e:68:db:29:4d:7e:ef:6e:f5:18:0b:4e:
         a2:7f:72:48:07:4b:ed:c2:f3:4f:30:f6:70:56:ea:93:1f:a4:
         6a:c9:e6:5e:93:dd:f7:47:6f:db:ef:2c:e8:3d:ca:a3:07:2d:
         43:f4:c9:65:a1:32:f7:17:c3:40:7c:8d:a8:db:13:63:6d:54:
         46:e4:58:8a:4f:2d:86:44:8e:91:f2:46:e2:91:41:ce:1d:e2:
         83:4b:76:91:93:05:4f:a8:2b:ea:a2:a1:ed:de:da:9c:fa:bd:
         23:08:d1:93:30:87:27:f3:49:6f:08:26:b1:7d:93:5b:50:e2:
         49:56:75:7b:3c:46:7f:dc:1f:e9:d1:ac:fa:c0:cd:76:9d:dd:
         a5:d3:90:fd:62:32:4e:11:a3:c8:0e:12:c0:09:54:31:3f:ee:
         1b:98:d1:a9:55:0a:36:fb:1b:48:f6:d4:0f:a9:db:66:53:81:
         32:61:e3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:58:50 2025 by rpki-client