Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
File:                     LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft (raw, json)
Hash identifier:          mxaXqCibSaiXySOhwsCEBx+NJ8cZXeNzhsdFTDpyfhM=
Subject key identifier:   C8:10:3D:3A:20:96:C1:4F:70:52:EA:DE:6A:2A:66:DC:90:BA:43:2A
Authority key identifier: 2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C
Certificate issuer:       /CN=2dfc54d5543e12484b6bab2fdc399a8f5295787c
Certificate serial:       01976997DB112331BFC4314583A4CA645C69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
Manifest number:          0304
Signing time:             Fri 13 Jun 2025 14:00:49 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:49 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:49 +0000
Files and hashes:         1: LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl (hash: SJipTfXBX1HfD4dQnRpjI11UUa2LKiQeLC9fIAb1nSQ=)
                          2: fQ0Sre67u9FqAYj17x6CK1Kn0s0.roa (hash: gbYNt5MQ+KrOgley7XtqGDbUm1YLGIimwaWi/r+Sqf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:db:11:23:31:bf:c4:31:45:83:a4:ca:64:5c:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dfc54d5543e12484b6bab2fdc399a8f5295787c
        Validity
            Not Before: Jun 13 14:00:49 2025 GMT
            Not After : Jun 14 14:00:49 2025 GMT
        Subject: CN=c8103d3a2096c14f7052eade6a2a66dc90ba432a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b9:a1:fc:5f:ba:07:b9:6d:6d:d0:82:59:a6:
                    d4:b9:12:a9:98:ee:87:51:a6:ca:8e:49:04:94:9e:
                    a6:e6:44:4a:f2:f7:9e:ed:bd:d9:48:e6:ab:c1:18:
                    ca:e4:94:26:95:32:78:7d:96:7a:73:dd:de:fa:8f:
                    7d:54:59:b9:cc:82:81:b8:58:f4:c7:01:3f:d2:cf:
                    ae:1a:80:11:83:d9:15:51:9c:c3:20:59:3a:32:d3:
                    71:94:6f:b3:19:55:1d:f9:dd:4a:bd:3e:3e:42:88:
                    d8:54:bd:96:ef:08:96:32:54:2c:75:0a:12:f0:d4:
                    60:ee:11:5b:3d:f0:80:9b:15:0b:b0:99:51:18:2f:
                    c9:de:05:8b:03:b8:c8:69:21:c0:12:e7:ae:82:a7:
                    32:a0:37:ff:32:70:a8:de:8f:d5:2c:5a:37:1c:09:
                    02:37:71:10:8b:34:0e:05:49:71:74:70:c6:46:c6:
                    03:18:a0:60:22:98:21:4c:d7:80:69:2e:89:55:7e:
                    40:f4:b4:02:08:9d:43:d3:27:d0:06:06:02:b4:46:
                    42:14:a0:14:5f:47:41:ec:b3:8a:97:ce:cd:74:03:
                    81:2c:93:28:16:2f:7a:a9:7a:10:89:12:ac:f2:42:
                    56:29:5e:09:6c:b4:49:9d:38:c7:7d:5a:e2:73:e4:
                    88:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:10:3D:3A:20:96:C1:4F:70:52:EA:DE:6A:2A:66:DC:90:BA:43:2A
            X509v3 Authority Key Identifier:
                keyid:2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:bb:0c:2c:e8:57:1d:c5:2a:b7:2c:c7:f3:df:0d:9a:d1:6d:
         ea:18:50:17:77:98:5e:96:49:bd:a7:db:a9:f4:40:88:66:ed:
         06:6c:e8:0b:a4:f0:b7:8c:c2:cf:b0:3a:39:44:15:49:d8:52:
         a6:fb:a1:50:75:c1:fa:a0:bb:42:da:6b:6c:86:b0:2e:57:dc:
         ad:49:1a:4a:66:fd:84:06:f7:12:8a:2a:6c:82:f4:f9:29:3f:
         bd:e2:6a:c4:72:f9:4d:fb:81:b6:5c:89:3b:46:c3:4a:bb:76:
         3b:0a:10:41:76:b8:b2:64:60:62:db:1e:54:72:0c:5d:87:33:
         88:ec:dd:93:d7:5a:1c:af:ae:4a:36:3c:51:8c:db:d2:97:4a:
         82:c7:0a:af:0c:29:24:22:6d:2a:06:4f:01:1b:f2:b6:df:32:
         9e:50:47:14:57:7b:50:a0:d6:0d:3b:1b:dc:6e:2d:e0:7f:a3:
         4e:e9:b3:ff:1e:17:26:9e:a1:43:42:91:e5:97:85:76:7d:86:
         2d:95:25:76:f9:76:20:53:c8:cd:c6:cb:c8:9a:0f:e6:13:25:
         52:c1:d7:93:24:fa:3a:7c:4c:77:5a:a3:4d:9a:1d:a6:b7:40:
         6e:80:c0:3e:71:29:0b:03:59:cf:8c:c8:ae:b5:5b:8c:33:9b:
         bb:07:34:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:21:49 2025 by rpki-client