Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
File:                     LoXNafYRaXriRpasdl1Wt13406E.mft (raw, json)
Hash identifier:          qh9qKN1bSbLfvrvUuZXgpFBQ9PLXioc7tF7zYOCy3HI=
Subject key identifier:   F6:C5:5F:EB:DB:18:E4:5F:14:33:A0:76:A7:79:0B:28:86:8A:88:D9
Authority key identifier: 2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
Certificate issuer:       /CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Certificate serial:       01977452906464A3B6CD79DD6B9200163181
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
Manifest number:          04A8
Signing time:             Sun 15 Jun 2025 16:00:57 +0000
Manifest this update:     Sun 15 Jun 2025 16:00:57 +0000
Manifest next update:     Mon 16 Jun 2025 16:00:57 +0000
Files and hashes:         1: LoXNafYRaXriRpasdl1Wt13406E.crl (hash: 8dipd6U7ycUNFqgXUC73e/ZVBkunjjIvZDFbCb/2hII=)
                          2: V4UHEu5lFuhdZwHH6lxxX4Rsnp4.roa (hash: QxXsgkZ9Y9z5B4JIZIQ9pTgrtbYM89E088MqJxxgyOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:52:90:64:64:a3:b6:cd:79:dd:6b:92:00:16:31:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
        Validity
            Not Before: Jun 15 16:00:57 2025 GMT
            Not After : Jun 16 16:00:57 2025 GMT
        Subject: CN=f6c55febdb18e45f1433a076a7790b28868a88d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8e:12:73:e6:e7:e6:fc:95:e2:62:fd:a4:6b:
                    e9:c4:9f:6b:7b:0b:f8:3e:ca:2e:7f:e0:ca:82:fd:
                    28:fd:d0:f0:75:e7:41:a6:cd:0c:18:ec:d2:82:0c:
                    22:cb:3c:72:cc:bd:e4:74:b5:28:c3:49:64:50:09:
                    5c:c8:d2:8d:c7:41:cf:43:bb:e9:5f:cb:49:7b:22:
                    f7:93:12:89:3e:4f:91:32:15:a5:39:59:ad:3f:f0:
                    6e:80:3e:43:46:ff:96:dd:1d:c3:eb:52:15:36:d5:
                    c2:a4:db:44:37:ac:9e:aa:ed:d1:84:f3:63:c6:bc:
                    bf:2a:7e:d9:29:8d:c0:e5:73:47:4a:64:df:d0:77:
                    16:60:4b:63:16:06:dd:9f:a6:c9:4a:12:25:31:7d:
                    be:3c:61:75:30:54:63:88:14:50:4a:13:c2:71:1d:
                    57:af:44:1a:62:e4:58:a6:78:84:45:61:6c:ef:06:
                    7f:63:65:a3:1a:1f:18:a8:47:df:10:71:b0:66:b1:
                    4e:15:be:d4:98:08:eb:10:21:dd:2f:57:95:50:0f:
                    c9:1c:0c:98:da:88:f6:2f:79:43:55:15:52:5a:fd:
                    57:30:13:1e:b2:52:79:4e:b4:e8:d4:d4:55:bd:58:
                    7b:87:a0:00:31:9c:ae:5d:c2:60:36:07:5d:2c:a7:
                    7f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C5:5F:EB:DB:18:E4:5F:14:33:A0:76:A7:79:0B:28:86:8A:88:D9
            X509v3 Authority Key Identifier:
                keyid:2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:da:c4:31:84:e8:69:55:39:36:1c:01:72:bb:0a:de:8c:9c:
         bd:8e:75:2f:33:0a:fd:f1:57:74:f7:9a:4d:0d:2f:c6:8a:84:
         43:49:87:fd:25:7c:e0:b0:32:67:e6:e9:6c:ae:b5:de:34:c0:
         7c:b4:10:94:81:75:81:ab:3b:65:2e:86:ad:ce:34:e8:38:27:
         9e:c8:dc:03:b2:52:87:4d:91:d4:db:a9:46:50:ab:a3:ca:47:
         61:b2:c3:5d:4d:d6:f4:75:27:87:21:91:3c:11:34:cd:e5:72:
         f4:6f:1c:2b:44:39:46:12:1d:a7:18:02:0f:08:38:cb:45:aa:
         4e:b8:99:f3:03:36:07:5d:8e:98:0b:c9:e0:63:00:47:b0:55:
         ef:c8:0c:21:21:a3:84:16:2b:48:23:f5:d6:29:0a:1c:51:88:
         95:d3:18:63:a0:31:62:32:d1:ef:6a:bd:fa:09:fb:f7:de:c9:
         90:48:f0:5e:af:0b:e2:19:b6:a4:d0:36:db:79:17:bc:c6:07:
         f8:b3:d8:59:8a:c6:5d:2e:6a:1f:f4:1f:c3:6f:ab:77:24:37:
         6d:bb:a9:00:3e:0d:6c:54:91:e0:d1:94:f7:34:e5:77:ea:af:
         cb:c9:04:4f:42:e6:4d:66:69:0a:b9:fb:21:8c:a4:49:58:6e:
         09:08:d0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:48:05 2025 by rpki-client