Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
File:                     LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft (raw, json)
Hash identifier:          ZLcDQFFBHH/4r/i6Fo7OxSgT+LxovuZeFCpbVMEKCZk=
Subject key identifier:   08:20:4A:C4:7F:02:9A:08:D0:6F:00:DC:EB:B4:9C:5B:AF:CB:5B:DA
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Certificate issuer:       /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial:       0197684E4E72CE9AB1A799B8C696535B64F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
Manifest number:          159C
Signing time:             Fri 13 Jun 2025 08:00:51 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:51 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:51 +0000
Files and hashes:         1: 01X6uEQds9Y9s0Nj6vCgByaYk4o.roa (hash: zRPbzdJELLZCFUdSNf06UKLGLPusehNC5YazUYIIsTM=)
                          2: 0tRB9OCC9xas7e6MVH8FJn0Ja3c.roa (hash: cbQqhS8rCleS/cZGOp49BraWBlvDlSz9avYU2nr/DSU=)
                          3: 9tSoewyxusy3XiU4MPlfgCKviQM.roa (hash: 4mAbpqKotMEUi55o3nvNZU9MOu3aXF7KZ9T6UnO+Ftc=)
                          4: FSPf9GPeE9OlDZ4wjRNl7LN012Y.roa (hash: qnw8o1IATV+jUOf4O3NJflnEbA239Ao6/8MIoEaYYAw=)
                          5: Ik5x4sxVpJGKDVZlhpgzVJyFcdE.roa (hash: hUjlBlwFujOIxjIsUbH4qKxEVtqgo5ThvH9AsXM845U=)
                          6: LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl (hash: S4Lxe7C4AWctjAOuT6XRM2XPAr6DpTfNpxQwzGmXmNs=)
                          7: ewUitY15BVRTKh0SmutPUcBQMXQ.roa (hash: B5ro7AbVa+pZeZWKqhB5vQ8tCOIi1/1KiBGVk/ZJiIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:4e:72:ce:9a:b1:a7:99:b8:c6:96:53:5b:64:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
        Validity
            Not Before: Jun 13 08:00:51 2025 GMT
            Not After : Jun 14 08:00:51 2025 GMT
        Subject: CN=08204ac47f029a08d06f00dcebb49c5bafcb5bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a3:2c:75:ab:ed:89:a1:3a:3d:7f:9d:2e:d3:
                    12:a8:e4:df:45:c2:ee:92:22:2d:04:46:99:9a:4f:
                    bc:a6:bc:da:41:ef:07:73:ac:3b:1a:a7:c5:7a:6b:
                    ee:c1:db:43:9f:d9:ff:af:19:f9:f7:62:d5:b3:89:
                    c4:11:fb:4f:15:1a:6e:c9:a8:9d:5f:0a:ca:53:89:
                    18:05:3c:c2:c5:0a:76:25:7e:c4:05:ab:05:12:33:
                    b9:dc:f0:8b:47:9d:cc:94:d4:85:5c:46:ce:4b:fd:
                    c9:06:87:c4:16:19:6a:a7:0a:06:a1:c5:54:a1:9e:
                    a8:4d:58:40:d3:92:98:35:62:a8:32:08:f1:ca:9f:
                    5e:bc:58:c8:73:0d:1c:b0:e9:f4:64:ac:e9:b4:8a:
                    39:76:ef:ea:8c:f2:53:ab:9b:44:80:82:4b:1d:f2:
                    dd:38:1a:c9:1d:2d:b2:f9:a1:d0:52:51:41:73:2f:
                    80:6b:08:e4:17:3b:a4:01:3e:f7:14:71:6e:89:a5:
                    9f:f5:0f:47:85:f2:bf:59:e3:ec:5b:03:e6:76:08:
                    64:d4:8c:30:98:59:ff:93:62:c8:a6:c4:12:88:3b:
                    18:03:4a:66:8c:1e:0c:61:0a:a9:8f:5a:55:5b:3f:
                    e5:fc:d5:db:d6:12:cc:4b:aa:3d:05:1c:f1:57:22:
                    a7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:20:4A:C4:7F:02:9A:08:D0:6F:00:DC:EB:B4:9C:5B:AF:CB:5B:DA
            X509v3 Authority Key Identifier:
                keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:64:58:36:80:35:a4:5b:4c:ff:7e:9d:23:7b:a5:e9:1b:3f:
         b8:5f:c3:60:74:24:43:5c:c9:5b:4e:d2:d7:d9:1a:23:b3:ec:
         97:94:81:9d:14:b8:cf:d6:75:5f:91:33:6d:f3:bf:45:8e:ad:
         5c:c2:22:ba:2a:ca:b7:ea:e0:ab:7c:6b:e8:bb:ea:65:de:31:
         f2:8e:db:39:8f:06:d3:c6:37:df:f7:4e:79:2d:f3:02:f5:aa:
         42:18:31:d8:0b:bd:04:cc:25:57:e7:d8:b6:3c:f9:4d:80:95:
         14:1b:7f:9b:7b:69:f9:cb:ac:8a:64:88:6a:11:db:d3:63:5c:
         f9:5e:eb:b7:35:22:59:8b:d2:f1:07:a6:ca:d3:30:75:93:ad:
         63:22:0d:1a:c2:b1:f0:87:9a:4d:01:28:71:cc:0d:ef:b0:6a:
         ac:20:59:51:03:7c:fc:48:ce:23:79:fa:cc:32:72:a9:b7:a6:
         4b:ff:69:78:ac:c3:1d:49:66:1b:5f:15:b3:8a:75:5c:96:23:
         e6:4c:ae:73:c3:16:c8:ee:98:2c:fd:ea:40:27:d1:d2:71:c1:
         c8:26:13:23:68:94:12:55:2f:73:fe:20:e2:27:bf:e9:b4:86:
         4d:88:0d:62:4f:2b:8e:2b:37:f4:c4:c2:aa:05:73:ff:cb:31:
         40:7a:65:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:36 2025 by rpki-client