Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
File:                     LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft (raw, json)
Hash identifier:          OHvRG1K4/Smaiap2svrWpVvh3AlLORHTXQGcH4JIJg8=
Subject key identifier:   DD:C5:95:CB:7D:98:56:A0:81:59:3C:2B:CB:2F:F8:D8:AE:85:34:AD
Authority key identifier: 2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A
Certificate issuer:       /CN=2e6276136254830bb4907e98c258e493b42aaa3a
Certificate serial:       0196857FFB8BEE54135EC58E2B6A5BC6E2AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
Manifest number:          146D
Signing time:             Wed 30 Apr 2025 07:01:19 +0000
Manifest this update:     Wed 30 Apr 2025 07:01:19 +0000
Manifest next update:     Thu 01 May 2025 07:01:19 +0000
Files and hashes:         1: LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl (hash: GQZeuPFEYZkJZCSk4OIbUii2HBQ6QVyBsFNEfdUVaDc=)
                          2: fNli-LiQ9awKyhQw-GNSvJ_42w0.roa (hash: L98lyb6k01PaEjUwasFWjyw8Arv6ILhrmJTj2kl/6vk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:85:7f:fb:8b:ee:54:13:5e:c5:8e:2b:6a:5b:c6:e2:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6276136254830bb4907e98c258e493b42aaa3a
        Validity
            Not Before: Apr 30 07:01:19 2025 GMT
            Not After : May  1 07:01:19 2025 GMT
        Subject: CN=ddc595cb7d9856a081593c2bcb2ff8d8ae8534ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:e0:85:ea:bf:f9:7b:5a:cf:b4:19:d6:8b:
                    78:a1:e9:c5:6f:7a:72:6e:90:06:eb:f8:2f:0a:1f:
                    2d:8b:a8:1c:78:88:ba:da:6e:72:ad:e7:0f:51:51:
                    b0:43:b9:5d:75:1f:62:e0:89:5b:d9:1f:ae:00:c1:
                    fc:d0:e9:99:5f:aa:97:b8:07:be:55:09:cb:9c:96:
                    a2:01:96:6f:72:27:01:07:b2:99:21:07:95:7e:58:
                    4f:f8:2a:35:f5:30:fc:e1:b7:22:4b:3f:0a:33:d9:
                    84:69:3a:f2:0a:c1:e6:7f:f1:15:cf:f1:68:74:26:
                    f2:6b:89:de:b4:41:42:eb:40:3e:72:6d:29:1f:10:
                    e8:e6:b3:b2:85:d5:03:33:aa:ce:22:01:8a:d4:37:
                    f1:14:76:54:50:4d:29:b9:70:61:f2:8b:57:53:4f:
                    2b:22:27:58:8b:73:2a:7c:ce:8f:77:d9:ea:3f:f8:
                    d7:33:83:41:dc:8c:01:7c:c6:72:2e:09:6c:27:a6:
                    21:21:5c:b9:5f:c9:ea:c8:32:ed:d6:67:94:8a:ea:
                    42:68:30:92:8f:09:b7:eb:f6:99:15:66:01:a4:a3:
                    66:06:70:ea:16:7c:ad:a4:54:99:db:7f:1e:12:52:
                    2a:ce:4e:13:2c:20:7b:92:69:65:66:aa:47:38:d0:
                    b7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C5:95:CB:7D:98:56:A0:81:59:3C:2B:CB:2F:F8:D8:AE:85:34:AD
            X509v3 Authority Key Identifier:
                keyid:2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:ec:c1:0c:64:fc:3e:67:83:0a:6b:1f:5a:4b:32:5f:2e:97:
         7f:21:db:e3:f6:28:2e:3e:78:bf:ab:e3:06:21:cb:67:a2:63:
         0c:85:3d:d8:c3:38:2a:25:ef:5f:2f:4e:14:61:6d:b2:3a:ab:
         38:55:65:54:df:af:b8:c2:b8:55:11:67:bc:b8:ea:ad:89:a8:
         1f:ee:e6:37:1b:d9:f0:fd:32:4c:4f:a8:09:33:9e:8b:fb:1d:
         13:b9:cd:21:c7:30:a0:01:da:ce:87:3f:fb:e1:65:f7:9e:68:
         c6:63:54:11:36:66:62:d3:24:60:61:b3:f9:8d:a1:45:4e:c1:
         06:61:1f:fe:d8:88:1c:43:dd:39:f6:58:4c:21:56:fa:15:ef:
         2a:94:ca:01:fb:0f:bb:9b:70:6b:5d:03:b8:90:f8:24:66:a3:
         a8:3f:da:50:f6:59:5e:3a:3c:a9:37:91:e2:fb:a9:1d:c3:b3:
         ed:77:0f:c0:ac:6f:f5:20:45:a4:c7:92:4c:15:ea:d5:a4:ab:
         ce:80:f3:f1:6c:87:91:74:84:0c:04:18:2c:88:9a:ee:12:10:
         fb:fa:ec:62:5b:ce:b2:2d:73:93:43:69:cc:4a:43:94:a8:b4:
         b2:fc:34:3c:48:97:94:99:15:b1:89:08:da:53:db:c0:31:a9:
         df:9a:cc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:40:26 2025 by rpki-client