Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
File:                     LysmxVJWMAYhPP5IFKncKg_Bb0M.mft (raw, json)
Hash identifier:          vA8IKPjZTsVLSpG48f60dyF+gA3zfdPnOBhZNVW/8cA=
Subject key identifier:   DD:83:21:68:2E:5B:31:F5:A4:13:6F:DA:5C:43:40:50:53:8A:72:FF
Authority key identifier: 2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
Certificate issuer:       /CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Certificate serial:       01976EF535BC1D8B79733AE78ED60EBE7F05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
Manifest number:          078E
Signing time:             Sat 14 Jun 2025 15:00:53 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:53 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:53 +0000
Files and hashes:         1: LysmxVJWMAYhPP5IFKncKg_Bb0M.crl (hash: kKvDR2h9sNWotJvPrWMVf9KqpBxnrU5WdKwy+vGXiz8=)
                          2: W6QOjqpakncZ5btUn_LFYWHRhQI.roa (hash: 0Tpx1buqzp+SVfsKSz/Tn137XUEd3v/VStC3KMX88hA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f5:35:bc:1d:8b:79:73:3a:e7:8e:d6:0e:be:7f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
        Validity
            Not Before: Jun 14 15:00:53 2025 GMT
            Not After : Jun 15 15:00:53 2025 GMT
        Subject: CN=dd8321682e5b31f5a4136fda5c434050538a72ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ba:e1:17:da:b6:d2:e1:b9:9b:05:0c:d1:52:
                    bb:35:9d:78:4d:3f:92:5c:82:90:7e:94:1d:4d:52:
                    b6:4f:1e:f6:ad:e7:88:9c:7b:76:45:61:e8:fc:e5:
                    9b:67:a2:48:23:ae:fc:a3:ee:25:1c:f6:e5:55:f6:
                    90:49:e5:d2:03:7d:b4:8f:9c:95:3a:db:2c:95:bb:
                    e6:bc:11:71:ad:cb:aa:a4:fe:10:97:1f:9c:1d:e9:
                    f3:ca:59:ba:fd:10:bb:0d:da:62:b8:6e:9f:ca:7f:
                    3a:77:b4:27:20:43:2c:52:1d:3c:e5:0c:2e:09:f3:
                    82:48:81:9b:b8:e3:cb:91:f8:c6:6c:ea:e3:71:41:
                    81:7b:09:37:33:b0:50:05:8f:a8:1f:12:9a:c0:16:
                    77:86:b3:40:16:30:67:7b:96:ed:f4:86:c0:15:ec:
                    da:28:51:44:50:7b:94:1d:a7:e2:de:51:af:3d:d0:
                    2b:44:4c:da:f6:df:b4:bd:3e:31:d9:d8:4b:e2:e9:
                    12:d4:04:94:58:ab:b5:93:4a:72:f9:15:0c:f7:55:
                    a7:1b:e1:54:50:d8:8f:29:db:66:3d:2a:d6:71:69:
                    65:67:94:c5:ca:7e:cb:ba:60:a0:e1:49:db:41:c5:
                    b3:99:c8:a0:9d:af:e3:4c:ad:38:84:d9:2c:d5:65:
                    12:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:83:21:68:2E:5B:31:F5:A4:13:6F:DA:5C:43:40:50:53:8A:72:FF
            X509v3 Authority Key Identifier:
                keyid:2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:8c:6c:90:8f:76:25:ec:44:70:75:a3:c5:6a:1b:bc:08:34:
         35:1d:34:a6:4a:57:e2:92:74:44:cb:68:01:3f:0b:13:93:00:
         6e:8e:4f:54:a4:35:8e:b6:22:32:ae:25:da:a0:37:a8:49:bf:
         f6:aa:88:ec:29:dc:44:a0:7a:a2:7e:be:60:a3:65:24:db:18:
         b3:f6:17:bc:10:64:e9:78:88:f8:6c:bc:fc:52:d4:15:29:fc:
         d6:88:6f:c4:be:2d:93:f7:15:1d:95:52:e8:9a:c0:7e:4b:77:
         12:79:b0:82:d4:45:c4:33:7b:8c:d6:8f:c8:ae:3c:89:1e:0b:
         da:80:5d:70:d1:5c:22:5b:99:45:44:d0:c0:6b:ac:3a:6b:bc:
         23:f4:fc:34:d1:92:21:f0:05:b6:cc:3e:0f:3a:eb:87:27:d8:
         60:4c:c0:6f:59:44:f2:6a:a3:6c:bc:e8:c3:f1:c6:3e:ac:36:
         f3:98:07:60:98:c4:69:1d:42:15:99:9b:2f:3d:a8:47:51:84:
         4a:36:bf:09:07:b6:43:1f:f4:21:44:5c:8f:07:4f:53:04:03:
         21:b6:55:bf:17:b7:09:12:6d:43:f1:6a:93:d5:97:82:f5:8c:
         a7:d9:ea:aa:4f:25:4c:67:53:35:cc:9b:c6:35:bf:8e:33:11:
         b7:f6:ed:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:48:23 2025 by rpki-client