Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
File:                     LMJf8ykY8LSTBiWdSDr7njgaORU.mft (raw, json)
Hash identifier:          jbMXoCPyAhHSnJUgcVKQ1YvOyANcYK+FMTBtPRIlO40=
Subject key identifier:   DA:1D:D6:AC:F7:3C:91:5F:7A:4F:36:C8:F1:A6:10:52:0E:73:73:7E
Authority key identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
Certificate issuer:       /CN=2cc25ff32918f0b49306259d483afb9e381a3915
Certificate serial:       019771514CB5793FAB1E6608284EDE970A8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
Manifest number:          159B
Signing time:             Sun 15 Jun 2025 02:00:42 +0000
Manifest this update:     Sun 15 Jun 2025 02:00:42 +0000
Manifest next update:     Mon 16 Jun 2025 02:00:42 +0000
Files and hashes:         1: 5SBRKvoUR77xMW-RFvy5_fTtMLs.roa (hash: cAg8Pd/EdFW/XOWvfVIMShqz0a9B/X838ZxVv7gFhww=)
                          2: Hu3G8484fKZTgdfl16c2pwBVLzw.roa (hash: 3SfpQQtf4mcFv0Cl8RORRLy8kXw31wWhyAgb5576Kg0=)
                          3: LMJf8ykY8LSTBiWdSDr7njgaORU.crl (hash: KUUllmK9PFflqtpGwv0D2YuP3ZDxXPOQFfgooDlGDMc=)
                          4: hnVCR69RVtD6DOQtKUfA66di3v8.roa (hash: tMJ65Uy32W65OI2kXkCrStjDFzn3a6wfoxc74YD8CGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:51:4c:b5:79:3f:ab:1e:66:08:28:4e:de:97:0a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cc25ff32918f0b49306259d483afb9e381a3915
        Validity
            Not Before: Jun 15 02:00:42 2025 GMT
            Not After : Jun 16 02:00:42 2025 GMT
        Subject: CN=da1dd6acf73c915f7a4f36c8f1a610520e73737e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2d:81:e7:ee:d0:9e:34:34:27:85:da:d1:eb:
                    e4:61:fd:a7:c7:81:9d:c7:93:b4:0a:31:69:e9:60:
                    f8:93:28:40:09:5e:85:4c:96:69:30:b7:e0:d2:6f:
                    22:8f:46:65:59:9f:a9:a9:d6:54:03:be:e2:bb:5b:
                    46:b7:d1:e4:5b:c7:06:cf:26:24:1d:dc:4b:44:c7:
                    6f:08:b3:15:81:84:43:47:aa:ee:4e:63:4c:e1:61:
                    43:8e:f9:f8:bf:f3:d8:d3:72:a5:3f:e4:0f:ab:d7:
                    57:71:35:f2:51:a8:b1:66:d3:1a:1a:91:50:8a:c8:
                    0d:45:af:b4:a3:dc:a4:45:ec:ba:bf:e5:0a:74:fe:
                    8f:93:3d:db:c1:87:cd:a8:5a:52:23:72:24:93:65:
                    88:88:c8:00:8b:ac:aa:44:a5:6b:05:bd:e7:ac:4a:
                    43:9f:16:d2:51:20:5c:17:50:a2:fe:1e:ce:ba:99:
                    5f:ac:ea:8c:a9:1e:e5:53:a4:d7:7c:8d:e4:ba:c9:
                    d0:c4:31:ef:97:39:7a:39:fa:f9:6a:21:bb:c5:89:
                    55:0d:1d:87:1c:ca:21:3d:6f:49:2b:77:73:9b:5a:
                    3d:0f:e5:1d:d0:d8:7f:86:9e:c3:de:ad:5a:05:06:
                    c7:4b:91:a4:22:24:75:9d:9d:27:04:f2:27:48:38:
                    44:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1D:D6:AC:F7:3C:91:5F:7A:4F:36:C8:F1:A6:10:52:0E:73:73:7E
            X509v3 Authority Key Identifier:
                keyid:2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:2f:bc:26:dc:ea:6a:7c:e6:1a:f6:84:f5:eb:a1:ea:fd:8c:
         55:8e:1f:0e:5b:e1:bd:b3:0b:b4:02:20:37:67:69:04:b5:77:
         99:35:01:d8:aa:41:30:5c:c2:be:86:1c:bc:45:f5:72:3c:29:
         3f:bc:6d:b2:d8:2d:a0:c3:d6:d3:69:ca:07:2c:22:5a:db:bd:
         27:af:1a:e4:9a:df:d5:16:c6:81:96:bd:31:8d:65:b6:13:58:
         65:ac:1f:5f:9d:fd:7c:e4:d0:61:b4:12:70:27:1d:6b:4a:96:
         dd:7e:05:57:ed:d0:1f:38:0e:2b:07:ff:0a:d5:f5:41:ab:dd:
         fa:39:0f:56:e3:6d:4d:16:56:bd:cf:ef:a6:d6:c6:15:75:a0:
         ed:78:4b:62:61:c4:5d:7d:80:a8:39:27:71:2a:4d:f4:e5:a4:
         fc:1a:78:4a:20:ec:3c:a0:cf:5b:2c:8b:bc:1a:f4:f8:85:77:
         32:66:27:af:b4:83:dc:ed:50:3f:40:70:61:03:d1:94:ad:0c:
         e4:8a:e0:cd:6a:85:83:dc:87:eb:b1:45:14:65:70:b6:75:9d:
         cd:f7:d2:76:60:95:bd:82:7c:33:c9:c2:2d:14:e9:5e:a0:a9:
         95:0f:af:47:2b:08:e1:43:31:6c:72:97:4d:35:05:81:c2:49:
         31:da:b7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:14:44 2025 by rpki-client