Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
File:                     lzvsM65zjJiViBnGwTuzNe40q0w.mft (raw, json)
Hash identifier:          IojFK37moIY0APLL4cVpC6AN3VoTSgTdGJvkZ2SufMk=
Subject key identifier:   1B:54:51:8A:A8:52:00:3B:43:DE:3A:C6:3F:C7:CC:A5:E5:6C:A8:C5
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Certificate issuer:       /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial:       0197733FD7DE0F240AF279FC4C0CDD89CF5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
Manifest number:          0C39
Signing time:             Sun 15 Jun 2025 11:00:53 +0000
Manifest this update:     Sun 15 Jun 2025 11:00:53 +0000
Manifest next update:     Mon 16 Jun 2025 11:00:53 +0000
Files and hashes:         1: 04AAIWN8CdjN6G01O3D_l5i-Jvk.roa (hash: Mv4GpM35beFDVPlXDkHbY9A9imQnPo9JK9qNbOoM+YU=)
                          2: 9-T9tTEpFFagDxBNkX4Bbf2UnDM.roa (hash: G5P+io7+nluFSPyZaIxd4Qa6X2iCyWaqgj9ylJYiWn8=)
                          3: lzvsM65zjJiViBnGwTuzNe40q0w.crl (hash: jmzJLLD2bmQXdjdWG8I+B8B0Z4GvMS0zR3QW7q/Dd6Q=)
                          4: tuawZTEX7vHBTQMJyQg0WD-oypg.roa (hash: IFKGL2W7O7px/Tqsp660BBZcbUWDZWgLugycTaSmqvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:3f:d7:de:0f:24:0a:f2:79:fc:4c:0c:dd:89:cf:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
        Validity
            Not Before: Jun 15 11:00:53 2025 GMT
            Not After : Jun 16 11:00:53 2025 GMT
        Subject: CN=1b54518aa852003b43de3ac63fc7cca5e56ca8c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f0:a5:a7:7a:9f:80:c2:34:90:65:b2:ee:1b:
                    1e:a5:73:af:0f:a9:e1:ef:c9:35:14:55:7b:ca:71:
                    8f:0f:54:97:a6:42:e7:35:0e:a8:66:4e:e4:59:8e:
                    62:0c:18:04:d7:a7:56:b1:0f:e8:1a:4b:a8:a0:61:
                    43:03:e4:9d:f5:27:dd:af:0f:93:f8:56:1d:95:2d:
                    85:19:a5:e0:1a:31:a6:02:43:bd:8f:1c:ee:33:0f:
                    1f:ce:53:ed:3d:5a:0b:b7:ff:ee:f7:8d:6a:63:4c:
                    01:a5:d3:66:55:10:66:6b:49:3b:f5:a0:3e:3e:ee:
                    ee:b5:45:3d:78:6a:6b:3e:34:7c:2c:fc:a7:12:df:
                    4f:ab:14:30:b7:20:35:77:b0:c4:fb:8e:61:3d:97:
                    ba:b0:66:a6:61:26:9f:c4:18:57:9b:25:2c:da:42:
                    16:f1:a0:94:c5:f4:f2:6a:9d:0e:9f:2f:2b:4c:23:
                    2f:bc:c8:aa:b4:31:de:6a:e0:33:2b:da:ca:3b:4d:
                    00:fe:4d:f1:12:e8:2a:f0:83:58:32:26:4f:87:17:
                    d7:09:94:6f:f5:4f:a1:fb:2f:bb:4e:f8:01:12:64:
                    65:8b:46:b5:02:cb:06:22:0d:30:a7:6e:a5:14:e3:
                    82:c5:e7:3d:c5:5e:eb:72:a6:fa:11:7b:3a:05:8b:
                    ac:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:54:51:8A:A8:52:00:3B:43:DE:3A:C6:3F:C7:CC:A5:E5:6C:A8:C5
            X509v3 Authority Key Identifier:
                keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:20:85:4d:2b:e6:fb:2e:21:51:96:6d:12:21:30:4e:18:82:
         e6:fd:0b:68:12:e1:a3:62:38:dd:ac:52:22:8d:1b:57:c9:69:
         46:78:7c:5d:ad:89:e5:4c:15:cc:f9:1c:aa:d5:b2:cc:46:56:
         d2:48:67:88:0d:e2:3e:34:60:26:65:20:f3:15:19:7b:c7:b3:
         fe:12:d2:d7:64:bf:0e:f8:05:29:11:73:34:24:3b:68:2d:93:
         77:a0:8b:68:02:59:86:a3:a7:eb:08:14:27:be:fa:a6:c5:e7:
         1d:91:81:3c:fe:50:4a:09:94:34:d7:d4:f6:c9:5b:a8:4c:bb:
         86:3c:1d:8b:ff:de:6a:1c:eb:78:0d:b2:ea:7d:4b:79:df:cb:
         71:1a:32:b5:6b:c1:c3:2b:45:10:e0:1a:49:23:e6:7a:56:22:
         fc:b8:d4:d7:c9:dc:9f:bf:f3:06:b0:7a:ae:2a:dc:f9:e2:98:
         2f:54:c8:87:91:d8:a7:23:c2:ee:ab:da:36:95:7e:1a:e9:f7:
         d1:1b:c8:3c:fe:d1:62:96:6e:40:4c:5a:1c:d7:d8:6e:31:c7:
         26:6c:3d:68:e1:8e:d0:cc:54:cf:86:12:1f:f8:54:15:6c:06:
         bc:c1:61:e0:60:25:96:34:c9:57:ed:9d:c1:90:d8:ed:62:f6:
         82:1d:e1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:35:10 2025 by rpki-client