Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft
File:                     LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft (raw, json)
Hash identifier:          yg/dtSpjKf9rqKP2rCpsmsZ1Xa9Gr7lTz8d5zXSkL3g=
Subject key identifier:   22:82:53:AB:0E:4F:FF:9E:87:55:20:B8:48:B4:82:45:D0:5A:F1:23
Authority key identifier: 2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44
Certificate issuer:       /CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
Certificate serial:       019777C14FBFE5ABF8CCF759C2AC8D596DF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft
Manifest number:          10DC
Signing time:             Mon 16 Jun 2025 08:00:46 +0000
Manifest this update:     Mon 16 Jun 2025 08:00:46 +0000
Manifest next update:     Tue 17 Jun 2025 08:00:46 +0000
Files and hashes:         1: 2zzUP42PSDjYPPlHV41sNEGuQm8.roa (hash: 3WYS30ATIqzOFvG4XYkxeuJlriDYGMdvapCa66rATak=)
                          2: LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl (hash: 8NNH80ZT0pSQvh81xUkfES7/rn0ezcruN1ZsP/H7PKs=)
                          3: NXdlMjppFlDgpqvrpd1dUCT0Nd4.roa (hash: vFfItKSvE8cyKCuMsk2TF0b+TYLCK752KcmEvCAy640=)
                          4: a-yoqKKM2_VTyMIpYk7of2SsSkg.roa (hash: tkjvrZdB0sy56VknBMzLGgv8ID+xT8Z3KrJT0me2WLI=)
                          5: g-jIWTGusT1Pd0EzYCYJPlo_V10.roa (hash: rU4QB22UKJ/f6i1fM6bnIKFFo0DzgyOmLtH9gDvBjBM=)
                          6: ru2syxCTFSkcHXzvmaT8k_sSwdE.roa (hash: cb/4JPWzlbHrciybJdWfxGFnExQb99fweCf16u1aJnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:c1:4f:bf:e5:ab:f8:cc:f7:59:c2:ac:8d:59:6d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
        Validity
            Not Before: Jun 16 08:00:46 2025 GMT
            Not After : Jun 17 08:00:46 2025 GMT
        Subject: CN=228253ab0e4fff9e875520b848b48245d05af123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e9:bc:7d:ca:fa:aa:51:53:8d:91:35:1e:bd:
                    ee:9f:29:f5:17:ec:d7:3d:1a:1f:88:06:ff:44:62:
                    1a:14:d3:23:19:c4:67:7f:60:dd:e5:d6:8c:57:5a:
                    25:b5:cb:8b:61:70:99:ef:47:87:aa:f9:e7:d0:5c:
                    d9:ca:7f:81:7e:78:56:e0:92:2e:47:a4:31:fb:17:
                    ac:17:1d:0b:80:04:f8:82:d2:b6:41:68:61:8b:07:
                    e9:59:9e:38:62:f1:43:73:91:fb:f4:20:1b:47:97:
                    43:aa:7f:2e:10:a2:ad:ba:e0:17:58:74:e8:c8:16:
                    f4:04:f6:8d:f6:d3:e3:dc:f5:26:34:41:f9:3c:85:
                    e3:1c:02:97:fc:c6:52:a0:50:64:63:e5:ba:3c:7e:
                    9b:14:42:5d:cb:bc:86:8c:62:5e:e2:6b:6b:b3:9f:
                    be:61:21:e1:63:05:0d:81:8c:ab:01:e6:13:b6:a0:
                    c4:5f:d6:f1:82:e8:97:44:ac:87:79:9a:e1:48:20:
                    ff:d1:35:46:bf:fd:42:72:80:d8:d6:04:ea:e1:62:
                    93:a2:cd:ba:c1:e0:98:0e:fb:f7:ed:d7:02:52:ae:
                    c9:d2:bd:07:ae:2e:f9:28:91:91:30:49:3a:f7:42:
                    66:be:fa:30:e6:35:d4:aa:ef:f8:a0:db:03:fe:7f:
                    e9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:82:53:AB:0E:4F:FF:9E:87:55:20:B8:48:B4:82:45:D0:5A:F1:23
            X509v3 Authority Key Identifier:
                keyid:2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a6:52:45:30:0b:c9:0b:93:f7:85:37:df:2f:f5:75:8f:ea:
         77:6e:08:34:ac:31:60:19:30:32:bf:50:66:08:53:49:29:3f:
         25:45:3f:84:4a:c3:a8:1b:dc:e7:2c:77:8b:21:45:d6:37:11:
         63:2f:b2:44:eb:36:2d:a6:13:54:e2:b9:0a:af:b9:31:79:1f:
         3d:9d:70:ee:01:ad:18:33:58:14:43:4b:ae:1a:71:28:57:0a:
         93:ed:20:91:b6:27:54:e2:a9:4e:f3:1d:b8:d6:c2:af:7a:8d:
         1d:e1:d4:09:dd:44:6c:a6:4c:2b:b7:1e:3d:a3:8b:50:52:1a:
         b5:02:f9:4b:24:8e:bb:6a:2b:f8:54:08:9d:17:26:62:41:71:
         60:85:e7:69:68:71:2f:9e:35:0d:84:28:53:52:87:6b:08:5c:
         73:c6:fd:fc:13:d2:04:94:2e:1d:f0:fa:6a:29:39:cd:66:f8:
         d0:74:eb:bd:15:1e:f0:b3:bf:e5:84:7d:93:77:5e:01:2d:d7:
         7d:62:c8:b1:21:48:de:43:e5:26:4e:21:94:7b:a4:15:cb:41:
         59:b0:c3:b0:a8:65:ad:69:dc:36:ba:36:8b:77:29:5c:7a:87:
         0f:fe:14:ad:b6:27:80:ca:2f:ce:ec:ad:ad:24:09:62:90:f9:
         2d:70:dd:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd3wU+/5av4zPdZwqyNWW3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNTY2NGUwMjkzNmNiNWI1NDU0ZDU5NWM1MzgyYjdlN2Ew
Yzc5NDQwHhcNMjUwNjE2MDgwMDQ2WhcNMjUwNjE3MDgwMDQ2WjAzMTEwLwYDVQQD
EygyMjgyNTNhYjBlNGZmZjllODc1NTIwYjg0OGI0ODI0NWQwNWFmMTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOm8fcr6qlFTjZE1Hr3unyn1F+zX
PRofiAb/RGIaFNMjGcRnf2Dd5daMV1oltcuLYXCZ70eHqvnn0FzZyn+BfnhW4JIu
R6Qx+xesFx0LgAT4gtK2QWhhiwfpWZ44YvFDc5H79CAbR5dDqn8uEKKtuuAXWHTo
yBb0BPaN9tPj3PUmNEH5PIXjHAKX/MZSoFBkY+W6PH6bFEJdy7yGjGJe4mtrs5++
YSHhYwUNgYyrAeYTtqDEX9bxguiXRKyHeZrhSCD/0TVGv/1CcoDY1gTq4WKTos26
weCYDvv37dcCUq7J0r0Hri75KJGRMEk690Jmvvow5jXUqu/4oNsD/n/pOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKCU6sOT/+eh1UguEi0gkXQWvEjMB8GA1UdIwQY
MBaAFC5WZOApNstbVFTVlcU4K356DHlEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGxaazRDazJ5MXRVVk5XVnhUZ3Jmbm9NZVVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yN2M5MTktY2NjZS00NmE5LTg0YjMt
ZWY4MWZjYTYzMDI5LzEvTGxaazRDazJ5MXRVVk5XVnhUZ3Jmbm9NZVVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yN2M5MTktY2NjZS00NmE5LTg0YjMtZWY4MWZjYTYzMDI5
LzEvTGxaazRDazJ5MXRVVk5XVnhUZ3Jmbm9NZVVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6ZSRTAL
yQuT94U33y/1dY/qd24INKwxYBkwMr9QZghTSSk/JUU/hErDqBvc5yx3iyFF1jcR
Yy+yROs2LaYTVOK5Cq+5MXkfPZ1w7gGtGDNYFENLrhpxKFcKk+0gkbYnVOKpTvMd
uNbCr3qNHeHUCd1EbKZMK7cePaOLUFIatQL5SySOu2or+FQInRcmYkFxYIXnaWhx
L541DYQoU1KHawhcc8b9/BPSBJQuHfD6aik5zWb40HTrvRUe8LO/5YR9k3deAS3X
fWLIsSFI3kPlJk4hlHukFctBWbDDsKhlrWncNro2i3cpXHqHD/4UrbYngMovzuyt
rSQJYpD5LXDdtA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:32:19 2025 by rpki-client