Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
File:                     LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json)
Hash identifier:          v3c8OxKZ8CZ7NWUrrkWSLQiJ9BYtn7RA94t6xqBWNcg=
Subject key identifier:   73:4F:6D:1F:20:AB:41:29:92:6E:4F:B1:04:FF:AE:9C:6A:F4:6B:7B
Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
Certificate issuer:       /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Certificate serial:       01976A3C9C731EA4173E8ACDB29BEC917217
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
Manifest number:          1587
Signing time:             Fri 13 Jun 2025 17:00:46 +0000
Manifest this update:     Fri 13 Jun 2025 17:00:46 +0000
Manifest next update:     Sat 14 Jun 2025 17:00:46 +0000
Files and hashes:         1: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: zWovz3CBNiBYNXFEGAzGsXKU2rzMdDIYEyMEja35oy4=)
                          2: k9ESiOC05FAL5OZXSx8n68sQwKU.roa (hash: x3z9I2/sycjs0uOQJeLYl+8lQLkZ9uNIg5/ImA60dEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:3c:9c:73:1e:a4:17:3e:8a:cd:b2:9b:ec:91:72:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
        Validity
            Not Before: Jun 13 17:00:46 2025 GMT
            Not After : Jun 14 17:00:46 2025 GMT
        Subject: CN=734f6d1f20ab4129926e4fb104ffae9c6af46b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:a3:06:dc:2e:eb:b0:73:9a:25:e8:25:f3:
                    fe:75:ae:28:ac:69:d5:f0:3e:70:1e:80:95:ca:a1:
                    87:30:48:fd:fa:fe:64:98:2a:c1:c9:21:78:fa:0b:
                    54:1c:9b:91:c7:27:90:1e:4a:79:2c:9f:dc:59:43:
                    a2:c6:bb:20:fb:d5:b9:76:69:44:30:54:df:f2:96:
                    ef:de:71:4f:dc:32:9c:4f:e0:73:d8:fc:e2:8b:15:
                    2c:97:4a:70:54:6e:9d:ff:2d:10:f8:89:2e:f5:29:
                    31:6a:87:ac:70:18:ca:a4:5e:28:c7:4c:95:fa:55:
                    07:c2:29:3c:09:29:1b:b9:77:d8:d2:79:24:51:62:
                    f7:6e:bb:cd:7b:16:b0:00:b0:3c:5e:df:32:85:a5:
                    76:8a:a8:34:1f:5c:8c:bd:53:92:4e:ec:94:f3:e0:
                    5a:eb:27:02:ec:3d:f3:61:e9:34:be:51:39:77:af:
                    ad:fe:27:51:15:6e:20:b9:3c:6d:63:5c:33:31:9c:
                    ed:32:be:e5:bf:25:4c:55:47:c7:5d:17:03:5f:9d:
                    e0:78:5f:01:d9:64:8b:b8:2a:8a:1b:38:a9:28:f6:
                    56:c9:e0:65:94:fb:66:ea:ed:4a:c3:9f:6e:09:69:
                    61:0c:41:5c:80:e6:42:15:9a:eb:3c:fa:29:6e:24:
                    a9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4F:6D:1F:20:AB:41:29:92:6E:4F:B1:04:FF:AE:9C:6A:F4:6B:7B
            X509v3 Authority Key Identifier:
                keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:11:12:ae:b8:32:80:6f:14:08:66:60:1c:8b:99:d0:0a:5f:
         81:92:9c:1c:10:cf:1a:93:da:ae:8d:8f:f5:0c:26:6d:b8:a4:
         34:5d:08:cd:94:c0:00:f1:b7:3f:4f:b5:4e:a4:b3:22:fb:66:
         1c:5d:90:8e:f6:cb:11:1c:59:84:30:b6:18:29:b1:7b:32:e5:
         70:5a:c2:06:fa:7e:76:46:2f:6c:73:b9:2a:be:6b:c1:6a:c6:
         b7:4f:f9:3a:9b:dc:cd:c2:a1:67:9c:5c:f5:a3:b9:1f:63:52:
         96:5a:dd:16:7a:9b:08:04:d4:81:ef:55:4d:d4:6f:a6:68:1a:
         c6:fa:51:9b:67:76:35:b5:a2:05:36:7b:b6:24:de:3d:1a:90:
         05:af:4c:75:9d:2e:ad:2d:10:01:33:cd:3e:9f:d8:4c:ba:84:
         fa:ae:e8:a4:72:10:4a:b9:de:05:dc:72:77:f3:bc:62:f7:f8:
         ce:7e:fe:1e:10:ba:7d:e3:3a:f1:cf:fc:1e:f7:f8:df:05:aa:
         98:fe:f8:3c:bb:03:b9:ca:57:e7:7d:aa:e2:bb:aa:2f:08:f6:
         e1:c3:eb:69:b4:9c:09:90:b2:4a:40:0a:a1:c7:76:db:c1:d0:
         ec:68:19:d2:50:f8:97:80:89:2c:52:85:fd:ac:9a:9a:fe:70:
         c2:85:2b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:01:13 2025 by rpki-client