Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
File:                     LkJv6Qhstq8B85H_T2nACDZNbu0.mft (raw, json)
Hash identifier:          eSlEwfuTBuGlt8Qa1mLtFJolpmleJ+2NCFIjEz6/CVI=
Subject key identifier:   1A:75:F3:19:0E:33:65:67:9B:5A:13:42:15:06:6F:8F:41:44:CE:F7
Authority key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
Certificate issuer:       /CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Certificate serial:       01976BF44C0080F319464B3DA5A67414883E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
Manifest number:          1524
Signing time:             Sat 14 Jun 2025 01:01:01 +0000
Manifest this update:     Sat 14 Jun 2025 01:01:01 +0000
Manifest next update:     Sun 15 Jun 2025 01:01:01 +0000
Files and hashes:         1: LkJv6Qhstq8B85H_T2nACDZNbu0.crl (hash: +silZ3bJO9WmU1kuJyseH6H6PzYu8D9RQ8pIj3rrLT4=)
                          2: jS_G6el4wEcgi8my5R0XT21ut5Q.roa (hash: Q5lJn0D9zs18LOmkVI8eROdi6ECwhGDbp8byuxpzAUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f4:4c:00:80:f3:19:46:4b:3d:a5:a6:74:14:88:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
        Validity
            Not Before: Jun 14 01:01:01 2025 GMT
            Not After : Jun 15 01:01:01 2025 GMT
        Subject: CN=1a75f3190e3365679b5a134215066f8f4144cef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:81:b0:61:b6:27:a4:5e:b2:de:7a:8a:39:0d:
                    0e:70:96:23:fe:a4:79:97:dd:8e:a9:e3:62:a9:59:
                    ea:9a:68:08:98:87:6f:ea:ca:11:0c:a6:03:9a:d1:
                    a6:5a:93:bf:30:98:3c:b2:c0:49:ae:d5:24:1f:9c:
                    5f:9b:58:05:b2:ec:3a:fb:d4:fc:1a:d6:7e:82:6f:
                    4a:16:50:b7:78:62:a3:8c:51:77:4d:cf:fd:df:ca:
                    8a:1b:be:a0:1a:52:e4:91:1e:22:a4:6e:e8:ee:9c:
                    41:97:65:8e:74:57:67:24:2a:06:34:5a:f2:8b:17:
                    c4:df:0d:76:0d:a9:7d:85:e7:32:d0:b0:7b:88:f5:
                    53:58:e2:06:58:56:c7:f9:d2:18:6e:70:6e:8a:a7:
                    fd:7b:9f:02:03:f2:c0:81:c3:2b:23:ec:91:97:de:
                    13:0f:35:86:cf:87:24:cf:e5:7c:70:68:89:94:1e:
                    da:97:0f:2f:d8:47:88:63:f1:7a:35:13:74:02:37:
                    3a:a7:af:7a:f9:e5:d6:52:af:2d:75:46:eb:ae:d1:
                    e6:0f:0f:58:44:d9:15:03:e2:bd:a8:88:0c:16:e2:
                    6b:54:76:b1:a6:ec:00:26:c6:d0:a0:c8:2e:12:7a:
                    c1:4f:bd:f9:e4:f0:60:c5:51:b3:7b:03:ae:89:60:
                    91:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:75:F3:19:0E:33:65:67:9B:5A:13:42:15:06:6F:8F:41:44:CE:F7
            X509v3 Authority Key Identifier:
                keyid:2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:b4:a1:9b:03:53:81:ea:b6:89:63:7c:2f:c1:51:50:7c:ab:
         72:26:57:c4:01:6b:bd:6e:7e:36:37:30:df:ba:f0:e0:aa:bc:
         9b:f1:7f:18:6c:26:c7:da:78:07:9a:34:0e:ed:19:8b:42:91:
         73:b9:98:cd:40:c9:f1:32:05:31:4f:75:5b:2f:f4:c6:86:20:
         5e:4c:8e:36:eb:9c:1f:47:47:0f:8d:ec:8c:40:e3:d2:bf:26:
         18:a7:af:1a:eb:26:54:e4:f0:75:c5:f5:5c:25:9c:40:87:30:
         fe:eb:5f:d0:ed:69:4e:e0:e6:e8:92:b7:ea:f7:bb:15:ee:43:
         65:e5:2f:6f:02:e3:0a:36:1f:73:8a:82:44:4c:93:a3:a4:d5:
         47:a1:0c:94:d2:60:15:bb:cf:f0:d5:d5:0a:9c:02:fc:42:83:
         de:b8:7e:70:0c:7f:00:8a:ed:4b:95:f6:6d:0b:5f:3b:8e:31:
         ca:d4:5e:c8:45:88:85:7c:1f:17:b4:69:be:3c:5d:0f:93:5a:
         7b:34:d8:64:8a:7d:b8:f8:8f:39:3c:45:84:52:50:ad:39:0f:
         b3:e6:74:21:52:cc:62:58:bb:a7:ad:81:e5:5a:c5:a1:48:04:
         1b:44:a9:82:79:cc:6f:c5:14:62:0e:1d:fc:e8:d0:d3:61:99:
         3d:8f:cf:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:31:44 2025 by rpki-client