Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
File:                     LMNcIJCZlCHTPGNZybbmgYKg8nM.mft (raw, json)
Hash identifier:          UiQzNwXARm9FE/nTA3Q3Yr43pSHmT7llamBChg8Hiac=
Subject key identifier:   DD:64:F7:F7:AB:5E:7E:48:52:01:37:CD:28:3C:5E:8C:87:54:DE:3E
Authority key identifier: 2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73
Certificate issuer:       /CN=2cc35c2090999421d33c6359c9b6e68182a0f273
Certificate serial:       0196A276D7E5D8FFC10B69183A9C28265DC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
Manifest number:          14B5
Signing time:             Mon 05 May 2025 22:00:19 +0000
Manifest this update:     Mon 05 May 2025 22:00:19 +0000
Manifest next update:     Tue 06 May 2025 22:00:19 +0000
Files and hashes:         1: LMNcIJCZlCHTPGNZybbmgYKg8nM.crl (hash: lB3HaKd6tPFU3GK9XjeWnkHmTNdXkEvgVLVF8ZfiCPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:76:d7:e5:d8:ff:c1:0b:69:18:3a:9c:28:26:5d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cc35c2090999421d33c6359c9b6e68182a0f273
        Validity
            Not Before: May  5 22:00:19 2025 GMT
            Not After : May  6 22:00:19 2025 GMT
        Subject: CN=dd64f7f7ab5e7e48520137cd283c5e8c8754de3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c9:26:d4:d1:f6:04:1c:16:45:ca:7f:24:25:
                    cc:8b:2d:ac:f8:68:ba:33:83:c0:5f:14:bd:40:89:
                    98:70:dc:e8:99:43:f2:85:d4:b5:cc:1f:cb:ae:10:
                    12:5e:b0:09:31:05:c5:ef:73:87:42:37:d6:2d:71:
                    c2:34:d3:97:3b:60:e1:cd:3d:9f:b6:3c:34:44:c2:
                    a6:b1:9f:4e:33:64:43:ac:86:c3:b3:16:87:a8:20:
                    7f:c7:2a:3d:ed:94:1d:65:27:39:a5:b5:6c:96:46:
                    99:fd:b6:78:67:ee:1e:f5:19:5c:02:e2:99:15:97:
                    6e:99:8a:0d:7d:a0:0c:19:dc:e3:5a:35:68:b6:62:
                    1d:f9:dd:c5:f7:2f:99:68:4d:9b:78:69:a7:cb:ed:
                    50:c5:6e:83:91:4f:39:53:af:e8:00:ff:c9:36:0f:
                    cf:12:b2:01:b3:ee:5c:0d:24:9c:a2:cd:ce:af:a8:
                    cd:f2:b3:fc:6e:b4:b1:e9:dd:e7:fe:27:81:90:e6:
                    be:c8:bf:60:bf:5c:7b:90:59:cc:f2:03:5d:cb:ac:
                    5e:9a:78:69:be:25:39:e8:b7:00:a2:f8:26:de:a1:
                    78:96:0e:c9:18:30:15:1e:b5:6f:31:94:4a:af:e9:
                    dc:c5:63:57:34:51:7e:c3:8d:f9:1e:a3:70:f8:a9:
                    2b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:64:F7:F7:AB:5E:7E:48:52:01:37:CD:28:3C:5E:8C:87:54:DE:3E
            X509v3 Authority Key Identifier:
                keyid:2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:21:80:ab:94:95:28:2a:46:47:ea:89:ef:fa:e0:04:46:2d:
         0b:f4:a1:03:02:0d:76:50:7c:9e:b1:48:e6:50:eb:27:7a:5b:
         36:dd:ed:05:84:4e:4a:82:5b:93:c6:d1:c8:ce:4b:ac:bb:1e:
         e5:dc:ed:30:c8:34:81:38:7d:f1:f8:7f:e6:b0:e0:b0:c3:e5:
         3d:01:ec:4b:8a:a5:ea:ad:b8:e5:cf:7d:9d:9a:c9:39:98:01:
         95:1c:d6:fe:2b:83:ea:38:c9:be:46:4a:bf:35:2a:a1:a2:c4:
         a2:00:31:8f:a7:76:0e:a2:41:75:cb:75:80:c2:05:e8:08:a8:
         5f:b6:4e:c9:f8:56:13:4c:c1:0f:f5:65:a2:3b:d2:4a:9e:31:
         90:a4:cf:3d:4c:6c:87:e0:bd:b3:24:06:d8:af:16:37:0e:8f:
         16:3a:e8:84:0c:5b:66:32:7d:bd:15:c4:f6:26:10:65:8c:54:
         05:8a:a8:a0:ff:75:d1:cb:97:46:8d:af:20:6b:3b:ce:3a:fd:
         6b:39:f4:39:d4:3f:cd:7f:0d:81:60:b5:34:28:f6:a7:ca:18:
         c2:a5:79:11:16:dc:4e:5c:31:ff:51:be:0c:82:10:9a:d3:d6:
         f3:9d:11:c5:42:f0:a1:46:68:58:5d:5d:02:4c:4d:52:b7:24:
         a5:1f:4a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:05:41 2025 by rpki-client