Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
File:                     lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft (raw, json)
Hash identifier:          ciFr30V5cZvIXcHqarO+aRJxfJAn271zE95QUTl27E4=
Subject key identifier:   6E:6A:8D:07:0E:14:AE:E7:B0:E6:38:A5:FD:C7:9D:5F:E2:FB:DE:49
Authority key identifier: 95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
Certificate issuer:       /CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
Certificate serial:       019775650E1CD1377A7AD7592EAF5F217CE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
Manifest number:          1593
Signing time:             Sun 15 Jun 2025 21:00:46 +0000
Manifest this update:     Sun 15 Jun 2025 21:00:46 +0000
Manifest next update:     Mon 16 Jun 2025 21:00:46 +0000
Files and hashes:         1: 7akWYjQwsX6a6HhUzkzvmpveN9o.roa (hash: NaXDBHO9cOnr/DrruhF4XLx1P8skQ7ZIYlWJ7+sC7iA=)
                          2: lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl (hash: FOG7dPdiSknEcLGmxyomAii3NipN7cI9nEW4hDNBWVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:75:65:0e:1c:d1:37:7a:7a:d7:59:2e:af:5f:21:7c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
        Validity
            Not Before: Jun 15 21:00:46 2025 GMT
            Not After : Jun 16 21:00:46 2025 GMT
        Subject: CN=6e6a8d070e14aee7b0e638a5fdc79d5fe2fbde49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:36:e6:cf:c1:52:e5:ca:0f:95:62:02:32:35:
                    86:5b:41:9b:7b:bd:e2:56:a7:26:6d:1b:cf:22:ef:
                    35:fc:3d:fb:d1:0e:5e:b0:00:d7:6b:a3:f5:c3:5c:
                    c8:a2:3f:ec:1c:74:d8:86:ac:03:3e:68:1d:f7:64:
                    83:41:a2:84:7a:ae:e3:14:e6:41:49:20:91:65:c0:
                    7a:65:0b:25:d9:c4:43:d8:4e:d6:7d:11:a0:6e:49:
                    09:03:03:d4:b7:fb:1e:7a:35:c6:b1:62:c1:1e:8c:
                    6c:08:8b:f8:1e:12:ef:a1:07:46:2a:dd:9a:88:de:
                    d8:ca:4b:03:9c:b3:b5:87:1b:af:74:1d:70:1f:e8:
                    db:e2:35:cb:d1:c9:6f:2f:cc:62:c7:77:f9:e3:31:
                    b3:80:45:32:b6:24:6b:65:a2:20:5c:92:a3:65:55:
                    6a:ab:47:39:2e:c4:e3:8b:6c:86:8a:08:84:a1:1d:
                    89:58:d9:f6:08:d6:cc:63:28:bc:5e:d4:f1:e6:db:
                    17:46:72:fd:d1:f6:7c:95:fc:23:67:60:70:62:f2:
                    42:c0:81:d7:40:e7:3c:06:d0:8d:48:7d:3c:f4:06:
                    8a:ed:50:c8:36:fc:69:e3:40:9a:92:76:b5:e3:4c:
                    67:46:21:e7:72:87:a0:5b:16:16:f5:82:6e:20:43:
                    64:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6A:8D:07:0E:14:AE:E7:B0:E6:38:A5:FD:C7:9D:5F:E2:FB:DE:49
            X509v3 Authority Key Identifier:
                keyid:95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:02:bd:2b:a9:39:44:f6:ab:16:59:9f:d4:fe:b0:5f:6d:23:
         a8:ac:97:a6:e6:a0:a9:f5:d7:c4:8e:9f:a5:59:ee:35:66:28:
         16:8a:16:6f:fc:e6:29:28:98:48:a6:b0:1d:ca:1f:05:80:29:
         9a:61:d5:e0:40:62:b1:27:8a:1f:95:10:32:d5:28:a6:49:e7:
         11:96:ab:f5:e2:a7:09:2c:f1:53:b3:5b:20:6c:64:e3:fe:56:
         7f:8a:4d:fb:76:5c:40:4e:99:d3:92:33:b5:7c:2c:f1:60:a9:
         82:ce:80:a1:b5:af:0f:90:72:fb:4d:fe:06:99:bd:f8:04:33:
         c9:c1:35:69:f6:f3:d2:f7:6e:7a:bb:b3:f3:c4:56:5e:b1:dd:
         c8:00:a5:c5:3b:c6:8a:62:b0:47:ef:68:56:4f:47:5d:6c:8d:
         8f:ab:be:51:e5:84:67:0d:c8:94:b8:79:cc:7f:5d:64:82:ed:
         84:81:d2:09:1f:15:0b:20:87:50:70:e7:f5:ff:c0:7c:99:89:
         6a:81:da:0c:b2:e2:d2:1e:49:e2:bf:c0:9d:d5:b2:d1:44:9e:
         3c:e0:b9:d0:02:e1:20:c2:d2:a9:b7:ec:9d:7c:70:0d:cf:bc:
         8d:82:60:6c:47:cc:43:7d:65:9f:38:9d:61:aa:44:37:56:e9:
         ce:05:34:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:43:06 2025 by rpki-client