Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
File:                     lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft (raw, json)
Hash identifier:          /shSFvr5wTzSWCWU29O6uQpHORyWGT2tPvTto4W6wRY=
Subject key identifier:   D8:1F:2A:F7:82:A8:BC:B2:10:90:6B:9F:03:50:8A:A2:6E:6A:22:16
Authority key identifier: 96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
Certificate issuer:       /CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Certificate serial:       01976A05FD2454F38F88A75551CE171A84CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
Manifest number:          0C6C
Signing time:             Fri 13 Jun 2025 16:01:06 +0000
Manifest this update:     Fri 13 Jun 2025 16:01:06 +0000
Manifest next update:     Sat 14 Jun 2025 16:01:06 +0000
Files and hashes:         1: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl (hash: BXI48/Jf+GZ//YkEtrfZ8wvhRVnHv1BLIbR7swatzx4=)
                          2: xk5JW7mEcm3gYIGJEbgbndDf_D4.roa (hash: vX0UTn7T1VcnsWTR+h1UQPipjvJLxqxVpR3OQQyE5Fg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:fd:24:54:f3:8f:88:a7:55:51:ce:17:1a:84:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
        Validity
            Not Before: Jun 13 16:01:06 2025 GMT
            Not After : Jun 14 16:01:06 2025 GMT
        Subject: CN=d81f2af782a8bcb210906b9f03508aa26e6a2216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:76:c3:ea:d9:92:fd:08:d4:35:d8:74:cc:ec:
                    c8:77:97:d6:5c:11:bf:78:51:d3:11:37:1a:9f:d6:
                    b6:83:f4:37:26:9a:a6:55:bf:ee:2c:a9:9d:df:27:
                    33:f9:87:1a:1c:3b:e2:e2:05:4a:b9:48:34:09:2d:
                    12:64:66:eb:9f:1d:b3:4a:06:49:ef:29:95:e6:c6:
                    78:c5:6f:2c:d2:74:84:2c:99:aa:bf:c1:37:34:0e:
                    3e:ad:b6:32:65:88:b8:86:44:4d:6b:b6:ab:64:df:
                    fa:dc:fd:c7:9d:57:e8:6e:90:c6:9c:2c:af:d3:33:
                    9b:0e:48:7f:87:15:63:02:e4:47:fe:be:87:19:09:
                    a4:1a:5c:f1:2f:8a:b5:e2:f1:34:5d:4f:4c:9c:26:
                    78:5a:23:0f:02:7a:c2:bd:eb:9e:a7:e8:43:bb:07:
                    9d:a4:d4:e6:e5:5f:c1:a4:14:b8:20:ff:1e:89:27:
                    b9:73:b6:84:81:1f:60:b8:4c:28:58:b3:01:ac:85:
                    37:91:64:af:d8:a6:aa:11:7c:0b:53:3e:19:d3:4e:
                    a5:51:47:f9:57:3b:47:5a:da:ea:97:de:d2:13:fa:
                    e4:dd:41:23:f7:ea:5f:c4:de:f2:9a:cc:97:64:43:
                    64:84:c0:fc:e7:a9:41:0d:39:3e:4a:19:ab:20:24:
                    b7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1F:2A:F7:82:A8:BC:B2:10:90:6B:9F:03:50:8A:A2:6E:6A:22:16
            X509v3 Authority Key Identifier:
                keyid:96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:98:4c:0d:c9:6c:ae:b9:e4:f5:95:d6:32:0f:15:be:bf:d6:
         b0:a2:a9:2c:cb:97:c4:da:52:6a:7f:f7:60:7d:4e:1c:7a:9d:
         86:b4:48:06:da:98:b7:fe:f5:98:8e:a1:3d:33:95:7c:ec:44:
         61:e1:d5:84:b9:39:59:61:f9:cc:fa:7d:cf:a1:79:ff:57:10:
         63:5f:7f:f8:d6:28:5f:ef:97:3e:ca:9f:1f:59:65:9c:05:39:
         e8:50:d2:33:12:dd:5e:9d:9a:20:9a:b5:8b:ee:a8:c9:c6:21:
         d4:d4:a2:5a:c7:39:5b:9f:db:f9:15:61:da:66:c0:3b:ed:5c:
         0e:2d:19:83:a8:61:3e:cf:3d:41:0c:55:40:1f:93:42:f7:a7:
         bd:c8:f5:c7:c9:42:3b:b5:3c:b5:6c:8d:ba:52:37:c1:98:0e:
         6e:5a:23:ff:6a:2a:c9:cb:c3:f1:1d:24:5c:42:85:74:d2:ad:
         70:43:c2:26:82:44:8e:1c:65:a0:48:54:0a:d5:2f:ae:d5:34:
         37:b9:f7:f9:8c:ef:e6:67:23:51:6d:6e:9f:2a:74:ad:d7:c2:
         66:bc:83:19:58:2e:88:00:2e:ee:d5:94:b6:8a:d1:91:14:9f:
         61:08:3c:a9:36:2b:f7:07:45:96:bb:0b:71:9a:07:59:27:3b:
         bc:2d:58:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:05:05 2025 by rpki-client