Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
File:                     LbYW860DY-cmnMLrWNG8CGzJdfI.mft (raw, json)
Hash identifier:          Nm2Oiu6N8ZT2NttegC7P5RPrC8BVT1+EhDTv+AvtoUM=
Subject key identifier:   E4:3F:FC:F9:78:9E:A2:15:53:AB:39:90:9B:47:F7:A6:B5:31:A6:B5
Authority key identifier: 2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
Certificate issuer:       /CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Certificate serial:       01965537E08BF64428A4CA47474385A8D6FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
Manifest number:          14FD
Signing time:             Sun 20 Apr 2025 22:00:47 +0000
Manifest this update:     Sun 20 Apr 2025 22:00:47 +0000
Manifest next update:     Mon 21 Apr 2025 22:00:47 +0000
Files and hashes:         1: LbYW860DY-cmnMLrWNG8CGzJdfI.crl (hash: TIKtjso+5VixlnVphYli4RVmlh5v2PnjbB1M42MEsGo=)
                          2: TtiFva0B7nBQnunu1qXuQVvAjRk.roa (hash: BCLtQWteuqq7HD+J7kkS4GO2lBhow7GRQ0k6IwJXdnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:37:e0:8b:f6:44:28:a4:ca:47:47:43:85:a8:d6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
        Validity
            Not Before: Apr 20 22:00:47 2025 GMT
            Not After : Apr 21 22:00:47 2025 GMT
        Subject: CN=e43ffcf9789ea21553ab39909b47f7a6b531a6b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6d:50:27:4f:9b:7d:8d:d4:de:4e:4c:e3:d5:
                    e4:bb:ed:cb:27:d5:39:31:8a:fa:a0:47:93:2e:e5:
                    23:09:43:a0:e7:cd:7b:75:8d:20:97:6d:ac:9c:36:
                    d7:88:a0:8f:63:49:60:dd:a3:8f:f0:6f:41:67:9a:
                    19:84:7e:f9:7a:c7:fb:fa:1e:ac:ab:af:7c:9d:66:
                    81:b0:87:dd:14:69:51:39:84:8a:43:96:64:30:e4:
                    4b:f1:fa:11:d8:41:93:15:a2:8c:85:9d:0b:1c:56:
                    4f:ab:f5:69:ed:ac:31:47:4c:cd:4e:0d:3d:e8:43:
                    77:0d:84:00:71:6b:50:a8:f9:4b:33:38:46:ce:a9:
                    cd:48:ab:28:99:44:49:ca:3f:32:bf:d9:6d:4f:64:
                    10:5a:b3:1a:38:68:c2:e0:8e:92:56:76:9d:62:9e:
                    c6:50:b2:23:c6:a6:94:63:3f:b5:6f:1b:54:b3:b7:
                    bc:d5:bb:d8:bc:2b:db:70:e0:e7:48:20:d0:21:18:
                    47:f2:24:5a:4d:18:30:3d:32:ac:69:5b:94:d2:e1:
                    fd:59:26:1b:29:f8:1b:35:61:1b:d8:b9:4e:ee:cf:
                    e6:9f:2c:dc:b3:dd:ec:81:1b:20:ea:80:8b:61:ef:
                    07:1e:49:80:43:8c:de:5e:0b:da:2a:fd:46:83:70:
                    07:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3F:FC:F9:78:9E:A2:15:53:AB:39:90:9B:47:F7:A6:B5:31:A6:B5
            X509v3 Authority Key Identifier:
                keyid:2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:5a:36:31:c7:8f:1e:e2:b6:8c:ad:a6:f2:92:8d:12:cb:ac:
         63:8b:5a:15:0e:9c:b4:e3:0e:a8:98:ff:fb:bb:ed:a6:85:1b:
         11:85:8d:1c:3e:0a:fe:68:78:4e:68:b5:5f:da:41:71:bf:53:
         f5:b6:f5:7e:13:4c:21:e7:c5:1d:75:1b:6f:81:be:ed:31:23:
         08:ab:a4:ec:ad:3e:12:5a:44:f3:e1:c3:2f:23:bf:a2:62:05:
         35:49:b0:2d:ff:08:24:d7:9d:78:67:4b:17:b1:6a:05:a6:cb:
         c4:16:90:88:31:cf:05:44:14:ec:39:bc:3e:78:07:82:fb:60:
         8e:0f:d2:ee:a2:a1:d6:cc:a2:8a:6f:f0:27:07:21:e3:7c:63:
         82:b3:43:c2:d5:e7:27:37:02:17:d8:44:cf:3f:ee:cc:02:59:
         7f:50:29:e4:4a:0a:d9:79:69:5e:7c:dc:b3:41:da:a6:bb:0f:
         02:3c:9d:ad:23:60:24:78:29:c7:97:29:34:89:70:7e:88:62:
         26:52:6b:de:ae:7f:69:88:78:50:1c:87:69:14:ee:df:35:9b:
         26:90:9d:c4:e1:9f:04:d1:13:86:4c:de:39:45:d6:6f:2f:73:
         df:e6:a0:ab:6b:10:ba:c7:be:07:f6:45:03:a9:8d:6a:ca:e8:
         27:1f:0f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:27:38 2025 by rpki-client