Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
File:                     LPHkHOfCQk-d-I65hGTJsIJr6cE.mft (raw, json)
Hash identifier:          zf/jgjq6MWx9mb9w3faRQlZzB4pBVgV3V4tbdEirZuc=
Subject key identifier:   F8:1B:7C:87:6A:0E:E1:7A:58:65:A9:1C:A1:F3:E7:46:71:F6:4E:53
Authority key identifier: 2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1
Certificate issuer:       /CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1
Certificate serial:       01964D7E65F9A7D0C6553D29F99301A83B56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
Manifest number:          0E8B
Signing time:             Sat 19 Apr 2025 10:00:51 +0000
Manifest this update:     Sat 19 Apr 2025 10:00:51 +0000
Manifest next update:     Sun 20 Apr 2025 10:00:51 +0000
Files and hashes:         1: 21s8U-775BXGrImXYw5behrvCTg.roa (hash: dw6lhA0ynQrPKMXAZyoEl/NZ/Jca/wYUb0RkllkJszc=)
                          2: LPHkHOfCQk-d-I65hGTJsIJr6cE.crl (hash: 0XztNqAyXfvkQK2hYkJVqc+e/uJHqfPej/U2X5vGmPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:7e:65:f9:a7:d0:c6:55:3d:29:f9:93:01:a8:3b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1
        Validity
            Not Before: Apr 19 10:00:51 2025 GMT
            Not After : Apr 20 10:00:51 2025 GMT
        Subject: CN=f81b7c876a0ee17a5865a91ca1f3e74671f64e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ed:ec:32:37:ef:d8:02:a8:f0:d3:0e:99:76:
                    e4:a3:c6:84:0a:67:9c:95:4d:a6:25:ae:77:3c:1b:
                    17:6a:be:fc:67:87:ac:a6:91:56:96:e7:81:9b:c8:
                    0a:3e:73:93:48:5b:31:f0:9a:78:59:06:0b:91:d4:
                    84:49:14:7b:48:6d:18:ce:6d:ae:82:fd:8d:9e:3f:
                    f5:8d:d0:a1:8e:8f:72:90:6b:e4:81:e8:49:81:1b:
                    ac:9a:b6:6a:c2:42:c0:d8:01:e7:ea:6e:4b:8c:72:
                    7d:6b:34:20:8d:b2:c8:ef:28:33:28:93:98:b0:75:
                    b8:bb:7e:8d:49:15:db:d3:31:bb:1c:c0:94:d7:5f:
                    c3:c2:e2:27:ad:84:43:e1:f5:2b:7d:b7:8a:28:cd:
                    8b:f7:85:60:8b:a4:4b:6b:dd:b1:dd:69:ff:d0:41:
                    9f:7d:ef:a5:77:b5:aa:c3:80:ab:11:21:d0:b2:9d:
                    28:b4:d2:e2:70:4c:fc:f8:0c:5a:d4:20:73:42:79:
                    78:78:e2:4c:68:63:49:5c:e5:22:5a:d3:0b:af:0d:
                    94:07:5f:6b:a0:24:1c:53:55:7d:1b:33:63:fa:cc:
                    91:2b:10:c6:b0:0c:cb:40:f2:d6:aa:00:55:ae:1a:
                    a0:d1:e3:40:3d:b1:f9:43:ae:85:94:d0:7e:f8:29:
                    cb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1B:7C:87:6A:0E:E1:7A:58:65:A9:1C:A1:F3:E7:46:71:F6:4E:53
            X509v3 Authority Key Identifier:
                keyid:2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:16:c8:92:1d:c1:30:fd:24:89:eb:bb:46:24:d7:93:e1:1b:
         0e:b9:8e:16:1e:cc:e2:3d:62:9e:67:ea:66:00:67:9e:3a:85:
         97:74:3a:d3:01:1c:5c:d9:5d:14:20:7c:a2:b1:99:ab:67:47:
         f3:64:15:a7:2c:6a:cd:8b:07:f7:28:31:3c:30:e4:5b:00:d8:
         a0:04:4a:80:46:ca:ea:90:a7:a2:18:72:eb:a3:be:66:e0:67:
         4b:5b:75:57:4b:2e:3f:67:86:10:f7:3a:78:25:71:a4:0a:62:
         4e:73:a2:43:cf:e1:cf:37:54:14:d4:7a:22:c3:05:3c:f0:4f:
         1c:b6:24:eb:4e:81:00:16:d0:0f:81:5f:db:3c:ec:20:20:97:
         59:29:24:9b:d8:75:f3:2d:79:4a:9f:0a:c5:ae:f5:d0:6c:34:
         0e:02:a5:38:a1:a2:20:f9:f2:68:8f:5a:7f:42:14:13:a8:41:
         47:82:37:c1:df:6f:e6:02:60:0f:0d:c5:96:df:b0:0a:c6:ec:
         61:24:33:b8:b5:a8:e9:b8:9b:80:92:f5:9a:53:e7:33:e0:12:
         aa:68:e6:98:4d:dc:83:15:4f:2b:2a:a2:f6:80:2f:a5:c1:3e:
         0b:45:e1:88:85:ab:88:43:ce:77:34:b3:8b:03:17:32:e0:b1:
         4a:0d:92:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:15:07 2025 by rpki-client