Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft
File:                     LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft (raw, json)
Hash identifier:          OEv01HXWG+kJ7BFv1kF4aNfiNwPD7xlri6mF7jTRPmI=
Subject key identifier:   13:68:A7:43:C3:82:14:F2:7D:0E:B5:A4:94:AC:3F:47:13:00:9F:9A
Authority key identifier: 2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44
Certificate issuer:       /CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
Certificate serial:       01984A4112ECE6DC937870E71A22A628ACE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft
Manifest number:          1149
Signing time:             Sun 27 Jul 2025 05:00:35 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:35 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:35 +0000
Files and hashes:         1: 2zzUP42PSDjYPPlHV41sNEGuQm8.roa (hash: 3WYS30ATIqzOFvG4XYkxeuJlriDYGMdvapCa66rATak=)
                          2: LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl (hash: 78O2PRRRKSF8iNrK440n+LrGYWnd3s+QOht5w2OInEY=)
                          3: NXdlMjppFlDgpqvrpd1dUCT0Nd4.roa (hash: vFfItKSvE8cyKCuMsk2TF0b+TYLCK752KcmEvCAy640=)
                          4: a-yoqKKM2_VTyMIpYk7of2SsSkg.roa (hash: tkjvrZdB0sy56VknBMzLGgv8ID+xT8Z3KrJT0me2WLI=)
                          5: g-jIWTGusT1Pd0EzYCYJPlo_V10.roa (hash: rU4QB22UKJ/f6i1fM6bnIKFFo0DzgyOmLtH9gDvBjBM=)
                          6: ru2syxCTFSkcHXzvmaT8k_sSwdE.roa (hash: cb/4JPWzlbHrciybJdWfxGFnExQb99fweCf16u1aJnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:12:ec:e6:dc:93:78:70:e7:1a:22:a6:28:ac:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
        Validity
            Not Before: Jul 27 05:00:35 2025 GMT
            Not After : Jul 28 05:00:35 2025 GMT
        Subject: CN=1368a743c38214f27d0eb5a494ac3f4713009f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:72:35:b2:cd:f7:70:80:9e:a0:9f:d0:71:b9:
                    4e:36:3e:7b:4f:1f:26:9c:03:bd:52:e7:ba:76:34:
                    36:f3:12:cb:2d:7b:72:b4:d2:d2:46:12:e0:e6:e3:
                    00:cd:e4:6e:5d:76:74:7d:ed:0a:d8:53:7e:9e:7b:
                    a7:30:66:f4:30:a2:bc:4e:23:9e:42:8d:98:41:68:
                    52:ec:f1:e8:0a:36:56:12:06:09:7b:8a:e3:5e:a7:
                    ca:dd:70:bf:65:0d:f5:41:2a:fd:95:12:5a:a5:f3:
                    27:d9:60:b7:b4:15:1b:1b:c2:29:5d:c3:bc:fa:b5:
                    38:83:7b:5f:c4:fa:ca:47:fa:7e:af:03:11:52:1f:
                    05:d1:43:ea:64:57:e2:bd:c4:42:6b:ba:e2:65:bf:
                    f4:b0:ba:9e:13:b6:05:3e:1d:1f:0a:5f:11:62:f9:
                    cf:7c:e2:15:9d:69:62:ac:73:28:69:22:45:8d:56:
                    4a:45:57:c4:af:f0:f9:db:3d:e1:5c:61:da:62:72:
                    e1:34:8e:7b:fe:02:5d:c2:68:88:8e:df:4a:b0:90:
                    a2:93:4b:cc:bc:69:90:07:07:15:9e:28:18:ac:35:
                    9f:02:0c:12:db:6e:6c:7a:28:b0:17:bd:17:33:01:
                    b4:b5:c3:ed:64:5d:72:b3:b2:03:78:0f:a8:59:f9:
                    fb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:68:A7:43:C3:82:14:F2:7D:0E:B5:A4:94:AC:3F:47:13:00:9F:9A
            X509v3 Authority Key Identifier:
                keyid:2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:5b:45:cd:e6:b8:4e:46:0c:82:8c:0d:2c:25:53:46:51:e3:
         dd:6d:0b:03:f5:e4:90:1e:1f:26:67:17:9c:77:a3:f8:a6:e9:
         f9:5d:e0:e6:c6:df:12:35:a7:ce:22:51:21:8c:69:97:8a:5d:
         fa:ad:f7:4a:bf:36:d6:43:da:4a:e1:4d:cd:96:50:fa:15:4e:
         fa:95:f9:bf:a9:30:98:4e:54:af:83:de:14:85:10:4b:65:c4:
         79:5a:94:96:2b:dd:0a:c6:ba:7d:8b:94:70:91:17:bb:ed:d0:
         eb:33:76:88:ea:ee:c7:28:a6:55:ac:0e:7b:b5:08:29:f9:8f:
         e4:c9:b5:e2:97:23:95:96:bd:c0:aa:1c:b3:ea:24:1d:ce:07:
         c9:ca:c8:4e:03:85:56:28:80:9b:08:41:4a:a6:95:96:ce:40:
         45:2a:fe:5e:88:10:50:f3:f4:42:2e:bf:36:f5:30:00:7d:88:
         b1:ca:fe:c2:45:d7:d4:43:42:66:44:9a:e0:03:77:c6:38:21:
         41:11:50:09:02:ec:fe:8f:2a:d8:1b:23:2f:2f:e0:96:d3:ab:
         6c:bc:1f:89:15:44:39:93:85:ea:33:78:6f:04:b5:25:43:54:
         4a:c5:9f:ba:2e:04:f1:e2:13:61:07:4f:39:42:06:b3:6c:3b:
         87:e9:9b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:49:46 2025 by rpki-client