Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
File:                     lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft (raw, json)
Hash identifier:          TkkiNRs2iiP2uZbhpkoiCCBhASwlOl8f5uXrA4L2eYk=
Subject key identifier:   F8:62:2F:1E:20:01:51:72:4C:8F:B4:C8:97:46:28:96:4F:A8:62:C1
Authority key identifier: 95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7
Certificate issuer:       /CN=954b071a03db5d233d05ab0394548007767f83e7
Certificate serial:       01974A7AD573835B640706F08CDF23D059B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
Manifest number:          05F4
Signing time:             Sat 07 Jun 2025 13:00:53 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:53 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:53 +0000
Files and hashes:         1: MeHcHEJLI5aJxpbL08K_nBsRPYY.roa (hash: N7FogbwCwinhT6HlieiaEOy7N6CNclRf7G6B1lRFJU0=)
                          2: lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl (hash: Hme6G7lYxl34PAYRMaC7TLLfnvygI4s6/0R/Ptr9BiU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:d5:73:83:5b:64:07:06:f0:8c:df:23:d0:59:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=954b071a03db5d233d05ab0394548007767f83e7
        Validity
            Not Before: Jun  7 13:00:53 2025 GMT
            Not After : Jun  8 13:00:53 2025 GMT
        Subject: CN=f8622f1e200151724c8fb4c8974628964fa862c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:05:a7:3d:34:22:d7:8b:be:bc:26:74:43:4a:
                    03:e8:92:cb:b1:62:5c:62:d1:51:b2:3e:68:b1:89:
                    f3:6f:48:b4:37:cd:16:27:bd:9e:ae:af:aa:90:c6:
                    b2:d8:26:88:45:3f:6a:f2:bc:58:ca:07:0c:d8:7d:
                    7e:27:3f:93:01:dd:65:74:5a:ee:8c:b8:d7:c4:55:
                    b3:e8:36:69:ff:5a:41:b5:29:20:60:10:a5:4e:52:
                    88:4d:14:c1:79:73:1c:7b:07:61:f1:8c:de:21:f5:
                    b9:54:b6:59:48:c8:44:b4:37:d4:1d:74:06:8d:86:
                    24:19:b6:00:7e:52:19:9f:bb:01:fb:52:09:a8:14:
                    0c:47:74:78:4b:3a:e8:e9:24:49:6f:b9:2c:0f:af:
                    8e:08:b4:ab:02:0a:64:3a:4b:fc:74:18:96:da:48:
                    e8:60:63:f1:21:10:47:a6:00:83:50:3f:f2:b7:41:
                    34:6e:57:b7:a7:4c:60:e7:7f:b5:7a:bf:fb:a3:cd:
                    84:d7:98:0e:4b:25:35:60:a9:3d:df:f5:93:1c:81:
                    cc:43:05:7f:92:9e:c0:18:13:ec:18:dc:39:3f:ed:
                    16:4e:58:a9:c2:c8:25:30:f9:d1:60:81:7c:6a:d7:
                    4f:46:f1:82:d8:95:06:64:76:59:7c:20:d0:d0:a7:
                    00:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:62:2F:1E:20:01:51:72:4C:8F:B4:C8:97:46:28:96:4F:A8:62:C1
            X509v3 Authority Key Identifier:
                keyid:95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:43:65:59:cb:c8:91:ba:82:21:2b:9f:2c:fc:d8:c2:31:7c:
         08:71:1e:e0:7c:b6:8a:91:33:00:4b:de:b2:b3:55:39:9e:19:
         f3:7c:0a:d7:ba:11:dc:51:5e:7e:13:82:3b:fb:99:7a:bd:98:
         6b:1f:28:77:c0:4a:6c:e6:6b:27:71:63:4c:f8:ac:f7:d9:4b:
         44:ae:8d:34:16:5e:a8:de:94:c3:20:11:4e:9f:9b:9f:7a:9d:
         dd:ab:97:1e:c0:86:75:94:bf:40:8a:8e:6d:d8:3e:d1:04:a3:
         07:fd:30:9b:e7:a3:ab:86:9c:9b:f2:1c:56:96:7a:37:58:fb:
         06:7b:b3:5f:e6:35:84:38:25:f6:2b:9d:35:0d:c6:5d:a0:7f:
         0a:5a:3e:2a:36:e0:d6:dd:75:4c:b9:1d:7a:8e:71:05:db:45:
         06:f9:9c:cc:ea:ad:a7:e8:e1:a7:35:57:06:0f:9a:7e:87:b3:
         52:82:99:55:48:83:b2:83:88:3f:28:32:53:6a:80:a5:3f:f7:
         66:17:2f:32:b5:62:aa:90:37:ca:c6:90:2c:1e:23:be:91:d9:
         c8:6a:d6:ae:62:da:10:4b:58:44:2a:fb:f7:d1:e9:d9:ae:a5:
         59:69:e4:c3:9b:2b:79:a4:2c:20:d3:9b:5b:aa:31:85:1e:06:
         0a:84:21:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:47 2025 by rpki-client