Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
File:                     lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft (raw, json)
Hash identifier:          s/NDIjk2JgaMs67eT8DyAWIKHFmdBHUAy4GK/1pWqQ0=
Subject key identifier:   DB:38:48:7D:7E:02:E6:E7:3C:33:10:75:9E:CF:AA:E5:3C:68:BB:A4
Authority key identifier: 97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C
Certificate issuer:       /CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
Certificate serial:       01993802AB6516B3C9E782E7EB556FDEAEA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
Manifest number:          1246
Signing time:             Thu 11 Sep 2025 09:02:03 +0000
Manifest this update:     Thu 11 Sep 2025 09:02:03 +0000
Manifest next update:     Fri 12 Sep 2025 09:02:03 +0000
Files and hashes:         1: lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl (hash: 0niO9VoQO4LREXs+oojzsNqiPnsUFRTBvC9UG0Rc/lk=)
                          2: sE1iK8BGArTufNYA1Zt6v_dSI9Y.roa (hash: OOj0tzcrni9iINX1RsORuXXY2J4W4MPomfi+iy0BJbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:38:02:ab:65:16:b3:c9:e7:82:e7:eb:55:6f:de:ae:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
        Validity
            Not Before: Sep 11 09:02:03 2025 GMT
            Not After : Sep 12 09:02:03 2025 GMT
        Subject: CN=db38487d7e02e6e73c3310759ecfaae53c68bba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c2:15:37:6a:7f:d5:a4:06:f0:9b:67:a7:34:
                    ed:f3:64:e3:62:9c:d8:63:66:78:57:bd:c8:2a:13:
                    ae:08:4e:2d:84:ca:fd:ce:a2:0a:9d:6f:24:de:5c:
                    b3:c5:26:fc:8f:61:d8:dc:2c:36:a2:b8:93:5a:22:
                    43:6c:b0:69:1a:e3:c6:ad:6f:7a:17:b0:39:f6:30:
                    50:15:2a:b9:90:41:4d:d9:45:0e:8e:e6:21:b9:47:
                    0d:c6:97:35:c3:0a:9b:7e:68:39:c4:7a:72:cb:df:
                    67:e4:2b:ca:3a:71:5a:a0:68:7a:c7:ea:9d:41:8d:
                    84:2b:db:9c:bb:d0:75:05:38:72:8d:b3:15:f3:36:
                    bc:8a:e5:a8:00:01:c3:cc:e0:05:bb:3e:c7:eb:b8:
                    b1:cf:68:e6:31:3b:8d:81:dc:a3:02:af:bb:f5:38:
                    b8:d1:6b:86:a0:05:c0:6c:e6:ea:1c:48:c6:d6:54:
                    69:7d:10:7c:88:4e:a1:8e:be:8c:f0:27:6e:88:aa:
                    74:ba:e1:10:0c:d5:45:02:c6:cc:18:03:19:76:2e:
                    73:44:85:5c:19:3e:af:ef:18:e3:1f:9c:cb:46:f3:
                    20:9c:d2:77:e8:57:fb:8f:4f:ff:9d:49:f6:10:0e:
                    48:84:8a:9d:5b:91:42:02:6c:e2:f8:aa:83:d6:23:
                    61:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:38:48:7D:7E:02:E6:E7:3C:33:10:75:9E:CF:AA:E5:3C:68:BB:A4
            X509v3 Authority Key Identifier:
                keyid:97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:4b:7b:63:06:d0:eb:d4:76:db:65:2a:8b:a1:e8:e9:3d:50:
         d3:f4:e8:12:3d:ca:8f:5d:28:02:e0:fd:80:09:4b:96:57:4e:
         ae:17:92:d1:6a:36:85:f0:72:3c:90:39:e8:f9:1c:8e:82:d9:
         3e:34:c3:cb:0a:87:c4:4e:d8:0e:0d:e2:5f:2a:b7:fc:7e:47:
         e3:63:d8:04:7c:c1:15:a5:dc:27:ba:58:09:40:59:21:e4:62:
         ae:d2:f9:44:de:5c:50:95:c3:be:1c:44:30:63:9a:0a:8d:c6:
         d3:59:17:f8:4e:b1:61:50:01:2f:f8:76:80:56:1a:b7:7e:af:
         5a:f4:16:6f:5b:21:27:16:2d:eb:0f:9d:15:43:47:47:f9:fc:
         b4:f9:b8:b5:10:4a:5a:0c:fb:ec:a4:47:7c:2a:da:29:45:4f:
         a3:0b:5d:bd:1d:8e:a8:38:fc:f5:c1:b6:36:1b:1d:ee:a8:82:
         37:62:22:f9:a0:0f:6f:ac:af:f8:f3:2d:1c:76:12:8e:61:bb:
         be:3f:dc:29:71:e0:67:91:54:d3:65:d5:3a:33:b2:04:20:31:
         2d:b4:3e:11:10:41:cf:b5:d6:dc:84:47:6a:87:15:34:49:0b:
         35:8e:f2:a2:6d:01:31:85:1d:52:3d:72:f3:42:a8:98:33:17:
         3a:1d:25:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 15:32:44 2025 by rpki-client