Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
File:                     lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft (raw, json)
Hash identifier:          GFfmsSRAyECRguMm+zenBEHb0JCU/EiQdCLZr6dyYh0=
Subject key identifier:   2C:7B:06:3E:CF:2B:85:2D:A5:D1:83:A4:3B:EF:70:3F:D3:67:F8:44
Authority key identifier: 97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C
Certificate issuer:       /CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
Certificate serial:       01964AB433CD754B2515B14A6B31D072CAC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
Manifest number:          10C2
Signing time:             Fri 18 Apr 2025 21:00:45 +0000
Manifest this update:     Fri 18 Apr 2025 21:00:45 +0000
Manifest next update:     Sat 19 Apr 2025 21:00:45 +0000
Files and hashes:         1: lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl (hash: RgaDGoB/qdiW6s99tDd20FfDb4fFMiKqbjzfVxHaQL0=)
                          2: sE1iK8BGArTufNYA1Zt6v_dSI9Y.roa (hash: OOj0tzcrni9iINX1RsORuXXY2J4W4MPomfi+iy0BJbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:b4:33:cd:75:4b:25:15:b1:4a:6b:31:d0:72:ca:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
        Validity
            Not Before: Apr 18 21:00:45 2025 GMT
            Not After : Apr 19 21:00:45 2025 GMT
        Subject: CN=2c7b063ecf2b852da5d183a43bef703fd367f844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f2:7b:f4:04:e4:79:4a:c9:37:91:51:6e:30:
                    7d:2b:eb:a7:6d:0c:c2:59:b5:c3:fa:6e:ea:50:98:
                    74:bd:09:00:b0:b8:f4:16:7d:fa:d1:13:1c:62:b7:
                    31:e7:d8:dd:6f:a8:56:b0:e1:d4:4a:c1:21:9f:21:
                    a9:c9:bb:16:05:68:de:87:04:30:fb:51:73:86:2f:
                    b1:7b:a4:4e:aa:d7:92:5e:e3:02:72:45:09:7c:ec:
                    f1:a8:26:cd:0b:50:40:4c:2a:95:20:78:e4:cc:72:
                    ec:0c:78:e2:c5:96:47:78:b9:d4:0e:73:33:3e:60:
                    d9:6a:94:5d:58:93:9f:64:31:f3:36:c9:c7:14:e8:
                    6f:aa:1f:ae:81:c0:4f:fb:7e:2f:0d:12:d5:da:6b:
                    73:64:d4:63:09:29:9b:db:2a:18:59:05:dc:fa:56:
                    cc:37:d3:79:21:cf:cf:c5:e5:d6:40:36:3f:9e:4d:
                    ca:41:03:6e:2c:cd:a6:09:ba:ac:09:87:5f:5b:31:
                    87:8b:6e:67:fb:0e:9e:6d:aa:57:8d:4a:fc:dc:8b:
                    f7:fa:36:23:8e:30:09:85:8d:68:a1:2c:6a:31:2d:
                    a8:40:69:00:68:50:9c:70:f8:2f:16:5e:37:ad:99:
                    86:9c:8a:d3:a6:a6:11:fa:43:76:a0:66:eb:4f:0e:
                    bd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7B:06:3E:CF:2B:85:2D:A5:D1:83:A4:3B:EF:70:3F:D3:67:F8:44
            X509v3 Authority Key Identifier:
                keyid:97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b3:f3:e2:54:f4:7b:d9:67:e4:0c:4c:62:6e:a5:88:91:c4:
         d6:c3:42:9e:49:7d:4e:fc:24:70:28:fc:7d:f4:69:ab:90:9e:
         70:b8:19:4b:7d:37:b7:98:5f:e4:7b:d5:f4:89:d1:ee:d4:a5:
         e7:fd:08:72:40:82:07:83:f4:11:38:1c:fd:8a:b2:a3:24:03:
         e9:56:f2:00:18:8f:0f:a9:be:80:db:d4:0a:d1:3a:26:4d:8c:
         c3:c6:ef:d3:91:ab:e4:5f:ca:b9:d0:28:95:7d:9f:50:9e:af:
         66:46:f6:4a:57:c3:90:3b:f0:14:d9:a6:71:b3:db:08:3d:c4:
         9c:cb:5e:d5:e8:a5:74:13:92:96:e8:b6:5d:48:a4:3e:30:47:
         6b:81:85:02:d4:ac:22:7b:02:bf:40:97:a0:cc:37:58:bc:af:
         fb:5f:08:b6:0f:37:9a:24:4b:10:2d:ff:b3:04:f1:17:da:13:
         43:4e:d7:7e:2a:f5:a2:a8:58:11:7c:d3:fa:11:06:37:36:d8:
         73:50:db:cd:c8:c7:5b:37:ed:f8:9a:fc:de:43:09:d5:be:c4:
         ba:8c:61:9d:42:b9:00:fd:72:81:3d:c2:ca:e6:4c:7f:f3:1a:
         bc:3d:25:18:36:7d:18:7f:72:94:bd:f3:3a:06:c1:b4:b1:e3:
         39:f1:e2:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKtDPNdUslFbFKazHQcsrCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MTdiYWZiNzAxOGRjNDNiZGFlNTNiMjNhMjNlMTY1Njdl
MWYyMWMwHhcNMjUwNDE4MjEwMDQ1WhcNMjUwNDE5MjEwMDQ1WjAzMTEwLwYDVQQD
EygyYzdiMDYzZWNmMmI4NTJkYTVkMTgzYTQzYmVmNzAzZmQzNjdmODQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvJ79ATkeUrJN5FRbjB9K+unbQzC
WbXD+m7qUJh0vQkAsLj0Fn360RMcYrcx59jdb6hWsOHUSsEhnyGpybsWBWjehwQw
+1Fzhi+xe6ROqteSXuMCckUJfOzxqCbNC1BATCqVIHjkzHLsDHjixZZHeLnUDnMz
PmDZapRdWJOfZDHzNsnHFOhvqh+ugcBP+34vDRLV2mtzZNRjCSmb2yoYWQXc+lbM
N9N5Ic/PxeXWQDY/nk3KQQNuLM2mCbqsCYdfWzGHi25n+w6ebapXjUr83Iv3+jYj
jjAJhY1ooSxqMS2oQGkAaFCccPgvFl43rZmGnIrTpqYR+kN2oGbrTw69hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCx7Bj7PK4UtpdGDpDvvcD/TZ/hEMB8GA1UdIwQY
MBaAFJcXuvtwGNxDva5Tsjoj4WVn4fIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhlNi0zQVkzRU85cmxPeU9pUGhaV2ZoOGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi80Y2U5MzMtNDg4Zi00NmI5LWFjMmMt
N2M5M2NhZTIyN2JkLzEvbHhlNi0zQVkzRU85cmxPeU9pUGhaV2ZoOGh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi80Y2U5MzMtNDg4Zi00NmI5LWFjMmMtN2M5M2NhZTIyN2Jk
LzEvbHhlNi0zQVkzRU85cmxPeU9pUGhaV2ZoOGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPrPz4lT0
e9ln5AxMYm6liJHE1sNCnkl9TvwkcCj8ffRpq5CecLgZS303t5hf5HvV9InR7tSl
5/0IckCCB4P0ETgc/YqyoyQD6VbyABiPD6m+gNvUCtE6Jk2Mw8bv05Gr5F/KudAo
lX2fUJ6vZkb2SlfDkDvwFNmmcbPbCD3EnMte1eildBOSlui2XUikPjBHa4GFAtSs
InsCv0CXoMw3WLyv+18Itg83miRLEC3/swTxF9oTQ07Xfir1oqhYEXzT+hEGNzbY
c1DbzcjHWzft+Jr83kMJ1b7EuoxhnUK5AP1ygT3CyuZMf/MavD0lGDZ9GH9ylL3z
OgbBtLHjOfHinA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:34:08 2025 by rpki-client