Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
File:                     LmvtcNteZzyB8S5zZaNsTz2ie3E.mft (raw, json)
Hash identifier:          CdI7VUty60HmBYFlcWOqN/nqeAIDTgdB3kddgI4f7Q0=
Subject key identifier:   92:58:BB:E2:6E:45:9C:E1:2A:24:DA:0B:29:FF:40:5D:BD:5A:55:61
Authority key identifier: 2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71
Certificate issuer:       /CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71
Certificate serial:       01974E2021E55868F95445A4DAE279AC3DEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
Manifest number:          1092
Signing time:             Sun 08 Jun 2025 06:00:17 +0000
Manifest this update:     Sun 08 Jun 2025 06:00:17 +0000
Manifest next update:     Mon 09 Jun 2025 06:00:17 +0000
Files and hashes:         1: LmvtcNteZzyB8S5zZaNsTz2ie3E.crl (hash: kjhkruLg6XPBp/UDCXJkGZP4AWtFDef5ZEXWDOdNi5g=)
                          2: cLEFI3xQS9CocTbeHuHrBA7ho04.roa (hash: Oc8zbYVVumhuzpzB+yVW8PsOP/g+K8DFdyeD3cFkIFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:20:21:e5:58:68:f9:54:45:a4:da:e2:79:ac:3d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71
        Validity
            Not Before: Jun  8 06:00:17 2025 GMT
            Not After : Jun  9 06:00:17 2025 GMT
        Subject: CN=9258bbe26e459ce12a24da0b29ff405dbd5a5561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e3:12:37:d3:8e:a1:d9:9f:21:4d:67:91:bd:
                    ea:58:23:93:e0:9f:34:2c:5d:3b:49:f7:88:f0:47:
                    c1:8d:3e:96:71:16:bb:21:48:50:89:09:56:e2:69:
                    a0:51:f8:fa:d4:71:74:c0:c7:cd:f4:81:19:30:06:
                    69:3e:b3:54:a2:e7:d7:c0:aa:48:9e:69:5d:7b:d4:
                    41:ae:e2:4b:6e:5a:af:49:0e:da:0d:0e:21:05:5f:
                    a6:52:d8:35:2e:fd:e9:09:bf:45:ae:5c:26:aa:76:
                    97:48:76:8f:ff:7f:81:aa:c0:28:c3:b7:4a:7c:f7:
                    5e:d8:ad:ca:2e:b1:7f:17:d6:03:ea:81:a1:57:ac:
                    a5:1d:d8:73:8c:78:a5:4e:39:5b:55:7b:02:5b:64:
                    17:44:06:50:b6:d0:97:69:f9:cf:b1:f7:fb:cc:a5:
                    48:31:1b:31:9e:99:8e:4e:0e:91:a9:90:6e:34:02:
                    2b:5b:9a:b7:31:45:32:02:35:f6:58:88:07:01:0b:
                    60:84:cf:a1:01:33:c6:73:71:18:fe:a9:69:1c:8c:
                    8f:e7:60:0a:dd:e8:cf:14:f6:0e:80:de:bb:57:5b:
                    bc:8e:19:19:d1:d3:b1:56:f7:b2:1a:cc:16:7b:24:
                    63:10:17:d2:bb:40:02:dd:54:46:0f:0d:55:d1:a4:
                    df:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:58:BB:E2:6E:45:9C:E1:2A:24:DA:0B:29:FF:40:5D:BD:5A:55:61
            X509v3 Authority Key Identifier:
                keyid:2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:72:54:87:51:9c:e5:90:f3:06:8d:99:fe:5e:5a:c2:9b:b5:
         5d:34:83:27:6b:82:bc:81:51:83:b8:87:9a:9d:3c:15:88:f8:
         23:fb:ee:f9:26:44:86:52:db:c2:3f:aa:f4:9d:db:ca:73:9f:
         dd:73:49:ac:88:3d:c4:a6:32:59:a0:f2:2c:4d:15:57:10:fd:
         c4:96:35:16:ed:84:80:07:36:05:79:0f:db:da:0c:0f:39:b4:
         28:d4:b1:58:90:ab:cc:d5:61:86:f3:60:e3:af:93:fe:29:15:
         06:13:61:86:88:1d:89:05:12:64:2b:d3:eb:6e:eb:b8:ca:cd:
         c4:20:ff:8d:c2:74:29:6b:e1:3c:1e:29:97:23:59:be:e0:c1:
         42:ad:ce:9f:f1:ab:69:14:11:63:70:b5:f8:56:6a:62:3f:b5:
         cf:e4:a0:63:6a:ae:4d:e2:fa:b9:c1:0f:84:f5:85:2c:1f:ea:
         cd:76:19:26:b2:ce:34:c9:a7:8e:67:2e:5a:23:86:46:8f:08:
         88:a4:04:c9:27:d6:77:a4:aa:1e:25:f4:94:8d:05:f2:d1:53:
         51:4b:d7:31:13:27:9a:f5:f8:85:3a:9a:0b:2d:09:49:87:79:
         c2:86:96:b3:70:83:fd:4e:ce:3d:50:90:c7:eb:0c:3b:1c:b5:
         16:1f:dc:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOICHlWGj5VEWk2uJ5rD3sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNmJlZDcwZGI1ZTY3M2M4MWYxMmU3MzY1YTM2YzRmM2Rh
MjdiNzEwHhcNMjUwNjA4MDYwMDE3WhcNMjUwNjA5MDYwMDE3WjAzMTEwLwYDVQQD
Eyg5MjU4YmJlMjZlNDU5Y2UxMmEyNGRhMGIyOWZmNDA1ZGJkNWE1NTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreMSN9OOodmfIU1nkb3qWCOT4J80
LF07SfeI8EfBjT6WcRa7IUhQiQlW4mmgUfj61HF0wMfN9IEZMAZpPrNUoufXwKpI
nmlde9RBruJLblqvSQ7aDQ4hBV+mUtg1Lv3pCb9FrlwmqnaXSHaP/3+BqsAow7dK
fPde2K3KLrF/F9YD6oGhV6ylHdhzjHilTjlbVXsCW2QXRAZQttCXafnPsff7zKVI
MRsxnpmOTg6RqZBuNAIrW5q3MUUyAjX2WIgHAQtghM+hATPGc3EY/qlpHIyP52AK
3ejPFPYOgN67V1u8jhkZ0dOxVveyGswWeyRjEBfSu0AC3VRGDw1V0aTfuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJYu+JuRZzhKiTaCyn/QF29WlVhMB8GA1UdIwQY
MBaAFC5r7XDbXmc8gfEuc2WjbE89ontxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG12dGNOdGVaenlCOFM1elphTnNUejJpZTNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MTU3NDgtMzIzZS00ZmZmLWE1Mjct
NjIzMTU2NDRiM2NlLzEvTG12dGNOdGVaenlCOFM1elphTnNUejJpZTNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80MTU3NDgtMzIzZS00ZmZmLWE1MjctNjIzMTU2NDRiM2Nl
LzEvTG12dGNOdGVaenlCOFM1elphTnNUejJpZTNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3JUh1Gc
5ZDzBo2Z/l5awpu1XTSDJ2uCvIFRg7iHmp08FYj4I/vu+SZEhlLbwj+q9J3bynOf
3XNJrIg9xKYyWaDyLE0VVxD9xJY1Fu2EgAc2BXkP29oMDzm0KNSxWJCrzNVhhvNg
46+T/ikVBhNhhogdiQUSZCvT627ruMrNxCD/jcJ0KWvhPB4plyNZvuDBQq3On/Gr
aRQRY3C1+FZqYj+1z+SgY2quTeL6ucEPhPWFLB/qzXYZJrLONMmnjmcuWiOGRo8I
iKQEySfWd6SqHiX0lI0F8tFTUUvXMRMnmvX4hTqaCy0JSYd5woaWs3CD/U7OPVCQ
x+sMOxy1Fh/cyg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:05:55 2025 by rpki-client