Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
File:                     LKw-jWOxw6_HxsC_2p1ayBe27m0.mft (raw, json)
Hash identifier:          vW/BkTIkEhgTcl5t+LUkPGig+iikA+tKW3/r0jxgxsQ=
Subject key identifier:   40:41:79:D5:FC:EC:1A:43:D2:25:08:6E:20:A0:78:B4:1E:7A:C4:FC
Authority key identifier: 2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D
Certificate issuer:       /CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d
Certificate serial:       01975B3766A7B9EF7E97BC36CF0B53A24413
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
Manifest number:          0F62
Signing time:             Tue 10 Jun 2025 19:00:46 +0000
Manifest this update:     Tue 10 Jun 2025 19:00:46 +0000
Manifest next update:     Wed 11 Jun 2025 19:00:46 +0000
Files and hashes:         1: LKw-jWOxw6_HxsC_2p1ayBe27m0.crl (hash: TLUh2HFkSIKx6C+5FV5VEP72bWyT2P1mG7rOayJ7t9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:37:66:a7:b9:ef:7e:97:bc:36:cf:0b:53:a2:44:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d
        Validity
            Not Before: Jun 10 19:00:46 2025 GMT
            Not After : Jun 11 19:00:46 2025 GMT
        Subject: CN=404179d5fcec1a43d225086e20a078b41e7ac4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:eb:3a:49:b0:5b:0a:59:a5:42:11:a5:6c:0d:
                    7d:3a:58:69:c9:19:54:28:81:6e:2b:32:50:bd:a6:
                    a3:99:3e:2f:1a:fb:70:81:fc:87:b1:12:c6:f3:2d:
                    1b:c7:35:67:c2:ed:01:51:26:04:e4:8d:32:5b:11:
                    cf:fe:58:ea:6b:3e:df:6d:cc:71:9e:ca:f9:a5:e7:
                    51:3d:40:b9:71:a3:c7:02:7c:da:08:93:df:83:3f:
                    8e:dd:47:38:51:12:6d:80:ee:e3:ee:92:8d:4f:85:
                    cf:f1:2f:71:c1:0f:0a:80:91:4a:4d:87:80:1a:e3:
                    f5:09:97:2b:b0:07:1b:bb:b0:6e:01:3b:ad:b0:7f:
                    6a:0b:52:e3:c5:23:a6:08:6a:1f:fd:4e:b8:27:03:
                    7b:5d:6a:04:81:a7:f6:09:c0:64:2e:39:48:62:5d:
                    6b:9d:9e:06:dc:34:6b:5a:b5:d4:41:81:b4:6a:29:
                    d5:40:1c:7b:9c:8d:fe:28:11:77:43:4d:22:68:1e:
                    8e:ee:79:38:95:3e:37:48:3e:e7:69:03:02:ad:89:
                    db:b3:de:60:ad:35:cd:e7:69:b1:c0:cb:63:c8:69:
                    98:89:98:f0:7d:97:89:b2:ff:21:e7:3c:af:0d:ce:
                    0d:6b:c1:05:ed:86:36:f4:f6:e8:08:bf:19:eb:80:
                    f3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:41:79:D5:FC:EC:1A:43:D2:25:08:6E:20:A0:78:B4:1E:7A:C4:FC
            X509v3 Authority Key Identifier:
                keyid:2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ef:79:32:f6:2b:37:58:d3:18:91:0f:d6:33:f2:48:42:1a:
         61:98:af:b3:cc:3f:a4:e5:a7:41:46:a6:39:3e:cd:82:04:6d:
         b1:42:23:e2:35:50:26:97:38:74:2e:6f:8b:07:25:44:d0:fd:
         22:3a:55:17:74:4d:2c:d6:8b:5a:d0:ef:e0:bb:09:e7:74:c3:
         ea:5d:66:f6:35:c1:38:58:57:c5:d1:f0:18:56:87:51:14:44:
         f7:b4:c2:cf:68:2a:95:c2:3b:55:27:a9:21:a3:2c:0b:69:18:
         d7:00:00:39:99:d1:7a:90:ea:37:0a:b0:a6:64:7a:f9:b6:eb:
         6f:ef:8a:62:72:f4:9d:ac:f9:45:ac:52:52:b4:3e:75:cc:b6:
         65:37:24:cc:45:0e:93:54:02:1e:e3:79:1d:b3:75:ff:cd:37:
         40:9b:00:a5:58:fe:07:08:5c:e2:77:20:f8:d7:91:e0:6b:73:
         e7:0b:d0:aa:50:1d:a4:5d:16:ad:b7:35:c6:d8:b0:e2:6b:6e:
         af:0e:20:15:1b:3d:61:bf:e7:ad:01:36:87:87:7f:68:ea:1f:
         14:90:bd:f2:1f:39:7a:2c:74:c6:d8:16:9e:94:a2:24:a8:eb:
         e4:8d:7f:e0:e9:a3:04:1d:d9:6b:e1:e8:70:96:27:30:64:d3:
         8b:9c:a3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 23:15:51 2025 by rpki-client