Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
File:                     LswQU0wEJcv21GXoQRT_euDwsFI.mft (raw, json)
Hash identifier:          9gFqkjrbQxn0awHyRKbsvsxsnkMfQEWgT5Pow7LZCSc=
Subject key identifier:   96:78:7B:E1:A5:6E:A6:35:E9:8B:37:BD:C9:6E:C5:AE:02:0B:C3:64
Authority key identifier: 2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52
Certificate issuer:       /CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052
Certificate serial:       01976584CDA04A04847AD2B1657B825A1E78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
Manifest number:          060A
Signing time:             Thu 12 Jun 2025 19:01:31 +0000
Manifest this update:     Thu 12 Jun 2025 19:01:31 +0000
Manifest next update:     Fri 13 Jun 2025 19:01:31 +0000
Files and hashes:         1: LswQU0wEJcv21GXoQRT_euDwsFI.crl (hash: drRhG/Drt9sWTWhK2pd5MB/mhdQibVAlRqEp19MuAxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:84:cd:a0:4a:04:84:7a:d2:b1:65:7b:82:5a:1e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052
        Validity
            Not Before: Jun 12 19:01:31 2025 GMT
            Not After : Jun 13 19:01:31 2025 GMT
        Subject: CN=96787be1a56ea635e98b37bdc96ec5ae020bc364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5f:48:5e:97:ae:51:73:85:11:9c:03:85:ad:
                    ee:a9:bd:e8:a8:0b:a4:e4:6d:b9:be:3e:d4:30:c9:
                    f7:72:80:d6:64:34:0f:33:ff:cf:4b:c5:83:c2:25:
                    06:15:06:22:15:b0:94:34:77:d6:f5:31:90:3d:60:
                    a3:e1:ee:ef:24:e8:7b:42:11:2b:a1:37:4e:e8:30:
                    85:46:37:e3:b4:6e:a3:b5:0f:dc:87:4f:0a:60:01:
                    a1:e3:c0:36:7f:19:22:c4:0b:01:17:d6:98:f0:4d:
                    b0:fe:a6:ed:c2:26:50:a0:2b:0a:41:6e:22:12:5f:
                    cb:c3:91:b8:d8:05:01:62:80:0d:26:86:53:43:16:
                    17:93:ed:1e:cd:ab:5e:7f:75:af:e1:5b:f7:b9:36:
                    46:32:f9:7c:b3:b8:79:93:01:a2:b4:03:76:38:6f:
                    3c:96:6d:25:dd:c0:e5:fd:3a:aa:a6:2a:98:6f:6d:
                    f8:3e:8e:51:43:32:21:1e:dc:58:7e:6d:61:0e:0c:
                    77:bf:e4:8a:3e:0e:16:d4:80:4c:04:cd:92:32:7c:
                    95:60:1c:59:a6:c4:c8:2b:32:94:2a:50:6b:bb:1f:
                    e5:4a:88:5f:94:f8:83:a4:6a:e8:78:42:83:b5:c5:
                    9e:f0:80:51:7d:0f:ba:ca:58:80:79:55:42:9d:49:
                    6e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:78:7B:E1:A5:6E:A6:35:E9:8B:37:BD:C9:6E:C5:AE:02:0B:C3:64
            X509v3 Authority Key Identifier:
                keyid:2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e9:53:9a:62:8c:b8:94:ed:a4:08:46:28:21:18:04:11:2e:
         a0:ce:dd:12:1e:cb:52:a1:df:e7:35:60:73:ba:2b:44:4b:54:
         cb:a0:c1:85:53:0a:b0:5a:ed:02:b3:7e:17:a3:42:91:32:50:
         08:b5:21:af:65:32:7a:89:fa:44:61:c0:37:fe:9b:9b:0b:ad:
         17:b1:4d:4d:47:ff:31:05:2b:9c:52:10:dc:30:89:b9:df:a4:
         21:5a:6a:53:8b:2d:ec:43:b7:eb:26:bf:4b:85:fa:e1:36:52:
         ef:af:21:e7:3f:58:47:b0:5e:61:bb:3e:8c:c3:f8:40:db:5a:
         b8:24:02:cd:12:4f:0b:8e:3c:00:6f:b1:2d:5c:67:ef:ba:ad:
         97:3f:b1:9b:2b:6f:1d:1f:80:03:a4:0b:c9:60:2b:28:b8:63:
         28:fd:14:6f:ea:1f:4b:aa:43:54:c8:a4:39:dc:d7:c5:7a:38:
         7c:2d:3e:df:04:06:4c:8b:cb:05:74:a2:5e:e9:2c:dc:e0:3a:
         0a:f6:a4:6b:33:e8:d9:68:dc:f5:8d:5c:92:72:ec:95:f2:eb:
         0a:76:62:27:9a:6d:81:f5:b1:03:c4:c6:9c:35:7f:5c:be:a3:
         f1:38:a1:ec:c9:07:29:64:48:b3:9b:ef:56:d2:43:85:6e:48:
         34:05:5d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:51:28 2025 by rpki-client