Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
File:                     LONOJrtlYwuGk29JaTU-18hplcg.mft (raw, json)
Hash identifier:          13phwgKzjvzmUF9ST7+RUe256MAky7sRbR6cCwVC3v4=
Subject key identifier:   0B:D2:C5:9D:18:6F:90:9C:49:2D:7E:C6:90:80:CB:25:1D:22:E3:3A
Authority key identifier: 2C:E3:4E:26:BB:65:63:0B:86:93:6F:49:69:35:3E:D7:C8:69:95:C8
Certificate issuer:       /CN=2ce34e26bb65630b86936f4969353ed7c86995c8
Certificate serial:       019749D5A28BD3AE691ABB6E36C4073670F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
Manifest number:          14B7
Signing time:             Sat 07 Jun 2025 10:00:26 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:26 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:26 +0000
Files and hashes:         1: LONOJrtlYwuGk29JaTU-18hplcg.crl (hash: VSa4LrmAtXjVxyg71cDSLT+MVLZva9h/qUqhKUq6C5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:a2:8b:d3:ae:69:1a:bb:6e:36:c4:07:36:70:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ce34e26bb65630b86936f4969353ed7c86995c8
        Validity
            Not Before: Jun  7 10:00:26 2025 GMT
            Not After : Jun  8 10:00:26 2025 GMT
        Subject: CN=0bd2c59d186f909c492d7ec69080cb251d22e33a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9b:b1:ca:98:05:b3:3a:fb:64:bd:78:e9:13:
                    ca:e1:e8:ba:7b:ca:30:bd:a0:6c:45:16:2b:f2:99:
                    fe:2c:fd:b9:28:a5:5f:33:3f:12:41:e8:b4:6b:dc:
                    50:e6:b0:86:5a:a3:10:84:21:8f:98:1d:c4:af:26:
                    91:6b:91:d4:b9:9e:0a:d8:fe:de:fb:61:b4:4e:60:
                    a6:b8:00:55:44:3a:51:f4:50:56:9f:91:51:3a:4d:
                    a6:d6:de:c6:07:06:59:68:8f:12:4c:e0:f9:e4:29:
                    3c:e0:e2:a0:13:7a:e4:c0:42:74:13:c1:27:63:73:
                    c1:61:77:fc:16:18:52:96:0a:92:83:24:b8:0c:2c:
                    96:5e:e7:ce:24:00:33:13:b2:af:30:88:13:e0:0f:
                    4a:18:fc:25:35:48:15:12:a8:b6:25:40:7c:3c:25:
                    14:47:68:91:02:bd:5a:ba:71:41:4e:c2:88:37:b3:
                    ea:eb:2e:7b:53:16:d2:37:61:b4:b4:c9:09:ad:15:
                    f8:e3:12:9b:01:48:31:85:fb:a6:f7:88:50:fa:58:
                    75:7f:a5:23:20:7d:a0:c3:2f:03:ce:ee:04:4a:ec:
                    8c:25:a1:c2:07:cd:b8:92:be:9b:0e:65:45:c0:d3:
                    b5:32:99:ae:f2:07:8e:4f:7a:78:ea:a1:35:18:83:
                    5a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D2:C5:9D:18:6F:90:9C:49:2D:7E:C6:90:80:CB:25:1D:22:E3:3A
            X509v3 Authority Key Identifier:
                keyid:2C:E3:4E:26:BB:65:63:0B:86:93:6F:49:69:35:3E:D7:C8:69:95:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c0:7b:b8:43:cb:7f:2c:2b:c3:ee:c5:ef:a0:d3:c2:74:10:
         28:ed:43:d8:52:a8:08:8e:8f:f2:09:f4:e4:4b:4d:93:56:5e:
         c8:0a:de:f7:0b:b6:61:b4:04:7a:00:f0:c4:74:e6:cb:02:7c:
         3b:26:db:5a:21:2d:88:56:ff:94:eb:95:10:fa:10:8f:9d:d4:
         41:5a:7e:79:e5:23:1b:98:8d:42:7c:2f:07:49:ad:02:31:b6:
         4b:a2:e4:a9:f2:5a:5e:5c:47:2e:b0:03:36:c0:26:09:a3:f2:
         3e:93:d8:21:bf:f8:53:0e:d9:8b:e9:a0:3a:4d:03:c0:a6:66:
         5f:e3:b6:e9:d3:f7:0d:f0:7c:60:b2:59:9c:67:60:78:e4:75:
         10:52:9a:47:f4:cc:21:4c:f4:29:30:b2:99:84:8c:02:a3:b4:
         de:73:f4:d4:07:e0:1f:54:b4:ca:dd:15:4b:4d:44:ba:86:1f:
         38:ea:ff:7f:4e:44:b7:25:5c:71:c1:49:5b:fd:ca:c3:44:e2:
         78:6d:d7:38:d5:ab:44:f8:1e:b9:7e:b3:78:e6:aa:1b:37:5e:
         cd:c5:02:36:86:15:7f:90:c3:d9:ee:5b:fb:ad:95:d1:09:e0:
         16:0c:1b:5c:9c:f9:7a:11:82:f4:0b:05:27:a8:b5:40:ca:ec:
         17:9e:61:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:41:11 2025 by rpki-client