Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
File:                     Li8BGtqu7EZbGCrucJw2fIfljzg.mft (raw, json)
Hash identifier:          6ayCxpLvXnNM8TTC0AGRKV60h/MV8ax5z/sP02bSMSQ=
Subject key identifier:   C6:38:B1:A9:11:DD:2B:97:43:EE:CC:02:44:3C:05:B5:25:36:87:12
Authority key identifier: 2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38
Certificate issuer:       /CN=2e2f011adaaeec465b182aee709c367c87e58f38
Certificate serial:       019745F90C0FB1D4D8B6D4A3F3E061D91ADD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
Manifest number:          0987
Signing time:             Fri 06 Jun 2025 16:00:38 +0000
Manifest this update:     Fri 06 Jun 2025 16:00:38 +0000
Manifest next update:     Sat 07 Jun 2025 16:00:38 +0000
Files and hashes:         1: Li8BGtqu7EZbGCrucJw2fIfljzg.crl (hash: jLr4nBEaJSseN/Yjo3LUR/bpP1HBpWGQpdkA6+T8PnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:f9:0c:0f:b1:d4:d8:b6:d4:a3:f3:e0:61:d9:1a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e2f011adaaeec465b182aee709c367c87e58f38
        Validity
            Not Before: Jun  6 16:00:38 2025 GMT
            Not After : Jun  7 16:00:38 2025 GMT
        Subject: CN=c638b1a911dd2b9743eecc02443c05b525368712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9d:96:ca:eb:66:56:b8:ad:31:f0:01:e4:f5:
                    07:55:89:d8:07:92:92:7c:d2:53:18:f6:33:e3:19:
                    a1:d8:27:38:ae:75:21:05:f3:a3:a6:31:fb:e0:89:
                    cc:62:6f:05:24:1c:62:68:5b:61:42:77:d0:0f:4b:
                    0e:a0:72:54:03:21:b8:91:06:a1:6b:40:ce:80:8f:
                    56:19:21:7d:c0:1f:4e:0f:e0:3f:8b:43:79:6f:83:
                    19:12:89:7c:dc:11:89:50:50:f9:f9:21:b7:f9:1b:
                    17:9f:51:45:e0:89:37:6e:80:36:f5:20:8f:01:c3:
                    eb:c1:b5:9e:3e:f0:d6:9c:c5:fd:0a:3d:1f:9a:b9:
                    a5:0e:58:d0:69:12:3b:80:43:3a:a3:81:40:63:87:
                    3e:b4:00:5f:29:6a:e7:da:a4:40:78:82:38:cf:c0:
                    12:42:42:cb:79:20:3d:2c:ce:87:32:25:81:9d:ad:
                    e9:92:aa:c6:74:b0:37:18:6f:cd:93:b1:e4:a5:e7:
                    45:94:f4:ec:e4:47:b1:69:f8:06:d0:99:ce:22:97:
                    73:3e:bf:09:ff:f8:a4:35:5e:fc:d4:16:31:32:c5:
                    f4:9b:04:55:8f:32:fa:5c:d1:18:cb:72:e6:b0:9e:
                    06:e0:db:f0:d6:51:b2:dc:f3:20:c2:5d:f0:ae:2a:
                    1b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:38:B1:A9:11:DD:2B:97:43:EE:CC:02:44:3C:05:B5:25:36:87:12
            X509v3 Authority Key Identifier:
                keyid:2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:13:2b:58:f5:6c:b7:01:70:53:7b:9b:29:c3:89:1e:1d:a1:
         be:c9:53:1d:25:5c:18:fe:2e:27:16:ce:56:45:ab:48:2e:52:
         ea:57:4d:07:9c:19:2d:c0:de:30:ca:fb:36:e0:af:a1:c7:bd:
         16:3f:ce:3a:e7:21:11:25:e7:d8:4d:c3:36:c8:65:74:d2:52:
         22:93:68:e0:fb:ec:b8:22:15:7a:de:b9:b7:31:59:2d:bf:aa:
         23:43:60:72:a5:ef:dc:a7:21:2f:15:d9:14:48:25:c2:0d:00:
         28:9f:5a:41:db:ac:1d:2a:60:62:24:d7:4c:29:cb:59:17:27:
         bf:06:9c:66:cd:d7:85:3c:f2:b2:13:e9:d8:0f:c8:1a:61:41:
         fd:13:4a:6f:34:b9:c6:5c:61:99:98:21:88:72:17:fa:27:8c:
         92:b9:2a:6c:53:9e:08:94:13:55:39:40:51:60:d9:83:88:9d:
         2a:df:15:22:0e:f6:d6:7e:6b:f4:91:14:53:44:bd:b3:f5:e4:
         33:9c:6a:55:0c:7e:f2:90:db:bf:d7:6b:dc:06:22:f6:4a:32:
         f4:2c:6d:4c:13:89:65:3c:f2:da:90:a7:1c:b6:c6:f0:7b:70:
         3d:ec:46:e9:db:06:7e:9c:16:68:40:dc:fb:fd:cd:55:b2:a4:
         9c:ef:9c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:21:19 2025 by rpki-client