Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
File:                     lsvPLpV8qNlCRyp7AEQoWybbayI.mft (raw, json)
Hash identifier:          H/bwUkn5zQ27VtxQTvItTi6wgM1J7Dbbd94pOKZOttg=
Subject key identifier:   F3:AB:E9:DA:BA:65:46:05:50:3C:B8:C4:B2:47:4B:31:A4:C5:A8:77
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Certificate issuer:       /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial:       0197488BF615257FADBA052C120021E5DA71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
Manifest number:          1580
Signing time:             Sat 07 Jun 2025 04:00:21 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:21 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:21 +0000
Files and hashes:         1: L7Ga4vuHYQeZfIto9Yq8tgXI9O0.roa (hash: teLoUEZvE4nl+9Xvo/9jLeTnZ41UIdxLpAcgTrbJ4sA=)
                          2: lsvPLpV8qNlCRyp7AEQoWybbayI.crl (hash: Z5WcLsUbDtUozNat/bSCBaIU9CLzn1H/Q/pLcjEYPE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8b:f6:15:25:7f:ad:ba:05:2c:12:00:21:e5:da:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
        Validity
            Not Before: Jun  7 04:00:21 2025 GMT
            Not After : Jun  8 04:00:21 2025 GMT
        Subject: CN=f3abe9daba654605503cb8c4b2474b31a4c5a877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b6:76:46:87:8c:cd:48:05:b5:b1:a7:29:84:
                    ef:22:bd:20:a9:56:87:70:8c:2e:85:8a:e9:24:0e:
                    31:e0:da:31:3e:96:7b:97:3c:49:00:a3:0d:6d:8b:
                    6a:e4:c2:c7:8c:e3:26:ad:e6:be:fd:2d:95:94:95:
                    ef:87:54:8d:a2:49:cd:c0:46:5e:09:3e:32:05:b2:
                    d1:44:32:6d:ad:b4:00:71:13:f8:4f:2a:e9:f8:9b:
                    dc:8e:ac:4e:be:63:c3:b4:0a:3c:ca:f5:24:a1:04:
                    86:dc:6a:3f:ac:f4:7a:e5:86:99:29:2f:4b:71:29:
                    50:68:0b:69:6b:d9:a9:d5:95:42:f3:7c:58:ca:a0:
                    46:92:d1:67:8e:c1:a4:86:13:7f:52:e9:80:c2:cc:
                    6f:d7:19:e7:92:2f:05:47:a3:34:32:d3:61:e6:94:
                    45:c8:bf:d5:30:f0:b0:94:a3:02:4c:d8:17:e4:a4:
                    02:1f:6c:bd:60:df:10:95:dd:82:d7:15:45:c1:b2:
                    44:33:f1:11:77:39:f1:c5:54:c1:1e:d9:28:df:ff:
                    b6:dc:82:93:10:97:02:8a:d3:82:30:59:1a:2d:91:
                    88:d6:b0:c0:c1:24:3e:d6:38:f5:7c:1d:c7:08:fc:
                    5c:79:86:46:96:5c:77:5e:92:e6:6b:67:58:61:f5:
                    ae:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AB:E9:DA:BA:65:46:05:50:3C:B8:C4:B2:47:4B:31:A4:C5:A8:77
            X509v3 Authority Key Identifier:
                keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:79:74:4d:49:a3:6c:cf:d6:b7:ef:64:59:c6:77:b6:6a:93:
         2a:8f:31:9b:ce:1d:db:4d:8b:e5:f6:1e:70:67:ea:43:c9:6f:
         c7:36:a5:e6:3e:15:09:c9:f2:4a:72:ba:64:32:14:1a:19:b7:
         14:40:ec:00:74:46:08:e2:1e:4b:f9:91:ab:49:5c:62:ac:f7:
         15:2f:f3:2d:33:38:2d:58:e9:47:4a:67:fd:64:fc:df:6e:39:
         12:67:89:15:57:0f:d7:c1:9d:05:f8:35:fe:26:e0:f8:9c:aa:
         a4:f1:b0:00:cb:4f:7f:24:9f:44:10:6c:ea:d6:e9:b7:83:4c:
         ff:60:66:f1:98:dd:a4:7e:b4:dd:2b:27:bb:e8:d1:33:dc:90:
         18:fc:d3:e3:2b:29:a9:c6:e4:61:d7:2d:be:34:f3:06:45:0d:
         37:15:1c:11:c5:41:fd:a5:b2:11:a1:71:22:c9:21:9b:f7:68:
         fe:76:06:66:8e:62:1a:2f:77:f7:9b:90:d7:ee:a0:cd:6b:cc:
         ac:f9:6d:cb:50:ac:11:e7:25:8a:ef:d1:c5:37:ae:81:24:b6:
         63:99:95:27:7c:6c:01:ae:0e:45:65:10:13:c8:b6:f4:ff:7d:
         8e:36:cd:b7:91:60:36:e6:0e:49:ca:1e:b4:c5:6e:06:7b:8f:
         a7:d5:66:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:42:01 2025 by rpki-client