Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
File:                     LosErWkLczj3wP51zzs6eFabquU.mft (raw, json)
Hash identifier:          5DwhhaP+zQkrargnKYy3VHNywC4j5aoBBF3l4QcT22o=
Subject key identifier:   05:B0:D6:AB:EB:87:51:54:2F:57:AF:9F:90:E3:B8:78:2A:D5:98:AC
Authority key identifier: 2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5
Certificate issuer:       /CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5
Certificate serial:       0197658474D42ED9649DB48833D3CDCE771B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
Manifest number:          1019
Signing time:             Thu 12 Jun 2025 19:01:08 +0000
Manifest this update:     Thu 12 Jun 2025 19:01:08 +0000
Manifest next update:     Fri 13 Jun 2025 19:01:08 +0000
Files and hashes:         1: LosErWkLczj3wP51zzs6eFabquU.crl (hash: xR/fMLwOxqRl5L+2mwh5bUj17pfN3mF49mBXb60Pbv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:84:74:d4:2e:d9:64:9d:b4:88:33:d3:cd:ce:77:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5
        Validity
            Not Before: Jun 12 19:01:08 2025 GMT
            Not After : Jun 13 19:01:08 2025 GMT
        Subject: CN=05b0d6abeb8751542f57af9f90e3b8782ad598ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6f:7a:f2:02:5d:ac:86:b1:b8:ba:43:99:e6:
                    90:21:24:f4:de:b5:df:9a:58:58:e5:ef:49:af:ab:
                    54:68:bb:41:91:83:5b:ca:33:af:4f:a7:6c:05:57:
                    e0:83:92:6d:b4:18:9f:37:bc:df:19:87:2b:42:dc:
                    b1:f1:51:00:9f:bc:48:b3:14:65:b5:79:e2:e8:81:
                    f9:46:46:37:67:b8:b3:df:43:56:4c:68:4e:6d:ed:
                    b4:7e:e7:ca:dc:03:3e:bc:ea:16:3c:49:70:76:be:
                    8f:8e:2f:20:7e:ac:96:94:44:4f:2e:8d:2f:d6:14:
                    72:59:c7:07:43:31:18:a6:ce:b9:4e:16:d4:6c:93:
                    78:57:12:87:f1:70:64:99:09:86:77:a0:bb:e0:4b:
                    b7:cb:d5:fa:e2:09:66:a6:d2:46:2f:b2:f1:53:7d:
                    5f:a6:2b:c6:34:2a:25:07:34:74:24:f0:8d:f4:62:
                    fe:cc:0a:41:b6:ce:1e:c7:6f:11:df:aa:2f:c6:e7:
                    9a:f0:4e:37:76:af:fb:43:6d:83:92:3c:52:41:db:
                    be:4b:5c:d9:be:88:e7:c0:29:b1:3f:b3:b6:fe:55:
                    f1:0b:fc:4c:1d:0f:7d:32:cb:bd:4d:03:bb:72:44:
                    b6:ea:26:d5:de:a7:f6:0c:82:27:26:9a:a2:2b:ee:
                    7d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B0:D6:AB:EB:87:51:54:2F:57:AF:9F:90:E3:B8:78:2A:D5:98:AC
            X509v3 Authority Key Identifier:
                keyid:2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:39:6c:77:8d:75:da:33:92:bb:3a:25:3d:e6:b2:70:f8:b3:
         e0:85:06:85:06:05:a5:88:32:89:45:9a:dd:09:fe:bf:59:41:
         51:aa:e3:41:e4:6e:1e:c0:4e:d6:18:9d:26:e0:0e:d1:07:85:
         56:5c:87:a6:43:df:6a:0a:66:ae:07:ec:b1:f0:9d:36:3f:fd:
         f4:a3:31:24:d0:43:9a:e5:41:09:0d:02:09:5a:28:40:97:17:
         aa:32:1d:79:ff:a9:9a:86:6e:77:40:60:fa:2b:1d:84:e5:5e:
         32:d2:ad:45:b7:9a:e2:14:c0:a3:e1:df:cc:da:3f:35:f6:3a:
         6d:4f:23:d2:c8:6a:73:16:9f:36:fa:d7:20:49:2c:54:71:eb:
         cc:1b:ac:31:62:df:b3:c0:8b:ee:63:30:16:94:35:8a:41:9c:
         e5:54:00:b6:36:02:99:34:1d:42:a6:96:63:10:b8:fa:80:4e:
         14:5c:e9:74:a8:b9:f7:46:5b:64:a1:f9:3e:24:e5:08:b3:bc:
         4d:46:a2:7f:e1:90:02:d8:bb:05:fe:98:aa:d2:8d:65:f2:6e:
         4b:21:7d:a5:89:7a:7c:d8:cb:8e:fe:f3:15:66:83:85:fa:98:
         a8:1f:0e:b3:03:80:7d:80:c3:62:7f:ea:12:0f:98:4d:46:45:
         5b:08:9a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:38:44 2025 by rpki-client