Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
File:                     LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft (raw, json)
Hash identifier:          cpYVlzA5G+IECMdGuVDap8amy+sR9JY+Khc+428JSIk=
Subject key identifier:   AF:86:E0:3A:F6:72:62:D1:A2:87:70:6E:70:7F:40:0B:CA:8D:C9:D8
Authority key identifier: 2E:40:7E:B7:64:E0:83:85:5A:25:81:30:8F:34:1D:5B:A7:D8:B2:47
Certificate issuer:       /CN=2e407eb764e083855a2581308f341d5ba7d8b247
Certificate serial:       019749319584909D4344805FB26DA1FEB81A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
Manifest number:          0527
Signing time:             Sat 07 Jun 2025 07:01:15 +0000
Manifest this update:     Sat 07 Jun 2025 07:01:15 +0000
Manifest next update:     Sun 08 Jun 2025 07:01:15 +0000
Files and hashes:         1: LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl (hash: hOu2dXIalWejSy9KjmLTpDwWyRGbpwSUsY/IRup7cjk=)
                          2: r5qx5bv9vQTvcbqQmzIlloI4Pqo.roa (hash: M9wDMgC7kb97z4Tf7FppQBmD+yOsS5ArXp6NW17Hl7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:95:84:90:9d:43:44:80:5f:b2:6d:a1:fe:b8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e407eb764e083855a2581308f341d5ba7d8b247
        Validity
            Not Before: Jun  7 07:01:15 2025 GMT
            Not After : Jun  8 07:01:15 2025 GMT
        Subject: CN=af86e03af67262d1a287706e707f400bca8dc9d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b1:78:4b:0f:ff:20:71:d3:9b:2c:3d:db:b2:
                    aa:47:e4:0f:c0:1e:f3:fc:09:7a:3a:46:b1:35:69:
                    06:ac:63:23:3e:b0:fb:63:e5:9e:6a:04:8f:60:62:
                    0f:a8:5a:c7:68:91:f6:97:d2:ae:7d:64:3c:b0:df:
                    98:f7:91:e4:8c:cf:12:90:93:aa:6c:17:61:18:18:
                    de:c3:5b:e4:1c:80:74:86:b5:7e:1c:3b:68:04:62:
                    bd:9b:aa:d0:a5:6b:1c:5f:d3:43:1c:22:71:ab:2a:
                    75:9f:df:bb:27:ba:63:f6:8a:74:0e:30:e7:07:a4:
                    d1:c9:7b:ee:6a:d6:5d:cf:33:fd:32:6b:31:20:82:
                    fe:2a:54:4c:cd:cf:39:c8:c5:83:a9:52:13:b4:17:
                    77:2d:d5:83:d8:bd:89:53:c9:ab:ab:bf:a3:35:e5:
                    6e:fa:c6:64:17:63:4d:12:13:2b:79:d3:72:f2:22:
                    94:9a:0f:cc:b9:39:b2:ed:21:3f:4d:b3:0b:02:04:
                    68:a8:72:1e:74:88:b1:64:4a:34:04:dd:11:e7:db:
                    23:0c:47:9d:4d:3a:c3:23:e6:49:47:d5:d3:70:9c:
                    78:6f:b0:03:60:5c:ce:97:ab:64:74:21:d2:8d:9d:
                    73:8b:83:6b:39:81:07:5d:00:a7:73:48:8c:3d:22:
                    d5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:86:E0:3A:F6:72:62:D1:A2:87:70:6E:70:7F:40:0B:CA:8D:C9:D8
            X509v3 Authority Key Identifier:
                keyid:2E:40:7E:B7:64:E0:83:85:5A:25:81:30:8F:34:1D:5B:A7:D8:B2:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:9e:3a:b0:b7:3f:42:62:c4:57:c1:4b:d1:ea:69:81:be:96:
         d1:92:3b:b1:2e:29:78:97:2a:9f:91:88:4e:5f:a6:69:5c:ed:
         bc:6f:df:a1:65:50:5d:50:3d:57:29:95:af:3d:ee:cb:9d:bc:
         b4:bb:3e:8a:b5:1c:80:e9:f5:e0:73:85:64:d8:db:42:9e:c7:
         62:cb:1c:25:f5:ef:45:6e:3d:ff:7c:92:db:36:8d:90:dc:31:
         ea:d1:99:e9:95:56:63:ad:6d:d1:2e:02:4d:c8:72:53:ca:6b:
         74:9d:07:19:59:32:94:63:33:fa:18:c7:35:cd:61:0b:7f:88:
         2f:13:81:f8:ff:d9:1e:be:eb:e1:bb:33:a6:ec:ef:a7:fa:a5:
         e0:9e:8c:34:17:d9:ec:50:72:a7:2f:46:70:49:b9:6f:c0:4c:
         dd:04:3e:84:ba:36:8c:8a:48:61:78:ae:ba:83:7c:00:a6:87:
         ba:ad:e0:76:03:6f:0c:b6:13:c3:2d:5e:38:1d:1c:1c:7b:b7:
         53:d3:4a:be:b3:69:54:31:fe:b7:6e:d4:b5:5c:92:96:dc:70:
         4d:43:43:ba:d3:a2:b5:dc:32:1c:3e:c0:60:d0:86:c3:b4:9f:
         06:c2:0c:93:ed:e8:b7:27:62:3d:9c:36:37:95:d6:d8:3b:94:
         38:6e:a6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:52:18 2025 by rpki-client