Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
File:                     LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft (raw, json)
Hash identifier:          rOAyPfPmH78EmD5pQm9urLXI6EndgmfGMVQnh88bG0w=
Subject key identifier:   8B:5E:07:47:70:08:FE:E8:72:31:30:8D:7F:32:EC:5C:2D:D0:CC:EF
Authority key identifier: 2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39
Certificate issuer:       /CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39
Certificate serial:       01974EFC87E57BA696B7340684162425BD75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
Manifest number:          107D
Signing time:             Sun 08 Jun 2025 10:01:02 +0000
Manifest this update:     Sun 08 Jun 2025 10:01:02 +0000
Manifest next update:     Mon 09 Jun 2025 10:01:02 +0000
Files and hashes:         1: 6HQFKIaH-doszFtkd3GkDQ1Wxaw.roa (hash: 1OXXKiYa8WQkCMkAZRnTwQi7yeY/wqvng1D/8Z8Ivmg=)
                          2: LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl (hash: e2Ywk5YOi5VyDo3+oTI+eBHCbx/U+thCw5D+yY98Hys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:fc:87:e5:7b:a6:96:b7:34:06:84:16:24:25:bd:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39
        Validity
            Not Before: Jun  8 10:01:02 2025 GMT
            Not After : Jun  9 10:01:02 2025 GMT
        Subject: CN=8b5e07477008fee87231308d7f32ec5c2dd0ccef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:db:20:e2:17:e5:93:36:f1:e6:ba:99:28:8c:
                    f1:31:6f:5d:53:2e:46:ae:c0:a2:59:48:e2:a4:20:
                    c8:e2:ce:4b:51:85:19:2f:2e:9f:c4:b6:2f:0b:5a:
                    8f:c9:74:6f:ce:e6:2f:0e:39:62:50:1f:d6:19:06:
                    95:86:bc:3f:99:21:a9:c3:3b:4c:34:74:0b:a2:46:
                    b0:c7:e5:1f:59:92:b6:6e:1a:10:5d:a8:fb:3b:0d:
                    e5:83:44:c9:00:cf:46:bf:28:af:18:46:e9:1b:a3:
                    9a:52:f9:7e:be:07:71:f7:b3:5b:06:bb:6a:c0:b0:
                    7a:37:ef:54:68:fc:09:0e:f5:77:41:6c:14:c0:eb:
                    e0:ca:94:cb:8c:ea:85:3b:df:cf:3b:81:53:12:ea:
                    b1:f1:e5:c3:1c:92:99:bc:06:cb:b8:03:c1:b0:ae:
                    2a:c1:de:53:16:03:32:c9:60:e1:21:d8:6a:8a:7f:
                    5b:ca:98:ff:7b:ca:da:9e:85:56:00:d9:a9:45:24:
                    e2:29:25:7c:35:0c:5f:7d:5e:7e:1a:0c:0e:5b:b5:
                    31:84:b2:46:bd:d4:d3:15:ba:42:04:01:03:48:0e:
                    20:c9:86:d5:91:1b:5c:c3:aa:f5:6c:a3:a9:5b:46:
                    c6:bd:30:b9:31:f2:ca:56:39:07:38:55:0e:a2:7c:
                    34:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5E:07:47:70:08:FE:E8:72:31:30:8D:7F:32:EC:5C:2D:D0:CC:EF
            X509v3 Authority Key Identifier:
                keyid:2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:17:18:ca:3d:52:1c:0e:14:17:8e:15:c4:73:9c:1e:da:ec:
         b0:b2:fc:16:69:6f:88:59:f7:58:d3:68:2a:7b:76:41:d1:f3:
         45:12:39:6f:44:66:38:4f:11:bb:96:da:dd:11:5c:8e:21:ea:
         75:76:6d:eb:6a:d4:f6:43:88:f2:3f:4d:ab:c1:94:72:a1:79:
         bc:82:fb:d4:8f:fd:08:6e:a2:fb:82:b6:45:3a:ca:07:90:3c:
         0e:e8:20:0d:24:60:c7:90:32:b8:fb:73:db:84:d5:17:2b:b9:
         ec:de:be:4a:c4:e4:8c:f6:64:ed:4f:b1:4c:80:dd:8e:eb:39:
         fe:97:a4:b5:c6:23:18:67:ad:c8:f8:96:8e:65:b5:89:a3:f5:
         aa:a8:f7:cf:2b:db:4f:6c:e7:b7:4c:83:99:c3:61:84:4d:87:
         92:67:44:e5:53:c5:0c:56:54:d8:16:7f:e2:3b:8d:d6:1b:90:
         14:f3:a1:06:e3:c1:a9:07:ec:eb:8a:88:22:e4:c9:4f:0e:a6:
         ca:96:1e:2d:00:5f:a6:55:3a:fc:b6:ff:66:6b:af:f9:4d:8f:
         ba:e4:e5:13:90:ad:4c:60:9b:a3:98:ce:ff:00:13:20:a2:89:
         65:e3:f0:79:b2:90:c7:3f:2b:fe:62:b3:d0:71:5f:74:da:61:
         5a:75:58:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:22:41 2025 by rpki-client