Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
File:                     LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json)
Hash identifier:          y57nzluTRKcEbkv6TlJkY292Dfs3eSz1WShPQt682WM=
Subject key identifier:   A9:06:30:8A:C6:E7:DE:BB:16:F5:FE:71:BF:2E:36:CA:91:AE:A8:B7
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Certificate issuer:       /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial:       019753EB766542E9E1D69B17F4CE083C6EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
Manifest number:          158A
Signing time:             Mon 09 Jun 2025 09:00:29 +0000
Manifest this update:     Mon 09 Jun 2025 09:00:29 +0000
Manifest next update:     Tue 10 Jun 2025 09:00:29 +0000
Files and hashes:         1: 9cXZNBVPbFK7YgwhAS48hqVN3Q8.roa (hash: P8nablk4XjPWocUs0+w/NDTZnQaNhHciAel+enfRgUQ=)
                          2: GJ7X3NXNPspZEiv4IaMeRbRsKjQ.roa (hash: +RNCIDZL3jBzsc6WtooEau4eUrswSESksvuz73mPQ2Q=)
                          3: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: 0hcA6pOMlKhTlRulrYv/9iQ6xFZMvw3UdUprnAY2WbI=)
                          4: g2LuFjEhsXOpJYmb2qeJVNKQyUw.roa (hash: gXxbZRZ22rqSRTpziJlqNBg77T4+7Pe2wPiUn7l87EQ=)
                          5: kEq9Sa-aYq3KR4A40M5VyPd54wg.roa (hash: UxvV1YF4/u8pr981HOY28yhkvm5jpeElKKL/ei/Iusw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:53:eb:76:65:42:e9:e1:d6:9b:17:f4:ce:08:3c:6e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
        Validity
            Not Before: Jun  9 09:00:29 2025 GMT
            Not After : Jun 10 09:00:29 2025 GMT
        Subject: CN=a906308ac6e7debb16f5fe71bf2e36ca91aea8b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ec:e5:b0:6e:36:21:25:52:03:06:07:e4:a3:
                    87:09:ef:79:9f:f3:4b:92:35:40:bb:8c:3d:de:a3:
                    ab:29:9f:33:80:31:95:f4:07:6a:f1:62:e8:66:65:
                    dd:75:da:a6:c6:39:df:d4:d4:a1:e8:34:5d:30:ab:
                    19:f7:41:00:1d:26:f5:1e:4d:03:34:cf:9c:2d:68:
                    a9:1c:b3:23:4b:e9:b5:9e:d9:53:d5:ae:97:60:33:
                    1f:f9:5c:40:78:22:80:31:f8:3e:a3:e8:ca:7c:1c:
                    c0:18:be:9f:da:ab:bb:a7:7d:4a:53:d7:ea:47:27:
                    80:34:33:a8:39:4f:af:dc:3e:74:fc:d3:cf:00:99:
                    c6:94:b2:7d:93:f2:28:06:7a:48:8d:a6:3c:9e:c0:
                    77:28:43:01:b5:a4:01:78:70:94:8a:ad:33:bd:83:
                    b1:93:7f:f1:22:bc:2f:4b:12:f0:e9:c4:24:9c:b4:
                    6a:5a:fb:a4:f5:cc:cf:ee:cf:c1:46:eb:3a:59:6d:
                    6c:9f:80:c0:e3:43:f7:33:a8:99:c6:5a:f4:77:78:
                    7e:69:aa:39:0e:69:87:ae:69:2a:2d:dd:51:56:a2:
                    0c:a5:98:95:1c:66:03:89:1e:d8:6e:32:7e:81:c0:
                    8c:d2:a6:94:7e:da:98:e5:69:e6:23:53:17:3e:68:
                    a0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:06:30:8A:C6:E7:DE:BB:16:F5:FE:71:BF:2E:36:CA:91:AE:A8:B7
            X509v3 Authority Key Identifier:
                keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:9e:b9:37:3d:fd:58:0a:a2:46:fe:62:30:f9:0c:bf:1d:9d:
         51:b0:58:42:8d:74:c2:af:a2:40:94:d5:8f:14:2d:db:4c:98:
         e7:56:94:e0:54:04:32:bd:b1:2e:53:3f:a6:ab:e1:2f:20:07:
         65:5d:50:03:9a:0b:50:e8:51:15:e4:ee:de:22:79:18:ad:d9:
         b1:a2:2f:e8:a1:9f:4a:d3:f0:87:74:ba:29:22:5b:8d:ac:39:
         1c:68:bc:8f:62:03:2b:73:9a:dd:04:c6:72:76:c3:48:bc:cd:
         e3:cd:84:13:8d:2f:84:9a:0c:c6:73:45:ae:89:1d:78:d9:5d:
         76:99:32:9b:be:e4:57:c0:76:b8:5a:e6:c9:35:15:59:af:a2:
         38:ea:7f:d1:02:fc:b5:7c:8f:95:3c:ae:09:2c:e9:8b:9d:7a:
         65:b0:a5:32:11:83:f3:fd:ad:bb:97:05:a1:27:5e:04:fc:aa:
         b6:91:45:25:78:49:d6:6b:eb:3e:e2:9a:93:60:c7:52:a4:34:
         7b:6b:4c:26:09:e1:44:52:48:40:c4:1d:b5:c4:af:99:8e:eb:
         37:c5:68:7a:75:ba:28:ba:74:5a:da:06:68:b1:82:e1:6c:df:
         e8:81:d9:e8:d7:82:ea:31:ad:38:1a:3c:2c:4c:e5:58:24:ed:
         b9:85:c8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:52:35 2025 by rpki-client