Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
File:                     LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft (raw, json)
Hash identifier:          orsIwktX4zg4qTxcCKFqNWFR2mT0/p9KACG0RfHIpYg=
Subject key identifier:   85:CA:74:34:5F:E6:5D:AA:0D:D5:E6:1E:C7:DD:56:90:EA:E2:5F:97
Authority key identifier: 2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27
Certificate issuer:       /CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227
Certificate serial:       0197469DD20DC7B9EC0A35CDC351E68779CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
Manifest number:          0890
Signing time:             Fri 06 Jun 2025 19:00:37 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:37 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:37 +0000
Files and hashes:         1: LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl (hash: Ez0dvQzzKfgg7nZfjgi5UT6dEWiGTj+Oqzqcd23NK74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9d:d2:0d:c7:b9:ec:0a:35:cd:c3:51:e6:87:79:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227
        Validity
            Not Before: Jun  6 19:00:37 2025 GMT
            Not After : Jun  7 19:00:37 2025 GMT
        Subject: CN=85ca74345fe65daa0dd5e61ec7dd5690eae25f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:75:a0:32:b0:f4:34:cf:8e:b1:7e:12:20:af:
                    43:27:31:59:40:7e:1e:ac:db:c2:ca:aa:3c:cb:47:
                    ba:71:f6:93:b0:b1:a7:18:7b:d1:09:d0:3a:97:19:
                    6b:7d:6e:cb:98:21:6e:ba:62:52:cc:c2:08:98:55:
                    14:ef:a5:92:d4:e4:71:e1:05:01:00:4b:0d:49:3f:
                    e8:d2:b1:c7:03:2f:7d:c0:c2:39:4c:a1:2c:56:e2:
                    1a:46:f9:3d:09:b3:20:15:ef:2b:4a:33:a4:a0:23:
                    58:da:43:5d:40:8f:10:f5:be:23:a8:cb:d6:64:d4:
                    0f:1e:7c:17:79:1d:bc:e5:61:f1:49:74:57:52:8a:
                    3d:1f:7c:a6:b0:6c:50:cf:57:95:ad:f8:d8:43:fe:
                    ba:85:9d:38:f8:33:ad:e4:dc:16:e3:32:da:d5:e7:
                    1d:54:85:c2:96:29:b2:df:84:99:81:04:be:e1:44:
                    05:12:54:2f:7a:dc:ef:02:f3:54:96:0e:69:da:ec:
                    db:71:4c:e4:2e:b5:cc:35:08:79:8a:15:91:6e:bc:
                    47:97:db:ff:d6:25:3a:0b:9c:76:31:9b:ab:df:c2:
                    f6:e8:06:f5:5f:f9:24:06:72:22:49:af:af:a2:bc:
                    e5:c3:7b:88:84:2e:10:5b:e0:81:32:19:66:45:a7:
                    da:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CA:74:34:5F:E6:5D:AA:0D:D5:E6:1E:C7:DD:56:90:EA:E2:5F:97
            X509v3 Authority Key Identifier:
                keyid:2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:0f:3c:f7:04:9a:44:3d:7e:26:34:a1:cc:68:f8:7c:c6:d6:
         80:bb:09:1d:a2:7f:1f:68:45:4f:1f:ab:4f:d6:4e:c8:7c:8a:
         73:04:ef:28:3c:6b:64:97:4b:00:74:1c:c3:26:fb:e8:80:eb:
         9f:6b:25:df:ae:5d:6e:84:df:8a:c0:1d:a4:29:fd:d2:6d:34:
         1f:8d:f4:8f:96:d9:e9:a9:f6:be:54:0e:b4:aa:d2:9e:21:b1:
         d1:0b:10:4d:b1:bb:a8:30:f8:95:6a:7e:04:2c:01:a7:88:5f:
         62:1c:3d:31:69:dd:c8:09:e0:b5:96:22:81:02:70:1a:7e:3b:
         ed:18:24:92:e2:13:47:e1:d8:9d:29:7a:af:13:a0:75:72:46:
         51:75:73:f3:7b:93:ac:27:74:6d:6a:c2:b6:94:34:d8:a8:ca:
         20:6d:99:39:70:7c:29:27:41:50:69:ce:77:47:5c:9e:fe:f7:
         c8:52:9c:77:c3:0c:c5:a8:08:c8:be:7c:08:4d:ba:9c:c0:16:
         a9:ff:9f:35:de:c8:80:a7:28:53:2d:e7:f3:cf:be:f6:5b:50:
         97:cb:95:36:9f:a7:37:c5:f0:3f:53:e1:45:b4:de:9f:78:4c:
         e6:eb:68:33:51:6e:95:78:12:c8:04:81:d8:1e:a3:ae:aa:1a:
         1f:8a:c7:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGndINx7nsCjXNw1Hmh3nMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMTMyMjAyMGVlNGU1OWNiNWNkM2RlNzE2NTBjNjJhZmQ0
YzAyMjcwHhcNMjUwNjA2MTkwMDM3WhcNMjUwNjA3MTkwMDM3WjAzMTEwLwYDVQQD
Eyg4NWNhNzQzNDVmZTY1ZGFhMGRkNWU2MWVjN2RkNTY5MGVhZTI1Zjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHWgMrD0NM+OsX4SIK9DJzFZQH4e
rNvCyqo8y0e6cfaTsLGnGHvRCdA6lxlrfW7LmCFuumJSzMIImFUU76WS1ORx4QUB
AEsNST/o0rHHAy99wMI5TKEsVuIaRvk9CbMgFe8rSjOkoCNY2kNdQI8Q9b4jqMvW
ZNQPHnwXeR285WHxSXRXUoo9H3ymsGxQz1eVrfjYQ/66hZ04+DOt5NwW4zLa1ecd
VIXClimy34SZgQS+4UQFElQvetzvAvNUlg5p2uzbcUzkLrXMNQh5ihWRbrxHl9v/
1iU6C5x2MZur38L26Ab1X/kkBnIiSa+vorzlw3uIhC4QW+CBMhlmRafaswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXKdDRf5l2qDdXmHsfdVpDq4l+XMB8GA1UdIwQY
MBaAFCwTIgIO5OWctc095xZQxir9TAInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEJNaUFnN2s1WnkxelQzbkZsREdLdjFNQWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jNThjOGMtNWM2ZS00NGUwLTgyYWYt
ZTk2ZGUzMTEyZGVhLzEvTEJNaUFnN2s1WnkxelQzbkZsREdLdjFNQWljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9jNThjOGMtNWM2ZS00NGUwLTgyYWYtZTk2ZGUzMTEyZGVh
LzEvTEJNaUFnN2s1WnkxelQzbkZsREdLdjFNQWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2A889wSa
RD1+JjShzGj4fMbWgLsJHaJ/H2hFTx+rT9ZOyHyKcwTvKDxrZJdLAHQcwyb76IDr
n2sl365dboTfisAdpCn90m00H430j5bZ6an2vlQOtKrSniGx0QsQTbG7qDD4lWp+
BCwBp4hfYhw9MWndyAngtZYigQJwGn477RgkkuITR+HYnSl6rxOgdXJGUXVz83uT
rCd0bWrCtpQ02KjKIG2ZOXB8KSdBUGnOd0dcnv73yFKcd8MMxagIyL58CE26nMAW
qf+fNd7IgKcoUy3n88++9ltQl8uVNp+nN8XwP1PhRbTen3hM5utoM1FulXgSyASB
2B6jrqoaH4rHUw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:58:57 2025 by rpki-client