Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft
File:                     Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft (raw, json)
Hash identifier:          a5/opC23Tj1DrGIJzFqeMzZ4+26PxrKoQ6+zh5DgT2k=
Subject key identifier:   AC:9D:7B:BA:85:B2:22:83:20:0F:2D:94:FD:3D:90:42:B5:CC:0B:A3
Authority key identifier: 2F:1B:39:F7:F0:A9:E6:2A:A0:60:49:B8:CC:A3:0D:22:F5:2D:04:35
Certificate issuer:       /CN=2f1b39f7f0a9e62aa06049b8cca30d22f52d0435
Certificate serial:       01975DCADF6AA5615B98907D73D34B8B72CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft
Manifest number:          09E6
Signing time:             Wed 11 Jun 2025 07:01:05 +0000
Manifest this update:     Wed 11 Jun 2025 07:01:05 +0000
Manifest next update:     Thu 12 Jun 2025 07:01:05 +0000
Files and hashes:         1: Lxs59_Cp5iqgYEm4zKMNIvUtBDU.crl (hash: hau3qJdGOHtsZ64QWA4JUfT8crbFdOSOe2diQwS/AYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 07:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:ca:df:6a:a5:61:5b:98:90:7d:73:d3:4b:8b:72:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f1b39f7f0a9e62aa06049b8cca30d22f52d0435
        Validity
            Not Before: Jun 11 07:01:05 2025 GMT
            Not After : Jun 12 07:01:05 2025 GMT
        Subject: CN=ac9d7bba85b22283200f2d94fd3d9042b5cc0ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6a:a1:d9:bf:f9:d2:60:05:5f:d5:b9:b4:76:
                    50:28:ff:d7:05:a8:be:61:9c:bd:9b:0d:87:0c:1d:
                    d1:7c:b3:b8:df:cd:fd:df:3f:25:93:c3:9e:fb:c1:
                    b5:d9:46:4a:96:f6:db:e2:11:4a:38:16:f0:c3:20:
                    b9:91:cb:30:1c:11:ea:fc:9f:cb:2a:58:d5:41:18:
                    77:79:ac:40:08:4b:22:57:ca:33:b2:fb:48:54:98:
                    3a:cc:15:91:1c:1e:e2:12:58:2f:ec:27:21:7d:19:
                    0f:95:94:df:46:9c:01:ba:1e:3c:7a:cf:c1:f9:d3:
                    5a:8f:d8:85:9c:26:fe:85:70:eb:f9:4f:62:a2:cc:
                    b5:4f:a5:0c:84:d9:d7:ad:a3:c1:d9:24:6a:20:5a:
                    84:47:05:b4:07:4d:ae:dc:93:5b:bc:27:bb:28:7d:
                    05:06:e4:75:30:d3:0a:03:4b:27:12:d1:90:ed:6d:
                    94:22:6d:4c:48:da:90:63:96:ed:8d:36:d5:5c:6a:
                    6b:82:85:1a:c8:22:e5:6e:1a:0b:47:3f:00:54:d9:
                    1f:7b:48:8b:0a:92:2f:da:4a:ca:94:a7:f3:15:12:
                    dc:ba:9b:b2:33:ee:4c:a2:ea:45:22:18:87:d2:a9:
                    49:18:53:c2:80:04:99:2f:a5:c7:d9:2b:46:a7:3f:
                    f4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9D:7B:BA:85:B2:22:83:20:0F:2D:94:FD:3D:90:42:B5:CC:0B:A3
            X509v3 Authority Key Identifier:
                keyid:2F:1B:39:F7:F0:A9:E6:2A:A0:60:49:B8:CC:A3:0D:22:F5:2D:04:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:a0:90:33:f4:f4:69:cc:dd:69:d0:e7:96:76:c6:5b:ea:e1:
         c2:16:13:89:04:c9:60:82:74:7b:be:0f:b8:25:e9:cd:90:38:
         18:a4:33:d2:72:e3:57:4c:a7:1e:f0:16:7e:e9:10:88:4c:5e:
         44:3d:30:64:ce:b5:60:b2:38:96:1c:bd:60:ea:0c:e4:20:88:
         19:25:e3:d7:ac:e1:ce:5c:6e:cf:7d:e4:62:0c:f1:67:e6:10:
         3e:45:09:02:3c:bf:b8:af:8b:5d:fe:13:32:bd:1f:91:c3:1b:
         bb:37:24:cd:8f:81:95:40:10:82:79:0c:c7:c8:81:96:81:54:
         69:6c:0a:c0:87:cc:30:bf:9f:00:f1:f7:93:ba:35:5f:c7:8c:
         8d:22:44:6c:32:56:ab:2e:11:61:cb:12:25:04:63:3b:11:f3:
         4b:6f:e0:a4:32:03:ce:64:96:03:e1:da:29:d1:2e:27:19:a4:
         15:ce:08:8c:27:c2:3f:db:08:67:e9:b0:07:d4:c9:31:47:ae:
         9c:67:b5:e5:9a:0c:c3:b4:4e:cb:78:19:74:94:64:d8:09:58:
         a6:5e:db:3a:b5:b4:58:0a:01:2a:e3:a7:57:a6:b4:cf:92:07:
         21:d1:e3:fe:ca:ca:d7:b1:6d:7c:72:93:33:15:dd:f9:a8:53:
         9f:99:df:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZddyt9qpWFbmJB9c9NLi3LPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMWIzOWY3ZjBhOWU2MmFhMDYwNDliOGNjYTMwZDIyZjUy
ZDA0MzUwHhcNMjUwNjExMDcwMTA1WhcNMjUwNjEyMDcwMTA1WjAzMTEwLwYDVQQD
EyhhYzlkN2JiYTg1YjIyMjgzMjAwZjJkOTRmZDNkOTA0MmI1Y2MwYmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWqh2b/50mAFX9W5tHZQKP/XBai+
YZy9mw2HDB3RfLO438393z8lk8Oe+8G12UZKlvbb4hFKOBbwwyC5kcswHBHq/J/L
KljVQRh3eaxACEsiV8ozsvtIVJg6zBWRHB7iElgv7CchfRkPlZTfRpwBuh48es/B
+dNaj9iFnCb+hXDr+U9iosy1T6UMhNnXraPB2SRqIFqERwW0B02u3JNbvCe7KH0F
BuR1MNMKA0snEtGQ7W2UIm1MSNqQY5btjTbVXGprgoUayCLlbhoLRz8AVNkfe0iL
CpIv2krKlKfzFRLcupuyM+5MoupFIhiH0qlJGFPCgASZL6XH2StGpz/0qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyde7qFsiKDIA8tlP09kEK1zAujMB8GA1UdIwQY
MBaAFC8bOffwqeYqoGBJuMyjDSL1LQQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHhzNTlfQ3A1aXFnWUVtNHpLTU5JdlV0QkRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lZTUzMTQtY2MzNC00NjVlLWFiNjEt
NjY0MjY3ZWQ2YTdlLzEvTHhzNTlfQ3A1aXFnWUVtNHpLTU5JdlV0QkRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9lZTUzMTQtY2MzNC00NjVlLWFiNjEtNjY0MjY3ZWQ2YTdl
LzEvTHhzNTlfQ3A1aXFnWUVtNHpLTU5JdlV0QkRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgaCQM/T0
aczdadDnlnbGW+rhwhYTiQTJYIJ0e74PuCXpzZA4GKQz0nLjV0ynHvAWfukQiExe
RD0wZM61YLI4lhy9YOoM5CCIGSXj16zhzlxuz33kYgzxZ+YQPkUJAjy/uK+LXf4T
Mr0fkcMbuzckzY+BlUAQgnkMx8iBloFUaWwKwIfMML+fAPH3k7o1X8eMjSJEbDJW
qy4RYcsSJQRjOxHzS2/gpDIDzmSWA+HaKdEuJxmkFc4IjCfCP9sIZ+mwB9TJMUeu
nGe15ZoMw7ROy3gZdJRk2AlYpl7bOrW0WAoBKuOnV6a0z5IHIdHj/srK17FtfHKT
MxXd+ahTn5nf/A==
-----END CERTIFICATE-----
Generated at Wed Jun 11 13:33:42 2025 by rpki-client