Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
File:                     LHwKdxsw0nQoUIDdxC42eYOW8iw.mft (raw, json)
Hash identifier:          kacNlCQRUlgMtUCd568SVKjdkunlL8QLYiO+JfHdXVA=
Subject key identifier:   05:77:7B:92:05:02:1F:F7:61:92:DE:DD:9C:DE:73:19:5C:F2:FE:CA
Authority key identifier: 2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
Certificate issuer:       /CN=2c7c0a771b30d274285080ddc42e36798396f22c
Certificate serial:       01974B8D8D65B007610663880A979B9604D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
Manifest number:          12A0
Signing time:             Sat 07 Jun 2025 18:00:57 +0000
Manifest this update:     Sat 07 Jun 2025 18:00:57 +0000
Manifest next update:     Sun 08 Jun 2025 18:00:57 +0000
Files and hashes:         1: LHwKdxsw0nQoUIDdxC42eYOW8iw.crl (hash: b7EGf8YpTAqCIgJd7IESO5gLrgtSe3tO4hA3/Vhte30=)
                          2: _wYBYYAWsBdIPcz67gJjf_cpxBc.roa (hash: WT5EAFrH+ID6hV4wr/zaJ0InnDxoXdrcj+f2kf7QcuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:8d:65:b0:07:61:06:63:88:0a:97:9b:96:04:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c7c0a771b30d274285080ddc42e36798396f22c
        Validity
            Not Before: Jun  7 18:00:57 2025 GMT
            Not After : Jun  8 18:00:57 2025 GMT
        Subject: CN=05777b9205021ff76192dedd9cde73195cf2feca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dd:9d:11:c7:d9:b1:56:01:1f:8c:b8:2f:35:
                    ef:e3:89:e6:f4:ed:bd:e8:a1:71:18:71:d8:1f:de:
                    65:2c:a7:01:ea:c8:86:b3:7d:58:c9:2b:90:a4:26:
                    d6:4b:1b:3e:74:a8:d7:be:15:08:3b:ed:bb:dc:38:
                    92:76:27:bc:6b:2f:ce:67:c5:1f:37:3b:e8:88:eb:
                    d1:fd:99:04:f9:3a:7c:68:83:0b:12:72:54:6a:ae:
                    1b:7f:b5:26:20:92:42:fd:4f:3c:f3:7d:72:69:d1:
                    81:84:09:55:95:f4:80:73:09:7b:d6:b8:b6:41:57:
                    d6:e3:86:f9:a4:e4:5a:34:86:4a:d3:cc:d4:85:1a:
                    ee:95:99:b5:dc:c4:42:2a:90:70:f7:bc:05:61:11:
                    6d:0f:1a:94:ac:58:4a:44:e9:df:7e:01:92:f3:0f:
                    19:79:8c:c4:1b:de:82:e0:b4:bb:cb:a2:36:28:44:
                    71:90:a9:64:67:bb:d7:e3:65:b7:ea:da:9d:54:d1:
                    43:d9:da:7f:da:51:80:ad:65:7e:e9:8c:74:9f:38:
                    f7:1e:0f:bd:46:b2:ca:da:34:05:f2:29:87:4f:5e:
                    af:b5:35:b7:af:d2:ac:85:af:a4:db:65:38:53:cb:
                    87:76:d1:ae:7a:50:07:da:81:19:35:8b:c9:39:e7:
                    5d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:77:7B:92:05:02:1F:F7:61:92:DE:DD:9C:DE:73:19:5C:F2:FE:CA
            X509v3 Authority Key Identifier:
                keyid:2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:91:bd:43:a0:20:70:aa:3d:1a:1a:f7:76:be:25:65:84:14:
         2e:a3:d3:5a:df:2b:b6:ef:9b:c9:ef:3f:fe:d3:4f:9c:ce:75:
         6c:66:8c:09:85:02:a4:0f:92:97:0f:87:c4:32:eb:66:8c:1f:
         fd:cf:6b:35:6f:97:55:73:dc:70:1a:f1:de:e9:a7:94:5a:bb:
         84:7e:6a:20:33:41:fc:41:0d:3e:42:ca:35:d7:3c:24:0e:7b:
         df:30:9f:2b:5d:cb:c0:25:51:e0:56:2d:c4:43:0e:75:23:0e:
         fb:ac:d1:d3:c9:70:f3:ab:7e:7a:1d:f0:56:74:11:49:bb:0c:
         27:c5:a7:be:53:40:20:2c:0e:80:4e:b9:90:ee:40:da:e7:7d:
         d0:7d:55:26:f8:f3:7f:49:d1:81:a5:5d:9e:4c:b5:cb:be:de:
         38:ac:64:ec:f7:b6:16:06:1b:af:cd:98:4b:cf:5d:62:81:3b:
         5d:f1:9a:0b:3c:28:9d:f4:c2:6e:5b:35:b3:ee:17:50:28:5a:
         ea:c4:07:45:78:70:bb:6f:83:f3:87:ad:fe:80:c6:4d:f6:1c:
         68:35:52:0e:20:0d:51:19:ff:5c:c6:af:b6:7c:13:31:5a:e2:
         13:f5:70:36:38:5a:81:5b:04:4f:22:7e:ee:c5:ee:e5:51:7b:
         d8:f7:da:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjY1lsAdhBmOICpeblgTRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjN2MwYTc3MWIzMGQyNzQyODUwODBkZGM0MmUzNjc5ODM5
NmYyMmMwHhcNMjUwNjA3MTgwMDU3WhcNMjUwNjA4MTgwMDU3WjAzMTEwLwYDVQQD
EygwNTc3N2I5MjA1MDIxZmY3NjE5MmRlZGQ5Y2RlNzMxOTVjZjJmZWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo92dEcfZsVYBH4y4LzXv44nm9O29
6KFxGHHYH95lLKcB6siGs31YySuQpCbWSxs+dKjXvhUIO+273DiSdie8ay/OZ8Uf
NzvoiOvR/ZkE+Tp8aIMLEnJUaq4bf7UmIJJC/U88831yadGBhAlVlfSAcwl71ri2
QVfW44b5pORaNIZK08zUhRrulZm13MRCKpBw97wFYRFtDxqUrFhKROnffgGS8w8Z
eYzEG96C4LS7y6I2KERxkKlkZ7vX42W36tqdVNFD2dp/2lGArWV+6Yx0nzj3Hg+9
RrLK2jQF8imHT16vtTW3r9Ksha+k22U4U8uHdtGuelAH2oEZNYvJOeddZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAV3e5IFAh/3YZLe3Zzecxlc8v7KMB8GA1UdIwQY
MBaAFCx8CncbMNJ0KFCA3cQuNnmDlvIsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEh3S2R4c3cwblFvVUlEZHhDNDJlWU9XOGl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9kNWY4MDEtNDQyNi00ZjQ1LThmMjYt
OWNjZGQzYzg3M2E2LzEvTEh3S2R4c3cwblFvVUlEZHhDNDJlWU9XOGl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9kNWY4MDEtNDQyNi00ZjQ1LThmMjYtOWNjZGQzYzg3M2E2
LzEvTEh3S2R4c3cwblFvVUlEZHhDNDJlWU9XOGl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpG9Q6Ag
cKo9Ghr3dr4lZYQULqPTWt8rtu+bye8//tNPnM51bGaMCYUCpA+Slw+HxDLrZowf
/c9rNW+XVXPccBrx3umnlFq7hH5qIDNB/EENPkLKNdc8JA573zCfK13LwCVR4FYt
xEMOdSMO+6zR08lw86t+eh3wVnQRSbsMJ8WnvlNAICwOgE65kO5A2ud90H1VJvjz
f0nRgaVdnky1y77eOKxk7Pe2FgYbr82YS89dYoE7XfGaCzwonfTCbls1s+4XUCha
6sQHRXhwu2+D84et/oDGTfYcaDVSDiANURn/XMavtnwTMVriE/VwNjhagVsETyJ+
7sXu5VF72Pfa5Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:20:38 2025 by rpki-client