Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
File:                     LUrgdxLkhC-A-oEAnTNbxICeZB0.mft (raw, json)
Hash identifier:          EjwziwTIIib7+1fU6hiUB1O8QGt+SxLPuxZ2/yT8vaQ=
Subject key identifier:   1F:BA:1E:A5:FD:D8:3C:B4:98:0E:F0:44:00:13:3E:AB:4C:75:A6:C6
Authority key identifier: 2D:4A:E0:77:12:E4:84:2F:80:FA:81:00:9D:33:5B:C4:80:9E:64:1D
Certificate issuer:       /CN=2d4ae07712e4842f80fa81009d335bc4809e641d
Certificate serial:       019747E761585FB09808D54A3DFD9502F603
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
Manifest number:          05E8
Signing time:             Sat 07 Jun 2025 01:00:35 +0000
Manifest this update:     Sat 07 Jun 2025 01:00:35 +0000
Manifest next update:     Sun 08 Jun 2025 01:00:35 +0000
Files and hashes:         1: LUrgdxLkhC-A-oEAnTNbxICeZB0.crl (hash: EECjthHruCBEIxy/jpJqQqJPECuMIsq1FpvYWZtrh08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:61:58:5f:b0:98:08:d5:4a:3d:fd:95:02:f6:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d4ae07712e4842f80fa81009d335bc4809e641d
        Validity
            Not Before: Jun  7 01:00:35 2025 GMT
            Not After : Jun  8 01:00:35 2025 GMT
        Subject: CN=1fba1ea5fdd83cb4980ef04400133eab4c75a6c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:06:45:21:99:f3:0f:8b:b5:a8:fa:1b:1d:12:
                    55:6b:d6:b9:1e:12:09:01:a7:b0:14:ba:6e:b9:ef:
                    8f:62:48:a1:01:30:7d:23:4b:2c:57:26:ed:c0:5a:
                    42:f6:d0:55:e2:2d:01:4d:fb:5e:1e:b8:76:e3:24:
                    f6:b3:99:a3:30:c2:9b:0a:a7:5f:2a:28:f7:4d:5d:
                    6c:b8:69:91:7f:fe:f3:21:c5:94:d8:b4:55:b8:19:
                    f5:79:53:f5:4f:6e:fd:49:af:52:48:ad:fa:e5:ad:
                    34:dc:c8:00:36:c4:b0:4c:96:a8:f6:1d:96:61:be:
                    f7:a1:02:8e:c3:11:cd:74:b8:c8:ed:33:47:ed:d5:
                    ba:43:df:65:4c:21:69:94:c0:2b:4d:9b:53:ab:9e:
                    09:fe:cc:a1:26:0e:1d:0d:6b:3c:e8:39:bc:49:a0:
                    a9:b1:69:54:b2:00:c6:7d:29:fa:68:3e:b1:19:a2:
                    64:c6:12:14:73:d6:fb:55:97:5b:03:7d:c7:19:68:
                    a0:0a:c3:4a:43:0b:23:53:4a:c1:53:09:cc:5c:4c:
                    47:6f:fb:52:24:72:63:b1:8d:28:25:b2:38:d1:5c:
                    ad:3f:b3:ce:68:35:d5:aa:15:8b:33:df:bd:8e:5f:
                    48:47:2d:4b:4f:20:d3:98:43:b5:c7:a7:42:0b:1f:
                    80:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BA:1E:A5:FD:D8:3C:B4:98:0E:F0:44:00:13:3E:AB:4C:75:A6:C6
            X509v3 Authority Key Identifier:
                keyid:2D:4A:E0:77:12:E4:84:2F:80:FA:81:00:9D:33:5B:C4:80:9E:64:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b6:94:b4:a0:8c:61:ef:0d:f0:ff:c2:bb:ea:59:05:29:4e:
         5f:73:f9:97:a1:21:f6:a2:64:9b:2b:03:66:18:d2:35:c9:9f:
         e5:ec:c0:18:e6:3d:ee:12:89:3d:2f:4c:cf:3e:4e:70:a4:df:
         12:52:43:a4:ac:b6:6b:cb:8e:94:5f:90:26:a6:eb:b6:34:cd:
         19:80:00:47:d3:45:e5:27:39:ee:4e:34:fa:f8:a3:53:a1:c7:
         3e:06:22:4f:fa:bd:2e:d0:c8:bb:29:77:19:30:0f:6c:af:c8:
         b7:f7:0e:0c:6c:46:6f:6e:d8:5e:1c:c8:4d:77:f3:9a:37:78:
         78:fe:99:ea:82:cb:a3:c1:4d:8f:e7:54:1d:e9:f6:cb:ac:c9:
         a1:6c:73:55:a3:b8:34:ee:3f:60:e0:ca:a4:d8:4b:12:b1:d4:
         a7:78:1d:15:d6:c4:3a:6d:95:38:5c:2f:a9:24:6f:3a:6c:0d:
         d0:e9:64:57:01:d6:65:11:70:cc:d8:92:93:be:b9:91:30:d6:
         be:db:6e:71:3f:d2:aa:66:a2:fa:77:e5:38:98:fc:30:f4:33:
         00:c3:ff:13:f8:0a:fa:5e:97:9c:2e:67:c6:d0:e7:b4:74:26:
         ff:7b:0e:65:a2:2d:f0:d2:09:0d:5d:fb:f3:e8:fb:c1:24:c0:
         f0:86:4d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:40 2025 by rpki-client