Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
File:                     lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft (raw, json)
Hash identifier:          sFTe0So4zXYDtI4WJ6Sv79CjeJxo45T8wBqZdrVWtLI=
Subject key identifier:   35:C7:B7:2B:CA:57:D7:BD:62:30:7A:0D:F7:D0:94:8D:DE:83:83:36
Authority key identifier: 96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6
Certificate issuer:       /CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
Certificate serial:       019767A98DD4AC5A6DE1DFBC2FF3A7CA7DE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
Manifest number:          0E31
Signing time:             Fri 13 Jun 2025 05:00:54 +0000
Manifest this update:     Fri 13 Jun 2025 05:00:54 +0000
Manifest next update:     Sat 14 Jun 2025 05:00:54 +0000
Files and hashes:         1: hDr7XZdy7Zu__1e0bkoorUALVGI.roa (hash: Ah9s+DUMovObb0WEEgnVu12bFf+2vlp0mJLr4ANjGq0=)
                          2: lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl (hash: 8QmvrIQp9VylUoq2W3yo1UeoiKJuFZpHhGDbZkb/deM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:67:a9:8d:d4:ac:5a:6d:e1:df:bc:2f:f3:a7:ca:7d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
        Validity
            Not Before: Jun 13 05:00:54 2025 GMT
            Not After : Jun 14 05:00:54 2025 GMT
        Subject: CN=35c7b72bca57d7bd62307a0df7d0948dde838336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:93:b9:f7:c5:2d:33:98:90:85:e6:de:f2:c3:
                    68:6d:dc:f2:36:d2:bb:6d:a5:a5:23:89:51:92:81:
                    b6:00:18:a2:b0:eb:bd:80:ef:ea:f0:b4:d0:aa:b7:
                    da:63:90:95:c4:4f:f2:9c:3a:ad:15:ca:21:35:39:
                    54:e8:19:a7:e1:c9:1f:b9:9f:70:da:57:72:d2:e5:
                    ff:91:d4:b6:b8:50:6b:ca:66:9c:e0:ed:4f:72:90:
                    cf:37:8c:51:6b:58:e3:06:88:91:c1:2b:fc:b5:d7:
                    1c:01:62:f1:e9:aa:2d:21:d0:cc:2d:46:4a:51:68:
                    ed:5d:8e:53:1d:78:87:49:a4:c8:76:65:65:58:e2:
                    96:a6:ce:ea:a6:39:9c:43:63:d0:99:3e:93:f2:a5:
                    b8:58:d6:03:68:5a:07:23:b7:e8:2a:f6:b0:49:bf:
                    a3:8d:d8:11:48:bb:d4:13:75:3b:29:fe:2d:0a:ad:
                    e3:6e:49:7b:aa:26:8d:f6:14:f8:b1:0e:e0:3e:1a:
                    7f:b0:6f:b9:59:16:c4:37:da:64:cf:40:30:43:e4:
                    6b:cf:33:fb:a4:5a:52:19:a3:27:d7:c2:19:63:8c:
                    43:fb:fc:fe:45:a8:44:5a:27:00:31:6d:ee:90:06:
                    36:d5:a9:2b:d7:9e:54:22:35:ba:e0:3b:27:d7:c2:
                    51:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C7:B7:2B:CA:57:D7:BD:62:30:7A:0D:F7:D0:94:8D:DE:83:83:36
            X509v3 Authority Key Identifier:
                keyid:96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:76:5b:94:9a:8a:36:bd:c2:85:ab:45:02:00:fc:1d:cb:75:
         ab:ad:56:10:fb:00:c4:39:43:15:bc:11:ea:db:ae:c0:a0:f0:
         80:7f:a4:ef:9b:b3:e4:51:90:e9:12:4f:3f:4a:77:b6:a1:a7:
         05:9d:ea:46:bf:d7:cf:7d:30:f9:5e:77:55:6b:5e:c9:1d:73:
         a5:3b:0e:06:7e:3c:29:f1:d0:d0:7c:13:6b:77:47:b6:1a:fc:
         69:b9:18:81:70:b7:c7:6a:33:1f:ac:32:2e:9b:10:56:dd:9d:
         2c:83:e4:e9:67:b5:18:fd:73:c4:b4:3a:0e:3a:c9:a5:a3:e9:
         ee:f0:e3:2f:8e:87:78:a6:b9:0d:46:7e:7b:92:e7:e9:88:8c:
         9d:d5:d0:59:53:2e:ec:15:50:1f:67:54:a6:aa:f6:41:85:8e:
         93:0b:81:38:a9:88:87:0f:88:a0:44:14:31:9d:2a:06:e1:bf:
         72:d5:43:a5:d9:5a:43:fa:40:8d:49:12:b8:05:6f:95:f9:74:
         1e:22:c8:73:ca:0b:24:db:63:a5:aa:ab:ca:95:9a:a8:03:65:
         6d:b1:c5:15:50:7c:65:05:a6:09:a8:8b:1c:ff:b5:6e:68:17:
         e6:1c:bb:b7:da:b0:1a:e6:1d:09:d4:ea:4b:2d:4b:a6:b6:c2:
         43:bc:6e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 12:42:06 2025 by rpki-client