Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
File:                     LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft (raw, json)
Hash identifier:          zRg3lulWqWcTHeluqcWLyzhGPsWg+LtWqQXp9sfiWIc=
Subject key identifier:   61:48:18:B1:D0:1B:68:F5:60:1A:C8:01:E7:C1:44:32:94:60:B3:FE
Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
Certificate issuer:       /CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Certificate serial:       01974E2039369534C4E637A8139DDF46FBC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
Manifest number:          115A
Signing time:             Sun 08 Jun 2025 06:00:23 +0000
Manifest this update:     Sun 08 Jun 2025 06:00:23 +0000
Manifest next update:     Mon 09 Jun 2025 06:00:23 +0000
Files and hashes:         1: InAYg7kchm6hoE6SFVJqN5VO9jI.roa (hash: QxF7Lo3czD2q4Tr7NHUd/cpUnQ6rJyTxBt1Fv/I4tgU=)
                          2: LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl (hash: HBM/uwd/MaR7dcDst8SIUA5KM8e01rH2t/x6vigzZEo=)
                          3: k4qXOW_NpDOIOHCLgRTHFZfFt5A.roa (hash: ch7ij5E9LUdhi3/tkx9pvbq8WxL6Rn0r2P+Vs1PthF0=)
                          4: lFwxYJ9NT0Uy9IOwwYFb_vwGrhw.roa (hash: z+R9el6Zb5OurCcNqlSTJDxPuVgrOIIhwKwpE5Vc65M=)
                          5: p4gLr8QizpVSiuP1_Kkcfly1rjA.roa (hash: Wzj0j9gfoenaBy8qXe/RI5cOEUtdX9DRCtW7mRo3wd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:20:39:36:95:34:c4:e6:37:a8:13:9d:df:46:fb:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8
        Validity
            Not Before: Jun  8 06:00:23 2025 GMT
            Not After : Jun  9 06:00:23 2025 GMT
        Subject: CN=614818b1d01b68f5601ac801e7c144329460b3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d0:8b:12:b0:23:e8:ab:d6:dd:72:34:f0:28:
                    64:b7:3a:64:6f:63:a7:a3:65:08:47:75:74:63:ba:
                    be:fb:5e:32:f0:67:60:98:76:75:89:9e:31:8e:9d:
                    de:fd:bf:be:c1:7e:5d:a2:2d:17:3a:72:91:8b:71:
                    c5:a2:a6:01:0f:84:93:5f:5b:5b:eb:a4:66:2d:13:
                    83:24:fa:d6:e9:7e:c5:00:dd:57:d6:d7:45:11:c9:
                    ff:3c:e4:ef:8a:28:f6:48:b3:0e:e4:dd:58:b8:3c:
                    1e:4a:af:75:fe:40:4f:51:a1:38:32:50:91:70:71:
                    cf:d1:ed:4b:96:0a:94:2a:44:2c:e7:95:04:e6:94:
                    6b:cb:fe:ca:3c:a8:fc:8c:b7:94:b3:0c:d8:ed:d4:
                    b9:64:29:e4:34:ed:2c:49:1c:64:4c:13:bb:9a:3b:
                    60:06:12:7c:cd:f3:78:37:41:f7:95:2a:be:f4:bf:
                    f1:c2:a6:e4:cf:73:2c:71:2d:61:ec:78:22:5a:2f:
                    01:4e:71:22:ce:10:9a:cb:6b:f2:9a:dd:52:5f:58:
                    08:5b:6b:e4:85:9c:db:95:9f:0a:7b:4c:fc:ea:ae:
                    f1:44:78:df:f5:78:2d:af:66:ed:23:a1:2e:fd:53:
                    c8:1a:bf:da:b2:5e:9e:e9:6d:b4:16:02:c7:43:c8:
                    dc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:48:18:B1:D0:1B:68:F5:60:1A:C8:01:E7:C1:44:32:94:60:B3:FE
            X509v3 Authority Key Identifier:
                keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e7:06:59:f2:7a:d2:8d:e4:e4:89:f7:ca:57:da:79:3d:19:
         d8:47:86:12:37:2f:28:4c:f0:bd:d9:27:5d:9b:09:a1:78:c7:
         7d:9b:16:0c:f6:59:a1:e4:d0:cf:e9:6b:12:ca:20:23:bc:cd:
         8f:4d:cb:17:df:e2:44:6b:bb:32:34:29:a3:2f:6f:61:84:38:
         8a:d0:6c:4c:72:31:9c:3a:d6:87:9e:0e:eb:83:b2:df:5e:7c:
         2c:cc:63:3c:ab:7f:b8:2d:e1:04:b7:e8:b3:78:79:bf:3d:8e:
         c4:12:4c:4d:80:53:72:3b:fc:77:0a:c5:5e:1f:3b:87:f4:72:
         68:82:3d:70:64:3b:86:f2:92:34:3f:e7:b3:9e:4f:6d:8c:83:
         f7:28:26:c4:49:d5:ca:7d:dc:1d:2b:e8:17:1b:e6:18:47:ae:
         47:3a:b4:1e:09:8a:43:91:b5:a7:f3:ca:77:dd:af:83:d3:f1:
         16:f1:59:72:0c:70:9c:8d:26:65:40:06:15:db:85:d9:8d:0a:
         23:2a:36:52:3d:29:27:67:83:ae:8d:27:d0:fc:dc:dd:61:a1:
         69:1d:4b:2b:da:f5:50:54:35:9b:ed:a2:85:a4:b8:18:f7:f6:
         9e:28:ee:11:54:8a:95:b6:d5:08:f6:bb:56:ba:aa:60:43:0f:
         f5:25:e7:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOIDk2lTTE5jeoE53fRvvBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMjhjZmEzZmQyZGE5Y2FhYTY1OTI4NDc1OGRlZTY3MDk5
OTM0ZjgwHhcNMjUwNjA4MDYwMDIzWhcNMjUwNjA5MDYwMDIzWjAzMTEwLwYDVQQD
Eyg2MTQ4MThiMWQwMWI2OGY1NjAxYWM4MDFlN2MxNDQzMjk0NjBiM2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNCLErAj6KvW3XI08Chktzpkb2On
o2UIR3V0Y7q++14y8GdgmHZ1iZ4xjp3e/b++wX5doi0XOnKRi3HFoqYBD4STX1tb
66RmLRODJPrW6X7FAN1X1tdFEcn/POTviij2SLMO5N1YuDweSq91/kBPUaE4MlCR
cHHP0e1LlgqUKkQs55UE5pRry/7KPKj8jLeUswzY7dS5ZCnkNO0sSRxkTBO7mjtg
BhJ8zfN4N0H3lSq+9L/xwqbkz3MscS1h7HgiWi8BTnEizhCay2vymt1SX1gIW2vk
hZzblZ8Ke0z86q7xRHjf9Xgtr2btI6Eu/VPIGr/asl6e6W20FgLHQ8jcCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFIGLHQG2j1YBrIAefBRDKUYLP+MB8GA1UdIwQY
MBaAFC0oz6P9LanKqmWShHWN7mcJmTT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFNqUG9fMHRxY3FxWlpLRWRZM3Vad21aTlBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mZWJhYjAtZDkzYS00NzA0LTlhNzEt
M2FkNTJlOGI5NjI4LzEvTFNqUG9fMHRxY3FxWlpLRWRZM3Vad21aTlBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9mZWJhYjAtZDkzYS00NzA0LTlhNzEtM2FkNTJlOGI5NjI4
LzEvTFNqUG9fMHRxY3FxWlpLRWRZM3Vad21aTlBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYecGWfJ6
0o3k5In3ylfaeT0Z2EeGEjcvKEzwvdknXZsJoXjHfZsWDPZZoeTQz+lrEsogI7zN
j03LF9/iRGu7MjQpoy9vYYQ4itBsTHIxnDrWh54O64Oy3158LMxjPKt/uC3hBLfo
s3h5vz2OxBJMTYBTcjv8dwrFXh87h/RyaII9cGQ7hvKSND/ns55PbYyD9ygmxEnV
yn3cHSvoFxvmGEeuRzq0HgmKQ5G1p/PKd92vg9PxFvFZcgxwnI0mZUAGFduF2Y0K
Iyo2Uj0pJ2eDro0n0Pzc3WGhaR1LK9r1UFQ1m+2ihaS4GPf2nijuEVSKlbbVCPa7
VrqqYEMP9SXnKg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:48:13 2025 by rpki-client