Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
File:                     LS19l0PeLvovYzN4omj1jyqhYFA.mft (raw, json)
Hash identifier:          qRCxq84wz46F695N++FlEvbqQpNYfFaVTrPoaYuAWBI=
Subject key identifier:   17:EB:D6:06:30:F4:64:46:D4:3C:F9:5E:0C:0B:48:F5:8A:9C:70:6C
Authority key identifier: 2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50
Certificate issuer:       /CN=2d2d7d9743de2efa2f633378a268f58f2aa16050
Certificate serial:       0197500ECECC7D595A49B8315061796F2EAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
Manifest number:          142F
Signing time:             Sun 08 Jun 2025 15:00:37 +0000
Manifest this update:     Sun 08 Jun 2025 15:00:37 +0000
Manifest next update:     Mon 09 Jun 2025 15:00:37 +0000
Files and hashes:         1: 1-buam4cvzrUESLjjB1PACZifMOE.roa (hash: +T6bdmpI7/RrpdxHnXaaldhbLqtyNHZghNENwZHAAMA=)
                          2: 1Xxzpu5NB_tAOFF7vKFky5CdRts.roa (hash: n+JshJ/fSDMDcSDZOom+oloo+zJzlcN/7rhG+Doia9U=)
                          3: LS19l0PeLvovYzN4omj1jyqhYFA.crl (hash: Sw0mTinrBwdTSessK11bnL82lLPuuaG/5X99P2g1URM=)
                          4: fKVvugVq57Vok-HeOBFsVeEq_KY.roa (hash: F7Yehco5YSDWcARYN+I7zPfrg1uSQ0Y+IfgsllPqsIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:0e:ce:cc:7d:59:5a:49:b8:31:50:61:79:6f:2e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2d7d9743de2efa2f633378a268f58f2aa16050
        Validity
            Not Before: Jun  8 15:00:37 2025 GMT
            Not After : Jun  9 15:00:37 2025 GMT
        Subject: CN=17ebd60630f46446d43cf95e0c0b48f58a9c706c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:27:f9:ea:19:04:cb:47:ac:03:86:77:a5:53:
                    a4:6e:52:87:92:a5:4a:06:76:c9:d5:fa:72:83:af:
                    db:17:37:13:a9:4d:3a:8a:20:d7:6a:07:7c:1d:4a:
                    69:c0:61:e0:eb:ef:b8:df:0f:d2:12:ea:83:fd:08:
                    42:1a:49:9e:30:f4:ee:82:b7:d9:35:b1:51:73:dd:
                    e0:71:ba:55:09:d4:bf:97:36:4c:6d:61:ac:ad:cd:
                    ad:c4:47:10:5c:0e:b9:f6:b7:22:34:bd:81:a3:0a:
                    c6:f8:e9:7f:d3:9c:9e:b0:cd:b7:c7:75:17:e7:1d:
                    87:95:d7:e4:91:fc:b0:48:bd:89:0e:4a:27:6d:c8:
                    43:8e:53:65:1e:42:dd:18:4c:a0:07:3b:70:91:70:
                    2b:e7:97:a8:3f:f1:96:46:63:c9:a2:af:b5:73:39:
                    5d:48:79:b4:ec:27:76:a8:65:af:ea:7f:b2:c5:a5:
                    1b:7f:14:11:4c:70:75:30:b6:40:45:b8:6a:e9:72:
                    4b:17:29:59:72:c6:48:85:1f:df:a9:48:aa:ec:d7:
                    8f:d6:bc:9f:bb:0d:9d:2c:2c:cf:d0:3a:b2:a5:f3:
                    12:8d:ff:2a:00:1a:2e:14:dd:18:e6:0b:0d:bd:91:
                    19:2a:2e:fa:7c:53:9e:37:2f:d0:e3:bb:3c:6f:26:
                    dd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EB:D6:06:30:F4:64:46:D4:3C:F9:5E:0C:0B:48:F5:8A:9C:70:6C
            X509v3 Authority Key Identifier:
                keyid:2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:27:5b:4c:10:55:df:ca:1e:7a:06:5d:18:ec:4d:d8:b0:33:
         e6:63:5b:c4:1b:c1:c4:d0:cf:45:7f:e9:a3:12:3c:d3:df:cd:
         4a:17:05:a7:d5:d1:d6:fb:0a:1b:7c:89:10:5f:ba:3b:b9:01:
         d6:01:6b:ed:5f:39:fa:12:3a:cf:9a:94:6c:fe:fc:4a:56:6d:
         68:f9:15:05:9f:74:64:c9:e9:ba:43:2f:b2:4f:34:fa:20:9e:
         9f:4d:2c:7d:ff:23:31:e7:39:0e:53:f7:12:2f:72:ad:69:05:
         1d:9f:17:0c:31:5d:6e:2d:f0:39:90:3a:93:03:e8:f7:0e:59:
         40:c7:74:11:09:57:98:ef:e9:7a:9e:e2:c3:7c:fa:58:0e:10:
         5c:91:ed:ed:83:c0:ab:00:8d:d3:1c:be:fd:30:b2:ad:bd:59:
         84:b8:9a:15:bb:13:d9:b7:c2:11:b4:ba:c6:d8:3e:59:bf:e2:
         45:c7:80:ab:5e:ca:79:01:a8:ac:dd:c0:b2:65:b3:93:95:92:
         0a:7c:25:d3:0d:93:59:80:38:d1:2d:e3:6d:c1:f9:34:49:77:
         ea:c2:6a:8e:79:5f:b7:02:da:ae:88:c8:7e:ec:b1:e6:3b:8e:
         39:12:28:53:db:0c:34:f5:9d:b9:bf:1d:7b:68:a2:73:e3:80:
         da:3c:c3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:26:35 2025 by rpki-client