Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
File:                     LTOrAnhiOJzMHx_IsKVkpuvXy40.mft (raw, json)
Hash identifier:          dd2cRUFiN5zSRoC0f4o2O90iukUTItk47QQsqU6OrnU=
Subject key identifier:   0E:79:51:A1:3A:C9:06:47:6B:29:E5:73:6A:E7:EB:EF:AD:20:CE:2C
Authority key identifier: 2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
Certificate issuer:       /CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Certificate serial:       0197575A57682A244EC160A6F8420A2B5630
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
Manifest number:          081C
Signing time:             Tue 10 Jun 2025 01:00:27 +0000
Manifest this update:     Tue 10 Jun 2025 01:00:27 +0000
Manifest next update:     Wed 11 Jun 2025 01:00:27 +0000
Files and hashes:         1: LTOrAnhiOJzMHx_IsKVkpuvXy40.crl (hash: 7oy7G4rxJXYBLuU5eaT3UMpqqgFN/8dtO3vZTmqU5AE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 01:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:57:5a:57:68:2a:24:4e:c1:60:a6:f8:42:0a:2b:56:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
        Validity
            Not Before: Jun 10 01:00:27 2025 GMT
            Not After : Jun 11 01:00:27 2025 GMT
        Subject: CN=0e7951a13ac906476b29e5736ae7ebefad20ce2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4c:37:0f:e9:64:2d:6d:d9:f3:0c:21:b3:64:
                    9a:35:72:cd:17:07:67:99:ae:fd:85:45:b9:b3:26:
                    92:d7:98:ce:46:71:61:04:9c:53:8d:f4:0b:e3:24:
                    89:54:5c:ed:17:9e:be:af:34:0e:e2:35:dd:26:35:
                    d9:4e:a0:9e:24:aa:45:55:e0:50:4f:1f:ce:25:6e:
                    48:1b:14:bc:90:ec:b6:0a:c3:90:16:03:a1:ec:82:
                    96:e6:9f:65:b6:b2:e9:46:16:7c:9a:83:3b:9c:3e:
                    ea:ea:0a:1f:21:cc:f7:70:0d:83:de:c0:10:28:15:
                    1c:b2:e6:cb:a1:1c:64:39:1d:72:e7:cc:ee:df:f1:
                    03:3e:f2:ed:90:4e:9c:89:18:ff:40:54:9a:45:56:
                    de:7c:b8:e4:ed:ab:ce:05:5d:ef:59:06:37:48:7d:
                    12:ca:f7:77:61:ec:d0:50:9d:bc:af:0c:87:e6:4e:
                    ae:7a:9e:49:be:1d:b5:51:b6:6e:b3:86:c0:a8:ff:
                    55:66:69:93:00:57:2a:12:d6:69:34:cf:38:54:c9:
                    64:22:25:e2:2e:8e:85:c6:9c:a4:77:1e:fb:46:db:
                    12:26:62:a8:00:26:be:c6:0d:90:5d:86:89:fc:41:
                    bc:2c:af:2a:30:87:b5:2c:39:89:de:15:ca:55:dd:
                    68:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:79:51:A1:3A:C9:06:47:6B:29:E5:73:6A:E7:EB:EF:AD:20:CE:2C
            X509v3 Authority Key Identifier:
                keyid:2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:39:07:94:67:17:e8:f6:cf:12:54:2a:c7:85:c0:7e:ed:ce:
         91:80:b6:ad:17:f3:f5:e8:d4:4e:e6:4a:7d:90:f7:b8:e2:49:
         71:ac:ab:c4:aa:9e:38:de:06:da:16:65:5f:b8:10:59:a2:f5:
         53:b4:75:11:e5:0d:9d:44:37:41:90:09:dd:06:0a:5b:81:3c:
         1e:c9:03:7f:ae:2f:ac:18:32:d9:d9:d4:5f:f5:76:77:0b:eb:
         3a:c8:c6:2c:11:fb:b7:6a:71:40:cf:db:1c:67:c9:95:e2:f3:
         4b:7b:8a:ce:61:d2:83:78:dc:4a:8d:4a:69:ea:db:fc:58:c2:
         e3:1d:6f:1e:65:9d:97:3c:39:b1:2f:a1:c2:5f:b8:36:e7:b3:
         12:2c:99:f8:5a:a0:fe:e2:ac:42:ee:db:12:da:09:8f:aa:58:
         df:90:9a:4b:45:d8:98:3d:dd:27:e8:c2:56:11:8d:08:ad:ba:
         a6:71:1f:d2:2c:24:83:0d:35:54:9d:5f:6a:86:7b:7d:ec:54:
         11:47:6d:87:39:17:5e:6b:00:81:cf:14:a2:6f:5f:c2:ed:81:
         5d:29:f6:6b:ab:95:30:2f:f2:1a:b2:a5:79:76:48:0c:de:5e:
         2f:58:47:8c:34:73:98:51:7e:46:b1:7e:37:72:00:39:d6:c3:
         2f:51:a5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:39:10 2025 by rpki-client