Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
File:                     LTOrAnhiOJzMHx_IsKVkpuvXy40.mft (raw, json)
Hash identifier:          Q1/JT4qvcXdUz0M19ujoRLkPS6wTvQGBLPmX1n2hUGA=
Subject key identifier:   A4:E4:05:CA:F9:92:47:88:61:D0:CE:DB:5F:58:96:56:7E:F2:53:D9
Authority key identifier: 2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
Certificate issuer:       /CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Certificate serial:       01975F143962D03967B7115D88238EF333AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
Manifest number:          0820
Signing time:             Wed 11 Jun 2025 13:00:50 +0000
Manifest this update:     Wed 11 Jun 2025 13:00:50 +0000
Manifest next update:     Thu 12 Jun 2025 13:00:50 +0000
Files and hashes:         1: LTOrAnhiOJzMHx_IsKVkpuvXy40.crl (hash: CSLcN/pSutpGlCLiYwEkb753nBkDrXn4iEVSfgm019k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:14:39:62:d0:39:67:b7:11:5d:88:23:8e:f3:33:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
        Validity
            Not Before: Jun 11 13:00:50 2025 GMT
            Not After : Jun 12 13:00:50 2025 GMT
        Subject: CN=a4e405caf992478861d0cedb5f5896567ef253d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4a:37:bb:7c:bf:1c:53:8d:c9:4d:df:c8:33:
                    d6:83:34:aa:4b:c7:ce:22:59:85:c2:e7:0e:b3:27:
                    76:83:e1:af:8c:13:ce:13:27:bf:5b:0a:5d:d4:91:
                    f2:96:ce:85:52:4b:69:b0:62:9b:04:77:a2:76:d5:
                    c1:98:5f:eb:38:4c:f7:3a:2f:8b:bb:53:9c:af:03:
                    4d:ab:76:40:ee:a6:1d:fd:32:70:4e:ca:13:54:5a:
                    2c:c4:69:e8:cc:f9:6d:77:a3:f7:d6:68:ba:8b:b0:
                    5e:8b:c4:7e:ba:0c:1e:e0:3a:c0:bf:71:e5:46:99:
                    da:da:03:f5:05:8e:fe:55:23:a7:e1:71:15:15:f7:
                    dd:eb:04:1d:fa:07:12:26:50:7d:d1:9f:d3:ce:57:
                    f3:07:a2:fa:d5:8e:44:06:32:a4:5b:f7:7c:6b:4b:
                    36:3d:cc:e2:c0:6c:43:d4:6d:8c:5e:70:29:15:61:
                    14:d8:81:83:53:5c:79:e4:8a:55:af:09:96:b6:5d:
                    78:ac:ad:f4:da:6e:c9:61:ac:65:f5:a3:8c:ce:9e:
                    6a:ef:3f:50:fc:88:d6:1f:0d:75:1c:70:87:30:2b:
                    c8:62:7f:a0:36:21:c7:e6:4f:4a:b8:e7:bf:03:0e:
                    f2:22:01:11:d4:5f:d0:21:c3:6d:c3:32:7a:6d:c9:
                    fe:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E4:05:CA:F9:92:47:88:61:D0:CE:DB:5F:58:96:56:7E:F2:53:D9
            X509v3 Authority Key Identifier:
                keyid:2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:67:c3:a1:f9:29:48:90:c6:06:86:b6:d8:af:7c:28:d4:b7:
         81:05:5c:51:24:83:ca:58:74:ef:10:89:04:d8:fe:84:aa:6d:
         92:9e:1a:b6:72:ca:fd:82:71:1b:66:79:b7:07:e4:35:70:47:
         a4:36:a5:4a:88:8e:be:86:52:ab:9c:d2:63:9e:a3:9a:c2:3c:
         0c:45:e5:e9:b9:f9:bc:8d:05:33:a7:1a:0e:dd:8a:a5:ec:1b:
         52:41:8a:24:1a:af:e8:0c:e6:74:0f:ba:35:25:95:0f:13:45:
         48:8a:1a:6f:ef:f7:30:b7:d3:4c:ae:c1:34:ed:bc:47:ad:05:
         5b:1f:0c:79:a0:ae:55:04:9a:96:a8:ef:b5:e3:82:72:7c:57:
         10:9b:f8:23:23:e9:57:05:ad:c4:8a:4c:1d:55:08:61:41:c9:
         fe:c6:1a:24:88:1a:5f:07:8d:e7:13:2c:9d:f1:66:f1:d3:08:
         cd:c8:51:70:a9:24:87:05:7b:99:91:c1:27:21:df:04:e2:1b:
         76:d1:75:ee:53:81:32:45:8f:9e:f1:2a:cf:ab:59:32:dd:e4:
         ac:71:9c:e6:90:15:57:5b:96:f9:c6:e4:2a:55:83:fc:f1:b8:
         08:3f:f7:00:c8:9b:aa:29:31:d6:56:33:86:0e:f8:c7:02:ff:
         a6:01:fd:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdfFDli0DlntxFdiCOO8zOvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMzNhYjAyNzg2MjM4OWNjYzFmMWZjOGIwYTU2NGE2ZWJk
N2NiOGQwHhcNMjUwNjExMTMwMDUwWhcNMjUwNjEyMTMwMDUwWjAzMTEwLwYDVQQD
EyhhNGU0MDVjYWY5OTI0Nzg4NjFkMGNlZGI1ZjU4OTY1NjdlZjI1M2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ko3u3y/HFONyU3fyDPWgzSqS8fO
IlmFwucOsyd2g+GvjBPOEye/Wwpd1JHyls6FUktpsGKbBHeidtXBmF/rOEz3Oi+L
u1OcrwNNq3ZA7qYd/TJwTsoTVFosxGnozPltd6P31mi6i7Bei8R+ugwe4DrAv3Hl
Rpna2gP1BY7+VSOn4XEVFffd6wQd+gcSJlB90Z/TzlfzB6L61Y5EBjKkW/d8a0s2
PcziwGxD1G2MXnApFWEU2IGDU1x55IpVrwmWtl14rK302m7JYaxl9aOMzp5q7z9Q
/IjWHw11HHCHMCvIYn+gNiHH5k9KuOe/Aw7yIgER1F/QIcNtwzJ6bcn+EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTkBcr5kkeIYdDO219YllZ+8lPZMB8GA1UdIwQY
MBaAFC0zqwJ4YjiczB8fyLClZKbr18uNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFRPckFuaGlPSnpNSHhfSXNLVmtwdXZYeTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi83YTYzODEtOGNhNC00MDQ1LWI4Mzct
MzAxZmRmMTE0ODQwLzEvTFRPckFuaGlPSnpNSHhfSXNLVmtwdXZYeTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi83YTYzODEtOGNhNC00MDQ1LWI4MzctMzAxZmRmMTE0ODQw
LzEvTFRPckFuaGlPSnpNSHhfSXNLVmtwdXZYeTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsWfDofkp
SJDGBoa22K98KNS3gQVcUSSDylh07xCJBNj+hKptkp4atnLK/YJxG2Z5twfkNXBH
pDalSoiOvoZSq5zSY56jmsI8DEXl6bn5vI0FM6caDt2KpewbUkGKJBqv6AzmdA+6
NSWVDxNFSIoab+/3MLfTTK7BNO28R60FWx8MeaCuVQSalqjvteOCcnxXEJv4IyPp
VwWtxIpMHVUIYUHJ/sYaJIgaXweN5xMsnfFm8dMIzchRcKkkhwV7mZHBJyHfBOIb
dtF17lOBMkWPnvEqz6tZMt3krHGc5pAVV1uW+cbkKlWD/PG4CD/3AMibqikx1lYz
hg74xwL/pgH9HA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 20:43:36 2025 by rpki-client