Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
File:                     lwhyRZO0dTF1shSBLPaJGmRfhMU.mft (raw, json)
Hash identifier:          MBHVQbJPYgSiNeL2h6h4au87jKlRQaDMK7LGsSgD1/w=
Subject key identifier:   DB:8A:90:AF:3E:3D:84:9C:69:45:7A:CC:B1:00:68:6E:FA:AF:F9:39
Authority key identifier: 97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5
Certificate issuer:       /CN=9708724593b4753175b214812cf6891a645f84c5
Certificate serial:       01974D44D79DA5C273E8594F7DDC4FDBD1DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
Manifest number:          A4
Signing time:             Sun 08 Jun 2025 02:00:46 +0000
Manifest this update:     Sun 08 Jun 2025 02:00:46 +0000
Manifest next update:     Mon 09 Jun 2025 02:00:46 +0000
Files and hashes:         1: lwhyRZO0dTF1shSBLPaJGmRfhMU.crl (hash: VgZdHAK8CAadOTvTcWXgQ1Csxj+Jjm1qBeqsvjgGc9o=)
                          2: tTnQsLwHNO3gLW3S0MP8mMKmk64.roa (hash: DzDj3u7iBFvq9rklayzZVdsYdkT8c0vWssYs/0kky9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 02:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:44:d7:9d:a5:c2:73:e8:59:4f:7d:dc:4f:db:d1:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9708724593b4753175b214812cf6891a645f84c5
        Validity
            Not Before: Jun  8 02:00:46 2025 GMT
            Not After : Jun  9 02:00:46 2025 GMT
        Subject: CN=db8a90af3e3d849c69457accb100686efaaff939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:27:42:d2:43:c8:f8:7f:7e:27:ad:97:a4:b8:
                    ba:20:30:9c:eb:84:f7:20:7b:6b:2f:64:cd:d1:d1:
                    82:bf:3c:22:32:5d:bb:50:05:9e:89:a4:84:61:eb:
                    66:13:0f:21:80:20:90:1d:39:c3:04:0b:a9:3d:f7:
                    51:4c:83:c7:49:40:3d:4a:de:b6:81:cb:3c:b3:be:
                    36:f1:20:e4:66:bf:84:41:07:38:5b:6c:37:cb:33:
                    41:44:2a:fb:91:8b:46:bf:8f:36:ba:c9:2e:2f:04:
                    73:bf:34:bb:45:37:7c:58:a8:6d:4b:d3:63:74:df:
                    79:26:b8:55:17:83:be:54:ad:6f:0e:d1:be:f0:fa:
                    f9:4c:4a:93:86:61:50:4c:a2:c0:1f:25:70:fe:ec:
                    ca:72:bc:ad:e8:84:17:43:89:bb:03:8a:fe:f2:89:
                    24:d2:03:1b:3b:c5:d7:da:6c:d7:67:06:b3:71:0f:
                    2c:6a:6c:bf:83:c3:70:ba:4d:56:e9:2a:58:b8:f6:
                    1b:d8:be:20:88:78:3d:55:e4:0e:62:13:e9:4e:bc:
                    e6:57:51:aa:55:b7:37:dc:de:05:b9:37:bf:f1:da:
                    3f:5b:03:78:2c:bb:44:60:dd:12:e6:e7:00:bb:c1:
                    69:ba:bd:84:7e:89:d3:fa:32:a9:67:99:bb:0c:15:
                    c4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8A:90:AF:3E:3D:84:9C:69:45:7A:CC:B1:00:68:6E:FA:AF:F9:39
            X509v3 Authority Key Identifier:
                keyid:97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c1:9f:3c:5a:c9:8f:5f:ce:4d:51:fc:cc:aa:0f:fa:fe:6c:
         8e:8e:91:a7:70:7d:8d:d5:af:11:7b:01:82:59:a0:a8:6a:76:
         b7:4a:53:52:b8:4c:09:43:c1:59:0a:d1:2a:37:57:b9:34:f2:
         be:13:9c:19:25:cc:92:fd:32:bf:f6:a8:dc:26:ce:be:e3:18:
         fb:7e:a8:ca:56:8d:b8:06:10:a8:e1:3c:28:a6:cd:6e:41:1b:
         c4:9a:e8:02:ac:bd:02:c6:a9:7a:c4:ff:e0:d7:b6:80:5a:27:
         90:98:e6:85:7a:2a:fb:40:3e:c7:91:e5:c8:25:bb:59:36:34:
         ac:95:e1:a9:18:da:45:00:35:a0:d8:2f:43:62:ff:58:c8:1e:
         a6:db:f1:59:b2:66:25:59:20:36:50:52:0f:98:e1:40:e2:4b:
         e4:92:3a:96:46:68:31:77:d3:2c:ed:1d:3f:24:05:2e:02:65:
         44:e7:e5:48:d4:e6:0b:15:46:7e:50:fd:5a:6f:15:b9:58:a1:
         37:90:8b:9b:b8:42:68:47:57:f2:37:b7:be:8a:ea:7c:68:06:
         cd:00:92:bc:66:fb:a6:ff:fe:62:b1:18:9f:54:5c:7f:39:ef:
         ed:42:ca:f4:eb:f7:78:65:b3:ed:49:57:72:36:c7:2d:91:fa:
         9c:16:b8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:12:10 2025 by rpki-client