Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
File:                     LD4cA--i8tn_-dvsMyW8bDdpQlA.mft (raw, json)
Hash identifier:          fYhLSnO8mLTDnZVfSn/XgzflWwhBFlv7TcM8jvFqfrU=
Subject key identifier:   B0:35:5B:79:A2:51:EF:20:B5:83:15:07:C6:46:5C:5F:19:C0:DC:B6
Authority key identifier: 2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
Certificate issuer:       /CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Certificate serial:       0197462FCDE7375D1123DA0C6615DD771D10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
Manifest number:          12C6
Signing time:             Fri 06 Jun 2025 17:00:27 +0000
Manifest this update:     Fri 06 Jun 2025 17:00:27 +0000
Manifest next update:     Sat 07 Jun 2025 17:00:27 +0000
Files and hashes:         1: LD4cA--i8tn_-dvsMyW8bDdpQlA.crl (hash: jJozdKmjic042xg+TMtqBFV1BfELs8LhPfka4Y7VnUU=)
                          2: P00v87nrou1jHf3IyWsCvn49wIw.roa (hash: 7G/m2+VXvGbn3QbXJwae3mt6bGUijMD8TCCAhr6uALc=)
                          3: SKVsL0dFPC8nQ8E0Sar1SVELQ-4.roa (hash: Wd6r5Q9d5JNbBO/CAcgZ9Q9+GeT6Xu5kC1/o/UnS0tI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:2f:cd:e7:37:5d:11:23:da:0c:66:15:dd:77:1d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
        Validity
            Not Before: Jun  6 17:00:27 2025 GMT
            Not After : Jun  7 17:00:27 2025 GMT
        Subject: CN=b0355b79a251ef20b5831507c6465c5f19c0dcb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6f:a8:92:59:3b:f8:d1:cd:0f:5b:8e:fe:3a:
                    02:a9:87:59:c5:74:a8:5b:63:37:09:b5:3b:50:a8:
                    7e:f1:e6:ab:ec:f5:c8:93:c9:2a:cc:06:8b:4c:92:
                    fd:12:49:9e:89:20:f1:d5:33:14:f8:13:3a:d6:4f:
                    10:da:78:da:18:20:67:31:83:9c:22:7f:4d:c2:43:
                    f2:9f:b6:18:24:b4:16:82:7e:df:79:c6:71:a7:79:
                    39:9a:00:e0:67:4a:aa:d7:29:ae:e2:be:cc:04:26:
                    c0:58:95:b7:eb:c3:b7:88:62:fe:b7:4c:6c:10:b6:
                    0d:12:73:48:1a:c5:e1:f1:31:88:5f:66:21:db:25:
                    aa:5e:41:0c:48:47:25:62:56:d3:85:95:b3:ab:5a:
                    51:19:2a:4e:a0:75:04:4b:49:d3:26:9b:8b:94:57:
                    c2:d9:dd:74:5f:ba:e3:3a:54:51:93:c6:fb:e1:39:
                    0c:59:b5:81:ae:ec:29:58:2c:8d:f9:84:78:27:50:
                    70:27:b9:f0:2b:39:01:a1:00:dc:2c:4f:23:61:b7:
                    47:6b:b0:a7:32:83:ec:1f:13:64:45:79:ca:c5:f2:
                    d2:1a:9c:30:7d:04:c0:09:ab:0b:39:44:8f:d4:f4:
                    df:11:1b:d2:33:04:b8:b5:b5:9f:cd:bb:40:56:4f:
                    a8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:35:5B:79:A2:51:EF:20:B5:83:15:07:C6:46:5C:5F:19:C0:DC:B6
            X509v3 Authority Key Identifier:
                keyid:2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:8d:fd:04:c9:42:54:9d:48:31:bc:97:84:0d:ed:c0:82:fc:
         67:74:53:5c:e1:b0:dc:77:3f:06:f3:1b:de:1c:37:4c:91:2b:
         19:02:33:96:a9:85:4d:7f:9b:49:45:1a:6f:05:33:23:50:60:
         a3:9d:64:4e:9e:9f:c6:67:e5:90:a2:fc:95:90:22:57:39:aa:
         c8:6f:5f:40:77:f8:4f:22:08:c3:b5:2d:e4:56:5f:a8:23:de:
         e0:27:da:27:1a:70:2f:c4:20:68:b5:00:77:60:83:86:11:c9:
         b9:0f:49:45:44:69:48:c9:28:40:a4:37:8b:18:81:71:dd:6e:
         4e:f6:99:7e:a3:03:95:7e:53:f1:bf:d6:5b:42:8b:71:af:04:
         05:99:fe:03:c5:0a:3c:e7:df:f1:d4:86:bc:95:64:e1:fe:fc:
         73:d8:13:fc:59:7d:ca:c4:a2:78:02:bf:95:95:ac:97:80:75:
         8f:00:a1:54:0a:48:99:de:ee:ef:c2:25:9d:5c:5c:6b:c8:6e:
         59:13:8f:e0:d0:29:4e:cc:f6:cd:19:b6:70:aa:bd:7f:d2:7b:
         7b:47:f0:cf:c6:d4:4f:85:34:40:c7:bf:d6:1b:60:8b:08:88:
         e6:39:aa:e9:e2:73:27:57:3c:6d:32:55:db:66:ed:a3:8f:6b:
         42:a4:ce:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:45 2025 by rpki-client