Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
File:                     LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft (raw, json)
Hash identifier:          5kgYOetd65GAgi3CcE2W4XAHETrWPsGrPmYOI8YcYYA=
Subject key identifier:   35:48:33:06:32:27:05:42:9A:69:DE:79:6B:38:1D:2E:05:3B:2A:4F
Authority key identifier: 2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A
Certificate issuer:       /CN=2e6276136254830bb4907e98c258e493b42aaa3a
Certificate serial:       01974A7B247A8787BC3F2AEEB833351C05CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
Manifest number:          14D3
Signing time:             Sat 07 Jun 2025 13:01:13 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:13 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:13 +0000
Files and hashes:         1: LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl (hash: 0bdeBjXfLVwjPzASJLDu2Q/suNivUjP8nJmuwCnz32k=)
                          2: fNli-LiQ9awKyhQw-GNSvJ_42w0.roa (hash: L98lyb6k01PaEjUwasFWjyw8Arv6ILhrmJTj2kl/6vk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:24:7a:87:87:bc:3f:2a:ee:b8:33:35:1c:05:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6276136254830bb4907e98c258e493b42aaa3a
        Validity
            Not Before: Jun  7 13:01:13 2025 GMT
            Not After : Jun  8 13:01:13 2025 GMT
        Subject: CN=35483306322705429a69de796b381d2e053b2a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f2:46:8d:e5:8b:5a:76:8f:f0:a4:8a:c6:79:
                    b6:1b:86:a8:dc:c8:c5:bb:a9:22:e6:5c:28:f7:64:
                    7c:c7:c7:0a:68:15:00:29:fe:34:3f:4d:ae:2e:1d:
                    7e:58:dc:b2:b7:78:25:83:28:43:24:7a:fe:4e:ad:
                    95:88:df:cb:94:93:bc:7a:cd:f4:75:fd:25:89:ea:
                    5b:7c:7c:fc:dd:1a:c4:01:15:6e:30:ef:a9:25:ed:
                    df:68:d5:01:58:93:8b:4a:78:55:72:61:ab:6b:d3:
                    8a:7b:2f:7c:3d:72:ec:5c:da:74:a4:fb:ea:c7:2a:
                    7c:36:d1:bf:bd:ce:de:69:bb:22:78:24:bd:1c:75:
                    30:0f:27:9f:18:53:b8:3b:1f:d2:0e:0e:4f:ec:21:
                    60:a5:ca:c2:7f:6c:61:e3:5c:38:04:a4:a5:2b:d3:
                    22:39:fb:e0:3e:7d:8d:e6:03:33:aa:54:16:23:80:
                    27:2b:30:e1:f7:78:5e:19:43:69:2f:34:e3:5c:e1:
                    41:4e:6b:a1:76:28:47:8c:d2:a7:dc:97:10:4a:d0:
                    14:4c:65:de:7a:d1:8d:b2:d7:96:93:73:80:32:52:
                    cb:a7:80:c5:85:25:3d:ef:76:19:08:74:7c:e4:8b:
                    ae:fb:ec:d6:0a:5e:d0:fc:93:fa:22:93:c7:43:64:
                    7a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:48:33:06:32:27:05:42:9A:69:DE:79:6B:38:1D:2E:05:3B:2A:4F
            X509v3 Authority Key Identifier:
                keyid:2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:4f:39:41:dc:d7:4b:82:86:ce:b6:e4:61:ec:75:b4:2c:f1:
         bb:2b:4e:ad:bc:a8:d9:e2:8f:f8:f1:11:50:13:77:bd:96:97:
         b8:8a:91:05:e8:a2:50:f2:7a:a2:8e:63:b5:af:78:5c:d6:50:
         ae:03:5a:96:fe:9d:46:a7:30:fc:4b:97:0d:76:14:92:c9:ef:
         81:6c:33:8f:3c:95:68:80:98:a8:ff:9a:fe:f6:bd:94:9d:81:
         b5:57:7e:12:a0:d0:e8:91:ba:5f:b7:df:40:a7:76:b1:f4:5c:
         86:3e:c8:ac:26:fe:ad:e6:8e:ec:81:cc:37:3e:f1:7a:fb:72:
         e3:0a:48:f6:c0:63:7c:60:09:c3:15:59:f0:35:f0:e7:56:c3:
         ab:1b:be:f6:f8:a9:1f:b2:7d:9f:9e:16:a8:8b:c2:d6:22:a8:
         4d:23:3f:3f:3a:c1:0c:fd:7b:3a:3e:21:08:69:df:62:1d:0e:
         2b:0a:28:c2:1a:50:a6:13:d5:0b:81:c5:ec:95:73:ff:e7:d5:
         f4:00:ac:a0:ef:dc:57:de:65:99:82:a7:4b:a4:89:27:a4:9c:
         43:14:87:48:0a:5b:4a:59:a5:b4:45:cc:79:fb:c0:a4:e1:71:
         da:c0:8a:e7:bd:e2:85:75:67:f9:65:4c:45:90:9f:11:a3:56:
         6f:45:40:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:10:14 2025 by rpki-client