Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
File:                     LysmxVJWMAYhPP5IFKncKg_Bb0M.mft (raw, json)
Hash identifier:          VKOqVfKF6rmdLFqmjm06ULrXQvqa1Nv3Onb220ozSbQ=
Subject key identifier:   E4:FE:3E:5D:79:CB:18:A6:04:37:4B:41:4C:D7:36:31:72:D8:45:66
Authority key identifier: 2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
Certificate issuer:       /CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Certificate serial:       01974A43CFC789678DE4132996D2E8836000
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
Manifest number:          077B
Signing time:             Sat 07 Jun 2025 12:00:47 +0000
Manifest this update:     Sat 07 Jun 2025 12:00:47 +0000
Manifest next update:     Sun 08 Jun 2025 12:00:47 +0000
Files and hashes:         1: LysmxVJWMAYhPP5IFKncKg_Bb0M.crl (hash: G1yIpPEKX27dai/wMtUN9QvBRMI0b+JFS2w3Lbe42po=)
                          2: W6QOjqpakncZ5btUn_LFYWHRhQI.roa (hash: 0Tpx1buqzp+SVfsKSz/Tn137XUEd3v/VStC3KMX88hA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:43:cf:c7:89:67:8d:e4:13:29:96:d2:e8:83:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
        Validity
            Not Before: Jun  7 12:00:47 2025 GMT
            Not After : Jun  8 12:00:47 2025 GMT
        Subject: CN=e4fe3e5d79cb18a604374b414cd7363172d84566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ef:9c:1f:96:78:e3:5e:19:5d:32:83:e8:45:
                    49:2e:80:27:e9:c8:12:1d:08:e1:26:be:22:56:35:
                    7f:af:6a:15:cb:4c:cd:15:31:fb:87:ae:81:1c:71:
                    89:31:e0:ac:30:a0:ca:47:3f:e5:5f:fe:be:38:6b:
                    65:de:0b:b9:79:f9:2a:eb:66:b0:f2:53:8d:bc:dd:
                    a5:af:5c:4f:ae:a8:b9:7e:0e:e4:f2:a6:d6:6b:73:
                    23:35:db:b7:e3:22:be:04:24:d0:40:c0:90:a1:5e:
                    93:b1:e7:91:7e:74:eb:4a:ed:36:4c:c9:0a:6e:49:
                    8c:d2:ca:83:dc:c1:d0:75:2a:b4:57:ec:4e:61:16:
                    60:f2:ef:ac:3a:0a:0a:df:22:cc:0e:ba:79:3d:a0:
                    22:5d:8e:07:e0:fe:b0:90:09:c3:e0:47:bf:fc:84:
                    74:28:72:1f:5d:df:aa:d9:2b:e0:f3:a0:b8:43:dc:
                    c1:87:ad:d7:bf:50:6c:89:d3:98:2a:c5:74:2e:f1:
                    b6:69:64:95:83:93:57:3f:24:43:21:b1:d9:17:e6:
                    4d:68:71:28:85:36:6a:a9:b9:94:97:1d:87:ff:cd:
                    f2:5e:ea:60:b8:c2:33:8b:b9:fa:fa:24:4f:0b:59:
                    69:df:76:a9:a5:fd:8b:f2:4f:17:35:2d:87:ac:68:
                    e3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FE:3E:5D:79:CB:18:A6:04:37:4B:41:4C:D7:36:31:72:D8:45:66
            X509v3 Authority Key Identifier:
                keyid:2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:1a:05:b2:61:02:ee:21:99:3f:7d:3a:14:e3:e1:c8:41:0a:
         32:e5:05:c4:dd:f2:97:af:94:92:ff:94:95:3a:c7:ca:28:d9:
         4c:47:4f:7b:34:f1:3a:a0:9c:9a:c1:54:5e:73:65:2d:ee:eb:
         19:b3:6d:f1:0e:a8:8b:84:b2:6d:7d:48:8a:c2:02:65:5b:ab:
         08:21:48:e1:c6:70:86:d8:5f:9f:34:e8:9a:40:a7:da:eb:8e:
         33:68:2b:c5:f2:c7:9e:8c:3a:74:d6:3e:8c:38:aa:bb:c7:22:
         af:78:38:09:4e:58:bb:00:b3:bc:75:04:d5:14:ac:fc:e9:61:
         b1:0d:db:0a:69:3a:75:ed:8d:43:b7:ca:cc:a7:f6:09:69:c8:
         ba:7e:8b:f8:73:f7:da:85:9f:88:0b:f4:aa:dd:bb:e5:4c:7e:
         85:06:5d:96:fe:f6:0b:3c:4a:79:7a:7a:51:50:59:94:06:0c:
         54:5a:01:bf:e6:92:ca:c2:3b:9d:81:ab:5f:83:94:6e:c5:bc:
         c6:f0:55:96:b9:85:7c:6f:13:dd:58:d8:76:7f:98:3c:34:52:
         36:4d:4e:19:39:4a:4a:ee:cd:cc:f8:d0:83:a3:30:6b:56:c8:
         a2:91:e0:18:73:4e:3c:20:9c:95:f9:66:7b:c0:8e:91:46:dd:
         70:34:6a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:48:40 2025 by rpki-client