Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
File:                     LM5dUfp1u7btlipBZu9vhjCgJYE.mft (raw, json)
Hash identifier:          JCS1p/zuBvcDOK3BxdMX5EQKEgjclCt3L0v1e+mbepU=
Subject key identifier:   87:35:61:7F:C8:E2:5D:60:DE:DC:18:95:58:E6:AA:C8:83:BF:44:73
Authority key identifier: 2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81
Certificate issuer:       /CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581
Certificate serial:       019658DD74E38F80642BDCAD603EE72116D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
Manifest number:          119E
Signing time:             Mon 21 Apr 2025 15:00:30 +0000
Manifest this update:     Mon 21 Apr 2025 15:00:30 +0000
Manifest next update:     Tue 22 Apr 2025 15:00:30 +0000
Files and hashes:         1: LM5dUfp1u7btlipBZu9vhjCgJYE.crl (hash: 846X6529FxsxUeWqmfrnCqTcMmVuceK4ziTZutCenc8=)
                          2: gwJ9hMltFlWaOeN-R_fhzG-JI24.roa (hash: wuy2X0I9Yx6e8bAqg0gf/bu0yRoRH3AWoeZNQfjdFoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 13:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:58:dd:74:e3:8f:80:64:2b:dc:ad:60:3e:e7:21:16:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581
        Validity
            Not Before: Apr 21 15:00:30 2025 GMT
            Not After : Apr 22 15:00:30 2025 GMT
        Subject: CN=8735617fc8e25d60dedc189558e6aac883bf4473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c9:ab:96:ad:25:82:51:30:69:80:c4:b2:15:
                    d4:55:a7:9a:d4:eb:ca:2f:46:1c:87:6c:a2:de:7b:
                    34:c8:e9:e9:b1:c4:6f:17:34:fb:e3:c7:b4:ec:f7:
                    d8:d9:d5:a4:fa:72:ff:e6:1d:8b:d8:77:2c:90:21:
                    de:ca:ed:a1:63:69:36:e5:96:c6:e6:1c:f6:c8:6c:
                    04:41:9f:22:8c:f3:a2:33:36:59:21:60:f7:79:30:
                    b5:39:a8:a1:4f:f7:64:ea:93:ca:c7:28:68:86:3d:
                    10:ff:e0:b3:81:de:6c:82:4a:cd:f3:e3:08:59:cd:
                    50:29:2c:3a:45:e0:77:a4:66:7f:02:4c:af:2d:26:
                    27:59:b7:64:f2:da:8a:d8:8f:99:f6:02:18:76:d1:
                    a9:8f:cd:ce:43:f8:60:03:c2:1f:ad:9c:78:93:20:
                    28:a5:7a:d6:11:8f:8d:10:5e:56:86:3d:f2:67:43:
                    ab:b5:84:5c:a0:bc:60:d5:09:ff:1a:f5:9a:42:66:
                    6e:53:fb:7f:80:94:55:76:83:fc:16:11:af:03:64:
                    e7:76:56:41:0f:cf:b4:94:a1:41:37:96:f1:95:1d:
                    9c:b1:e8:d7:1b:b1:ca:e6:f7:f6:a4:3f:57:1d:68:
                    3b:23:8f:c2:58:c4:21:ae:58:11:5e:86:24:dc:2b:
                    61:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:35:61:7F:C8:E2:5D:60:DE:DC:18:95:58:E6:AA:C8:83:BF:44:73
            X509v3 Authority Key Identifier:
                keyid:2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:08:0e:27:1d:73:a2:78:0d:2b:58:0c:b5:85:9d:4a:b4:bd:
         5d:dd:a8:24:95:ae:70:d4:f6:71:a9:21:0e:b4:37:e2:dd:61:
         62:1e:c2:11:b1:9f:b4:e2:b3:f3:28:2a:e7:9c:af:9e:5c:bb:
         8d:0f:d9:0f:d8:12:f7:3f:bc:31:30:37:1d:69:7b:11:b3:da:
         39:be:7b:33:63:6d:29:0c:55:11:b6:9b:ce:93:b6:42:00:c8:
         a4:b9:51:a8:8f:da:05:59:eb:53:4e:bf:12:cf:f1:cc:96:46:
         3f:ac:5f:e7:8e:7d:0a:99:23:b4:58:eb:b9:fb:d5:11:2a:65:
         15:ce:06:28:3e:f7:17:90:cd:8d:f6:1a:6a:17:74:ce:8f:b1:
         ce:88:fa:ed:e7:95:6d:c4:e5:5e:a7:e4:ef:c0:a2:24:bc:c5:
         60:30:ed:30:45:d4:96:18:6e:8c:7d:19:27:45:5f:3f:ca:6f:
         bc:cf:b1:b8:8d:82:ee:0f:6b:5c:5f:22:b8:be:63:25:74:12:
         ca:9c:f9:74:49:b5:54:80:05:a8:e4:93:8e:77:de:8c:f1:45:
         80:b3:41:d7:dc:23:fd:4b:0f:57:e0:bf:2b:dd:fc:45:96:a8:
         2c:bb:2a:33:73:a1:4b:de:8d:29:5e:05:8b:fb:d4:bc:50:44:
         e1:76:b3:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZY3XTjj4BkK9ytYD7nIRbRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjY2U1ZDUxZmE3NWJiYjZlZDk2MmE0MTY2ZWY2Zjg2MzBh
MDI1ODEwHhcNMjUwNDIxMTUwMDMwWhcNMjUwNDIyMTUwMDMwWjAzMTEwLwYDVQQD
Eyg4NzM1NjE3ZmM4ZTI1ZDYwZGVkYzE4OTU1OGU2YWFjODgzYmY0NDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssmrlq0lglEwaYDEshXUVaea1OvK
L0Ych2yi3ns0yOnpscRvFzT748e07PfY2dWk+nL/5h2L2HcskCHeyu2hY2k25ZbG
5hz2yGwEQZ8ijPOiMzZZIWD3eTC1OaihT/dk6pPKxyhohj0Q/+Czgd5sgkrN8+MI
Wc1QKSw6ReB3pGZ/AkyvLSYnWbdk8tqK2I+Z9gIYdtGpj83OQ/hgA8IfrZx4kyAo
pXrWEY+NEF5Whj3yZ0OrtYRcoLxg1Qn/GvWaQmZuU/t/gJRVdoP8FhGvA2TndlZB
D8+0lKFBN5bxlR2csejXG7HK5vf2pD9XHWg7I4/CWMQhrlgRXoYk3CthZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIc1YX/I4l1g3twYlVjmqsiDv0RzMB8GA1UdIwQY
MBaAFCzOXVH6dbu27ZYqQWbvb4YwoCWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE01ZFVmcDF1N2J0bGlwQlp1OXZoakNnSllFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yYjVlZDYtM2E3Yy00NjMxLWI0OWQt
YmY1NWI4YjE2NjljLzEvTE01ZFVmcDF1N2J0bGlwQlp1OXZoakNnSllFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8yYjVlZDYtM2E3Yy00NjMxLWI0OWQtYmY1NWI4YjE2Njlj
LzEvTE01ZFVmcDF1N2J0bGlwQlp1OXZoakNnSllFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqAgOJx1z
ongNK1gMtYWdSrS9Xd2oJJWucNT2cakhDrQ34t1hYh7CEbGftOKz8ygq55yvnly7
jQ/ZD9gS9z+8MTA3HWl7EbPaOb57M2NtKQxVEbabzpO2QgDIpLlRqI/aBVnrU06/
Es/xzJZGP6xf5459CpkjtFjrufvVESplFc4GKD73F5DNjfYaahd0zo+xzoj67eeV
bcTlXqfk78CiJLzFYDDtMEXUlhhujH0ZJ0VfP8pvvM+xuI2C7g9rXF8iuL5jJXQS
ypz5dEm1VIAFqOSTjnfejPFFgLNB19wj/UsPV+C/K938RZaoLLsqM3OhS96NKV4F
i/vUvFBE4Xazow==
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:21:33 2025 by rpki-client