Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
File:                     LdOuI8tG7pwhlQ78tg3voJS6VUg.mft (raw, json)
Hash identifier:          cITNnZi4/ZKPTEVtufp52RZDiNJWgL9366EMe8TfKus=
Subject key identifier:   4D:ED:F0:49:A4:FB:38:3F:64:DD:E9:F2:D9:67:D1:76:3D:81:5E:09
Authority key identifier: 2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
Certificate issuer:       /CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Certificate serial:       01976A3CB5C726D08B070589308BE5A23756
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
Manifest number:          158E
Signing time:             Fri 13 Jun 2025 17:00:52 +0000
Manifest this update:     Fri 13 Jun 2025 17:00:52 +0000
Manifest next update:     Sat 14 Jun 2025 17:00:52 +0000
Files and hashes:         1: LdOuI8tG7pwhlQ78tg3voJS6VUg.crl (hash: 4DSa9h3PlG5X/PyYySROEjF6n6DyPZv3lQ1kML+bJXc=)
                          2: NR5q24H1ufzbYF2XouLHFu4YVgE.roa (hash: P7YBV+TAXY1ntVvPbNeFWy4DC2dZewmJse8AyIIurOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:3c:b5:c7:26:d0:8b:07:05:89:30:8b:e5:a2:37:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
        Validity
            Not Before: Jun 13 17:00:52 2025 GMT
            Not After : Jun 14 17:00:52 2025 GMT
        Subject: CN=4dedf049a4fb383f64dde9f2d967d1763d815e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6d:e4:fe:c4:c4:46:e1:06:a3:32:0c:ee:69:
                    e2:4a:3f:e3:80:f8:5e:f5:c6:67:52:8c:7b:be:42:
                    a7:0e:e6:98:9f:fa:1f:a2:a3:85:26:e1:23:d6:8d:
                    1e:02:40:42:7e:90:f1:b5:97:4b:26:bb:c9:ca:09:
                    c3:49:76:93:84:9f:52:01:e2:f0:0c:8b:41:a4:53:
                    00:8b:c8:5f:77:aa:7d:4e:d8:53:f6:fe:f3:98:9c:
                    d1:b4:2f:58:cf:ce:53:cf:ac:48:11:cf:62:28:73:
                    bd:dc:85:c9:3f:a8:b3:b3:ae:f8:66:52:59:ea:1e:
                    91:0c:6b:4f:d5:b6:9f:04:de:ba:20:c1:1a:21:11:
                    f3:bf:15:94:0e:5d:fe:ad:23:7d:a8:3c:a9:0a:a8:
                    9f:eb:34:15:8e:eb:e4:6e:6d:e6:82:33:00:c0:8c:
                    4c:b9:5f:17:b1:eb:03:ba:ef:e7:12:08:37:ab:a1:
                    71:43:8e:fe:d8:fc:63:7e:6f:3d:87:df:62:58:e8:
                    5f:7a:29:0f:87:a1:c9:55:02:d5:d3:d1:69:73:4b:
                    71:cb:b0:69:32:d9:3d:c5:50:16:ab:0d:84:28:a1:
                    10:67:6a:e9:f6:8e:0b:18:db:92:02:16:6a:af:47:
                    ec:d4:94:58:ff:0b:36:f2:68:8c:7f:df:38:d3:a4:
                    72:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:ED:F0:49:A4:FB:38:3F:64:DD:E9:F2:D9:67:D1:76:3D:81:5E:09
            X509v3 Authority Key Identifier:
                keyid:2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ca:60:b6:63:44:c8:a9:55:a3:f1:24:f8:a8:cc:bb:d0:30:
         de:60:e2:e3:cd:2f:14:2e:aa:ab:3f:c4:25:08:af:48:2a:1c:
         4a:a4:77:e9:3f:f3:e9:32:ea:39:ae:9f:73:6e:28:fe:fb:0d:
         ad:61:5d:ec:ed:f3:f1:8b:82:a3:f9:c6:80:e8:69:2d:54:fd:
         ee:5e:5e:23:c6:02:14:80:66:be:f4:dc:9d:1c:f3:ca:29:a5:
         37:c4:c8:f9:cc:3e:3e:98:f0:0a:9d:93:9c:09:64:2a:18:2a:
         ab:3f:e8:1d:45:9f:d5:d8:56:9e:d3:2f:ed:78:45:fb:a7:e9:
         18:2f:d8:86:f2:10:1e:d3:e3:f7:c4:e8:a0:8c:b5:b9:0d:ff:
         24:80:65:1d:10:a1:65:d9:ff:c0:ea:e3:d0:95:7e:4c:f9:36:
         1b:a5:e5:48:f4:31:b6:04:bf:0a:be:a5:c4:a2:2e:18:bc:72:
         b7:f7:89:67:f1:77:28:02:11:f0:71:5f:69:97:79:ab:7e:eb:
         12:7e:b6:f1:63:06:f1:71:93:98:37:99:ff:27:31:1b:2b:bc:
         5f:ee:83:ca:1c:33:23:0b:0f:2d:98:44:8f:3a:5c:d8:82:05:
         2d:a4:4e:76:af:fc:e2:a0:3f:d1:bc:95:44:c1:9c:03:59:49:
         d2:3c:7f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 01:54:14 2025 by rpki-client