Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
File:                     LENEciZF2iXs47F8eoN2LtQt2lI.mft (raw, json)
Hash identifier:          173FG6D1emMycMebZL2K0mj6KJD4B8sOO+MMBwxUIF8=
Subject key identifier:   EB:C7:F4:88:63:A4:89:01:CB:46:49:D7:6E:FD:E3:2C:A6:04:5F:40
Authority key identifier: 2C:43:44:72:26:45:DA:25:EC:E3:B1:7C:7A:83:76:2E:D4:2D:DA:52
Certificate issuer:       /CN=2c4344722645da25ece3b17c7a83762ed42dda52
Certificate serial:       01974742605297601372FFCD0E1F52257FB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
Manifest number:          157B
Signing time:             Fri 06 Jun 2025 22:00:21 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:21 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:21 +0000
Files and hashes:         1: DNca1fRckrUMFldSKB-cqGf1TK0.roa (hash: kIv065JqVrTE0ajJFMvarA4KoH/TSNsdKoOgfZZUL90=)
                          2: LENEciZF2iXs47F8eoN2LtQt2lI.crl (hash: wRAHGAVc/6uwJfFimi8Z1nukpJ5k6xRHoJJ5IUHFlYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:60:52:97:60:13:72:ff:cd:0e:1f:52:25:7f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c4344722645da25ece3b17c7a83762ed42dda52
        Validity
            Not Before: Jun  6 22:00:21 2025 GMT
            Not After : Jun  7 22:00:21 2025 GMT
        Subject: CN=ebc7f48863a48901cb4649d76efde32ca6045f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ac:a6:d0:c0:c6:8c:2f:a3:48:ae:f2:48:66:
                    4d:e1:64:1d:f6:8d:c7:d5:02:30:a8:1d:b5:15:17:
                    b5:a8:1e:a9:89:ff:e7:38:1c:50:cd:b9:9a:41:f0:
                    89:43:17:d5:3c:a9:92:91:13:41:ea:4e:7d:eb:0a:
                    bc:d1:d7:1a:81:3c:bf:4b:e7:bd:49:94:f5:24:ae:
                    c3:d5:2f:f3:38:11:13:61:72:42:0a:35:d8:81:b6:
                    a7:e3:41:ee:a8:83:86:57:f8:c7:12:dc:14:48:7a:
                    c7:17:8c:2c:2a:1a:cd:60:44:46:5d:63:d6:9c:77:
                    06:c8:bf:14:b8:cb:1b:74:59:d9:90:80:2f:d6:70:
                    85:63:16:87:73:a9:a5:78:97:47:c6:e1:c2:48:7f:
                    3f:d2:53:09:41:73:7e:84:b0:d9:a9:3d:30:f3:f1:
                    f9:ea:28:19:77:b8:d6:6f:3b:2d:46:32:06:40:17:
                    a5:8b:f7:3e:95:0c:07:a4:7b:d0:d3:f7:ad:de:2b:
                    b9:61:a1:ec:d4:b2:63:26:24:19:ff:fb:da:96:6e:
                    08:04:14:a0:0a:ce:47:a1:d4:35:94:d5:80:e6:3e:
                    53:d4:88:e1:ef:bb:f6:fd:3e:60:b7:30:ab:c4:fa:
                    72:2e:d8:d5:cb:64:e3:d8:4d:d2:4c:48:fe:44:7c:
                    11:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C7:F4:88:63:A4:89:01:CB:46:49:D7:6E:FD:E3:2C:A6:04:5F:40
            X509v3 Authority Key Identifier:
                keyid:2C:43:44:72:26:45:DA:25:EC:E3:B1:7C:7A:83:76:2E:D4:2D:DA:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a2:c8:a7:2a:46:05:a9:6d:23:c2:35:f8:54:fc:7b:84:08:
         44:5b:40:a3:7f:ba:7e:4d:6a:72:e9:8d:aa:c2:92:fa:08:83:
         7a:38:2c:3b:1a:0e:be:77:0f:4d:72:54:c3:f9:02:91:51:df:
         e3:8f:94:94:44:51:7f:a2:a5:36:0f:52:4a:97:64:01:bc:63:
         61:19:90:62:33:76:15:e9:55:14:58:5f:22:78:75:a5:49:8c:
         f9:62:ee:f1:31:1f:24:a1:25:49:a5:0b:f6:2e:15:e9:d0:30:
         b8:dd:8d:a3:91:89:df:96:1f:c5:e6:c0:ce:ee:86:69:e0:cc:
         2f:9c:fc:04:b4:1d:17:f6:58:01:b5:82:f3:79:69:be:e2:bf:
         bf:ef:8b:44:01:83:99:02:08:b2:b0:ee:1d:3a:04:68:5e:93:
         c2:16:24:63:a3:fc:29:04:78:b1:8d:b9:98:95:0c:5d:3d:32:
         47:d4:08:1f:83:f4:45:5d:31:d1:b3:50:75:cb:97:fd:72:22:
         85:92:7c:f5:e5:7f:9f:cd:00:c4:9b:86:23:02:22:54:f9:07:
         80:64:7e:93:ed:3e:f6:e2:0d:ca:59:ff:b3:2c:19:da:ca:68:
         75:c7:69:b1:48:68:15:f0:5d:f6:48:08:b5:07:61:d8:a9:20:
         d1:5f:e6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:58:58 2025 by rpki-client