Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
File:                     LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft (raw, json)
Hash identifier:          5YCgeTpe+pVfMLZSlhjhqLmiFHkORflLHGkP1gckK08=
Subject key identifier:   71:E0:C6:B8:36:6F:91:85:50:AE:57:7C:14:F4:89:19:B0:5B:E2:6E
Authority key identifier: 2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
Certificate issuer:       /CN=2e872826fce02bd9485ef276641d2b584f599b37
Certificate serial:       01974779F69395D04C38ED80D8EFD5128576
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
Manifest number:          01CF
Signing time:             Fri 06 Jun 2025 23:01:04 +0000
Manifest this update:     Fri 06 Jun 2025 23:01:04 +0000
Manifest next update:     Sat 07 Jun 2025 23:01:04 +0000
Files and hashes:         1: LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl (hash: q6a4z0KzbiSYfcwvfu3w2tTeUwoJ9RcAYXCWvzL3nn8=)
                          2: Mzj29HFabYUUzd0b2x71rCWYxpc.roa (hash: CtBd18sCBkrUSbVpakXbp+UYL2hKAze7NhB+GbMH/4U=)
                          3: Sdx0s8uspLK2JEfxE0Zqq-P7qdc.roa (hash: SB/yO/98dSqVsNjGD6z9bUudXfStWVjKdpjSXqLPG2I=)
                          4: VOPfsPLo2qD6WzGvi49ZWNyWRCQ.roa (hash: U4NKV1QaU6X7/z8jYu2ZN8ojJKZniu0yv+LX0DQZ7Lw=)
                          5: sXkk9RexS8Df6sg2xdkc7cVwBT0.roa (hash: EPX6TU1BjJqVBea1HkWMPFI7ngY4YBybKK+v3369Nok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:f6:93:95:d0:4c:38:ed:80:d8:ef:d5:12:85:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e872826fce02bd9485ef276641d2b584f599b37
        Validity
            Not Before: Jun  6 23:01:04 2025 GMT
            Not After : Jun  7 23:01:04 2025 GMT
        Subject: CN=71e0c6b8366f918550ae577c14f48919b05be26e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ab:b5:58:a5:fe:0f:25:22:ab:23:76:60:f8:
                    42:fa:65:2e:29:0c:64:04:97:37:b3:b3:42:41:a5:
                    99:d8:bb:a5:d2:66:29:5f:21:0a:67:9e:58:57:17:
                    09:08:73:e8:2a:dc:c5:41:c8:80:b0:9e:89:d6:d0:
                    d9:16:ea:e9:e2:7e:af:84:4b:a0:3b:13:f7:68:70:
                    dd:9a:b7:ae:59:9b:ba:56:b4:79:32:6a:e2:98:68:
                    80:25:24:32:d1:7d:7e:b7:84:1c:a1:0f:e5:cf:8b:
                    ff:8c:1b:cf:06:32:c9:fa:29:56:68:1f:c6:64:39:
                    ce:05:9b:57:ea:9d:e9:f9:9f:9b:63:99:70:2f:8c:
                    ef:b9:e0:05:c5:3b:b1:f0:60:15:a9:c5:cd:df:b5:
                    68:55:79:eb:35:21:0b:07:6d:1e:85:7b:b5:39:2f:
                    1b:30:6c:23:e5:7a:d5:05:f0:6c:ae:c2:19:7f:71:
                    ee:fe:71:6f:0f:66:30:b8:b4:0f:74:59:f0:2f:7c:
                    36:af:24:1e:f3:9d:2f:91:d2:a0:fc:9b:79:2f:f6:
                    b1:52:1d:13:34:01:c1:72:f8:13:61:c7:c8:d7:ee:
                    29:89:27:99:34:99:02:27:01:fc:23:16:ce:ab:e9:
                    bb:5f:ad:c5:5b:a3:ed:ae:f7:b9:67:28:24:b5:40:
                    61:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E0:C6:B8:36:6F:91:85:50:AE:57:7C:14:F4:89:19:B0:5B:E2:6E
            X509v3 Authority Key Identifier:
                keyid:2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:91:a6:5e:77:5a:f7:1d:6b:41:fb:db:13:a6:ac:14:05:26:
         aa:d1:64:f5:b4:24:fa:02:a2:20:6e:0b:1b:8c:9d:bb:29:b7:
         30:92:e9:59:18:a2:a6:69:a7:3a:33:d3:e1:7a:b3:d7:3f:79:
         96:83:18:1e:77:d0:7f:87:94:fc:af:da:20:5f:de:04:ef:ea:
         f8:72:56:53:2b:5f:c1:0a:fe:4d:68:e3:56:6e:ec:e2:2c:c6:
         24:22:6e:5e:7d:35:76:be:77:dd:68:4b:22:96:10:6e:5f:6f:
         c8:13:12:3c:3b:6b:d0:44:68:a3:0d:63:0f:a1:1d:84:a5:5b:
         d1:72:18:8b:79:c0:eb:11:bb:2d:7e:79:c8:0f:f0:62:cb:67:
         45:c4:ac:a7:ed:d4:10:38:5b:7a:2a:42:1e:f8:67:79:7b:b7:
         9c:49:a6:85:de:55:97:98:b3:e1:f1:66:45:da:63:34:83:87:
         34:e4:c9:f4:bc:d8:f0:ea:d4:5d:c2:7e:b7:63:09:b2:6a:8c:
         aa:2d:20:65:54:af:80:9f:54:66:c6:e0:1f:e8:81:64:50:60:
         e0:50:91:04:97:b5:62:6e:cd:04:a9:47:b8:81:16:fe:26:3d:
         3b:6b:9e:0c:fb:04:c6:b9:7a:87:87:60:bd:d2:15:64:c0:30:
         38:f1:72:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:12:01 2025 by rpki-client