Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft
File:                     LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft (raw, json)
Hash identifier:          skpGbAl371AlPAXsdLxlNtqjgGe71HylXVMu/+8F9os=
Subject key identifier:   56:62:36:28:57:B2:FF:05:30:97:96:11:09:3F:C0:0B:13:29:3C:2B
Authority key identifier: 2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44
Certificate issuer:       /CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
Certificate serial:       019749686527C5AF08B44977ADD8A5F72596
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft
Manifest number:          10C4
Signing time:             Sat 07 Jun 2025 08:01:07 +0000
Manifest this update:     Sat 07 Jun 2025 08:01:07 +0000
Manifest next update:     Sun 08 Jun 2025 08:01:07 +0000
Files and hashes:         1: 2zzUP42PSDjYPPlHV41sNEGuQm8.roa (hash: 3WYS30ATIqzOFvG4XYkxeuJlriDYGMdvapCa66rATak=)
                          2: LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl (hash: HlXpDCY0QzxFFMEcIxT2k4Fzo2EkUxkY31lfgp3Kd2o=)
                          3: NXdlMjppFlDgpqvrpd1dUCT0Nd4.roa (hash: vFfItKSvE8cyKCuMsk2TF0b+TYLCK752KcmEvCAy640=)
                          4: a-yoqKKM2_VTyMIpYk7of2SsSkg.roa (hash: tkjvrZdB0sy56VknBMzLGgv8ID+xT8Z3KrJT0me2WLI=)
                          5: g-jIWTGusT1Pd0EzYCYJPlo_V10.roa (hash: rU4QB22UKJ/f6i1fM6bnIKFFo0DzgyOmLtH9gDvBjBM=)
                          6: ru2syxCTFSkcHXzvmaT8k_sSwdE.roa (hash: cb/4JPWzlbHrciybJdWfxGFnExQb99fweCf16u1aJnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:68:65:27:c5:af:08:b4:49:77:ad:d8:a5:f7:25:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
        Validity
            Not Before: Jun  7 08:01:07 2025 GMT
            Not After : Jun  8 08:01:07 2025 GMT
        Subject: CN=5662362857b2ff0530979611093fc00b13293c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:97:b3:0d:d7:b5:d0:7a:e3:12:74:da:67:55:
                    87:7a:e9:36:f7:9c:23:70:1d:bb:3d:53:87:83:f7:
                    c9:e9:36:f2:b6:4d:a2:e5:9f:c4:03:0e:76:bd:9a:
                    78:e1:1b:7f:3b:00:5d:96:8f:ca:ac:07:3e:79:4c:
                    93:64:ba:a0:fa:56:98:1a:a9:36:b3:d7:0b:29:50:
                    65:c9:c7:d5:4f:4a:7f:2d:f3:b0:5f:a9:24:68:fc:
                    fc:f2:f7:eb:d7:cb:16:57:57:5a:ec:60:6c:1e:49:
                    ac:67:95:2c:9b:63:00:b1:3c:d4:a7:fb:db:aa:82:
                    d1:57:13:2e:a4:25:98:de:2f:8a:5c:98:60:b9:61:
                    03:99:4a:e4:f4:64:27:bf:a7:ad:31:fd:90:ba:62:
                    c9:f7:d9:08:e5:c0:d0:50:48:3e:7b:bc:b2:4b:f0:
                    ee:7b:db:b7:66:44:dd:1c:ba:c1:5d:24:27:66:57:
                    dc:10:8c:a8:00:80:ee:ef:f6:44:9c:fb:1a:98:db:
                    80:12:e0:d3:d9:1f:af:c2:55:6d:2b:d6:bc:c0:1d:
                    53:25:1b:e1:09:1c:f8:1e:a2:e6:c2:69:ba:23:84:
                    01:68:75:dd:ba:8e:df:0b:80:28:e3:e6:7b:2d:f3:
                    64:a5:7f:e0:9e:4e:3f:e5:3a:4d:85:11:a9:fc:bc:
                    ce:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:62:36:28:57:B2:FF:05:30:97:96:11:09:3F:C0:0B:13:29:3C:2B
            X509v3 Authority Key Identifier:
                keyid:2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:dc:73:4c:d2:00:a8:a7:f1:67:10:43:25:ff:cb:c1:79:4c:
         60:9e:a6:c6:9c:34:a3:38:88:de:9e:fe:8e:61:48:3d:03:a6:
         12:7c:5a:2c:55:8d:a6:dd:fe:76:05:b1:7f:ff:d8:48:6c:61:
         5b:a7:f1:da:6f:21:c1:2c:5c:53:d7:90:53:76:81:8b:51:11:
         76:1d:18:68:e4:2c:62:88:31:1a:fd:10:0e:25:53:21:56:22:
         74:68:55:cd:3e:6c:df:f9:3b:19:f3:ce:7d:22:43:32:6a:5f:
         2a:84:81:81:f4:e1:8c:f1:ec:1e:04:ad:f1:08:73:b5:86:b3:
         b1:a4:f4:66:9b:26:54:d8:05:b3:0e:57:46:0b:c6:1e:8b:3a:
         0c:5d:5a:9a:a2:bd:60:56:d9:54:47:54:fc:86:c3:df:d8:3b:
         d9:9d:45:28:93:f3:a1:8b:3c:52:65:71:11:5f:c0:50:0c:34:
         47:92:1c:b7:59:9b:33:16:49:f1:dc:76:c2:1f:65:8c:f4:bd:
         7a:c7:76:dd:ee:cf:47:a5:81:96:af:d7:52:ce:01:fa:38:33:
         8c:fd:7a:5f:07:60:d4:81:95:51:b1:5e:35:9e:79:e2:5f:c8:
         e7:b7:68:85:9d:cc:2d:20:9e:eb:25:c8:4a:16:3f:74:8c:82:
         63:30:12:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:09:24 2025 by rpki-client