Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
File:                     ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json)
Hash identifier:          57W8prNn854qaxgxob2g1LqXs9xQHbcpJQyh8SZs7Z0=
Subject key identifier:   D5:19:4A:48:A6:6A:00:A8:5B:EF:FA:76:5D:8C:15:D2:A6:9C:09:03
Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
Certificate issuer:       /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Certificate serial:       019748C3586063FE072178ECF5D3CAFEC797
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
Manifest number:          08E5
Signing time:             Sat 07 Jun 2025 05:00:50 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:50 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:50 +0000
Files and hashes:         1: HmN4gqQ32E9Rqx-4t1qedvdMoH4.roa (hash: LX7NEJ+NlRiJfL2YQ6zxCjTe/Dn2kPvQcp14my1Cmso=)
                          2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: crBHXnOZ7hU/e0bBWBZU1INuRuiYslWyE5nGDgHVwsQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:58:60:63:fe:07:21:78:ec:f5:d3:ca:fe:c7:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
        Validity
            Not Before: Jun  7 05:00:50 2025 GMT
            Not After : Jun  8 05:00:50 2025 GMT
        Subject: CN=d5194a48a66a00a85beffa765d8c15d2a69c0903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:08:3f:81:c1:c7:bf:d8:de:c6:9f:e8:3b:b9:
                    c2:b7:c8:87:fc:bf:e7:05:aa:0c:37:21:68:42:2c:
                    47:19:4f:de:59:4f:bf:a7:ac:bf:3e:e4:d6:57:f3:
                    e1:d6:31:c1:d0:4b:4f:a4:47:04:d6:0a:bc:d7:91:
                    ec:a4:a5:1f:96:d6:93:bf:cb:8a:d2:30:af:1b:55:
                    76:4b:02:2b:41:ef:6a:e8:f1:2f:40:90:f9:7b:e6:
                    3b:ab:2c:76:03:56:59:3e:4c:ec:a6:47:99:66:5b:
                    a5:60:b0:d6:e1:db:63:89:79:f3:00:44:5b:5a:dc:
                    4c:85:c3:40:c6:86:74:96:ec:7a:7c:be:5f:7e:87:
                    8e:32:e1:a0:8b:cb:69:9c:88:26:09:f6:48:75:ad:
                    27:59:b9:5d:8e:ac:a6:93:48:2e:c4:e7:2f:d5:ba:
                    ed:0b:f0:76:77:09:87:13:48:b9:45:fa:8b:02:4a:
                    1f:25:4e:52:22:cc:22:c5:38:e3:1e:98:76:a4:f3:
                    e9:d5:17:33:ee:fe:f8:d9:b8:91:05:7e:38:31:b7:
                    24:d5:38:01:59:d9:d4:39:17:b2:ce:a2:73:d9:1d:
                    d9:15:b3:36:54:22:bf:66:4d:f8:79:fc:1f:a5:df:
                    38:05:b8:c3:a1:64:34:ba:99:55:0e:90:68:4b:cb:
                    e9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:19:4A:48:A6:6A:00:A8:5B:EF:FA:76:5D:8C:15:D2:A6:9C:09:03
            X509v3 Authority Key Identifier:
                keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:7a:b8:52:14:ad:29:34:3c:65:9d:23:ab:6e:a8:69:7f:e2:
         02:57:6c:38:60:92:79:63:d7:0e:3b:49:08:32:e0:86:dc:53:
         77:b8:20:52:19:1c:d5:77:c1:58:1a:79:9b:74:25:4f:6c:1b:
         5e:ae:1b:35:f7:a9:55:07:8a:86:0b:07:19:69:8f:70:14:32:
         b7:43:0d:94:da:02:d8:64:04:a8:56:b9:58:ff:b6:cf:6e:5a:
         ff:3c:19:56:78:86:37:a2:14:08:46:2c:20:73:43:e5:83:12:
         47:ae:05:f7:9a:10:b7:06:5d:31:17:51:d1:db:8d:0b:26:16:
         ca:a1:8c:28:88:20:c2:e7:03:40:66:4f:9b:bd:ac:d0:fa:01:
         e9:97:58:6f:9d:f3:cb:a6:24:2c:7b:fd:19:24:66:30:48:e8:
         5a:03:34:44:88:31:bb:06:19:3d:a8:09:3d:fe:22:b2:15:f0:
         98:f6:89:b7:f5:e3:db:46:4f:06:09:24:07:c0:ef:3b:5d:00:
         68:58:1d:10:c0:1a:cd:58:d9:d5:92:b4:1c:97:5e:11:a1:72:
         dd:d5:94:96:92:65:6c:a1:10:18:41:d0:3b:74:5b:f9:5a:23:
         39:20:70:86:70:c1:89:38:20:dd:e7:bc:cc:9c:5e:df:06:6e:
         c9:c0:a6:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIw1hgY/4HIXjs9dPK/seXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZDk1ZmUyZDkwOTQzYzkyZjZjMjhmM2IzMjlmODIwMTVj
ZDkyYWUwHhcNMjUwNjA3MDUwMDUwWhcNMjUwNjA4MDUwMDUwWjAzMTEwLwYDVQQD
EyhkNTE5NGE0OGE2NmEwMGE4NWJlZmZhNzY1ZDhjMTVkMmE2OWMwOTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAg/gcHHv9jexp/oO7nCt8iH/L/n
BaoMNyFoQixHGU/eWU+/p6y/PuTWV/Ph1jHB0EtPpEcE1gq815HspKUfltaTv8uK
0jCvG1V2SwIrQe9q6PEvQJD5e+Y7qyx2A1ZZPkzspkeZZlulYLDW4dtjiXnzAERb
WtxMhcNAxoZ0lux6fL5ffoeOMuGgi8tpnIgmCfZIda0nWbldjqymk0guxOcv1brt
C/B2dwmHE0i5RfqLAkofJU5SIswixTjjHph2pPPp1Rcz7v742biRBX44Mbck1TgB
WdnUOReyzqJz2R3ZFbM2VCK/Zk34efwfpd84BbjDoWQ0uplVDpBoS8vp6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUZSkimagCoW+/6dl2MFdKmnAkDMB8GA1UdIwQY
MBaAFJbZX+LZCUPJL2wo87Mp+CAVzZKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHRsZjR0a0pROGt2YkNqenN5bjRJQlhOa3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zMmNjMjctOTQ0OC00MzdiLTk3MjIt
ZGM5YjljNjAxM2Y2LzEvbHRsZjR0a0pROGt2YkNqenN5bjRJQlhOa3E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8zMmNjMjctOTQ0OC00MzdiLTk3MjItZGM5YjljNjAxM2Y2
LzEvbHRsZjR0a0pROGt2YkNqenN5bjRJQlhOa3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAunq4UhSt
KTQ8ZZ0jq26oaX/iAldsOGCSeWPXDjtJCDLghtxTd7ggUhkc1XfBWBp5m3QlT2wb
Xq4bNfepVQeKhgsHGWmPcBQyt0MNlNoC2GQEqFa5WP+2z25a/zwZVniGN6IUCEYs
IHND5YMSR64F95oQtwZdMRdR0duNCyYWyqGMKIggwucDQGZPm72s0PoB6ZdYb53z
y6YkLHv9GSRmMEjoWgM0RIgxuwYZPagJPf4ishXwmPaJt/Xj20ZPBgkkB8DvO10A
aFgdEMAazVjZ1ZK0HJdeEaFy3dWUlpJlbKEQGEHQO3Rb+VojOSBwhnDBiTgg3ee8
zJxe3wZuycCmoQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:04:26 2025 by rpki-client