Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
File:                     LjC09SIqRoXFTNJcTLjW-TIzrHs.mft (raw, json)
Hash identifier:          of14SwsIPbmrc3R8ffT/fFaTVEb+CS5FlxHDXMxOJjQ=
Subject key identifier:   2A:8A:D0:E6:48:EE:24:45:4F:CA:FB:E6:C4:11:4B:09:B8:6A:3D:B1
Authority key identifier: 2E:30:B4:F5:22:2A:46:85:C5:4C:D2:5C:4C:B8:D6:F9:32:33:AC:7B
Certificate issuer:       /CN=2e30b4f5222a4685c54cd25c4cb8d6f93233ac7b
Certificate serial:       01974D7BBD91B1FC90812235CDD1DEB71A1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
Manifest number:          02E9
Signing time:             Sun 08 Jun 2025 03:00:44 +0000
Manifest this update:     Sun 08 Jun 2025 03:00:44 +0000
Manifest next update:     Mon 09 Jun 2025 03:00:44 +0000
Files and hashes:         1: LjC09SIqRoXFTNJcTLjW-TIzrHs.crl (hash: 27WfuAvFOvkbE9IwEAh6lL/geW34cubfP3G5pyQUekA=)
                          2: tUeDOLxh54YzVxv0XUKXGVzFhsg.roa (hash: guDk4R7GTLiv83MGpogrsbl+v0V3XO0MlUq9mf/rxx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7b:bd:91:b1:fc:90:81:22:35:cd:d1:de:b7:1a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e30b4f5222a4685c54cd25c4cb8d6f93233ac7b
        Validity
            Not Before: Jun  8 03:00:44 2025 GMT
            Not After : Jun  9 03:00:44 2025 GMT
        Subject: CN=2a8ad0e648ee24454fcafbe6c4114b09b86a3db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:af:81:90:e5:28:6c:76:68:94:58:09:59:ee:
                    30:4d:14:d9:e3:4d:a8:60:05:98:24:33:59:92:ea:
                    73:2b:e3:c6:3d:61:5b:f2:20:2d:bd:20:40:fa:b7:
                    8f:b9:b1:b9:83:28:57:cb:cd:fd:30:28:c1:a4:56:
                    62:67:de:1d:84:6f:5a:98:92:4f:db:ca:c2:7f:82:
                    c1:31:fc:02:26:d9:b0:e3:e2:d6:12:90:c1:15:36:
                    e6:b2:0f:b7:9b:87:70:11:79:31:d5:aa:7c:7b:0a:
                    02:f9:42:01:87:af:dd:3c:f6:aa:c7:47:67:f9:f8:
                    06:ca:cb:2b:4d:5d:d4:ca:6a:47:70:99:a5:e2:f8:
                    9f:5e:7b:3f:ea:c1:fa:33:39:9f:ac:40:4d:78:d2:
                    f1:0c:c3:6a:48:d1:d8:9c:3c:7e:c3:3b:91:00:9d:
                    9d:c0:0d:33:b5:03:bf:57:c9:17:37:55:cb:f9:5e:
                    e3:3a:86:ab:73:00:6f:d3:c3:6d:75:b9:c7:e8:81:
                    47:2c:0b:55:b6:ea:f9:dc:ec:52:08:34:13:dc:97:
                    35:da:37:6a:bb:70:8b:82:a3:16:62:ac:0a:99:aa:
                    88:98:4a:d2:5a:23:01:97:5c:c5:3c:0a:69:e0:10:
                    b1:a1:99:44:67:1b:9f:4a:2f:58:48:8d:eb:20:41:
                    7a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8A:D0:E6:48:EE:24:45:4F:CA:FB:E6:C4:11:4B:09:B8:6A:3D:B1
            X509v3 Authority Key Identifier:
                keyid:2E:30:B4:F5:22:2A:46:85:C5:4C:D2:5C:4C:B8:D6:F9:32:33:AC:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:38:18:30:63:6e:f4:36:d7:30:9b:e3:bb:a8:6f:d1:7f:02:
         78:f1:42:f9:86:fc:de:ad:2c:e5:80:ca:6a:da:ea:49:93:fb:
         72:be:77:9e:d9:99:ff:04:40:87:ae:1f:c7:66:88:7f:d9:21:
         2c:81:35:85:1d:d7:17:54:f4:41:c2:08:cc:f1:1f:d3:0d:1e:
         79:d8:18:86:b4:c7:7e:f0:73:32:1c:e1:82:1d:31:b4:cb:8e:
         f5:50:39:ff:16:51:a6:8f:44:d4:54:9a:b5:ba:08:32:9d:38:
         e0:fc:76:b0:f2:94:c8:b2:3f:c2:19:77:86:52:07:e7:b9:38:
         71:d0:98:6c:d0:e9:8d:92:4a:d5:18:a1:eb:47:39:33:02:f1:
         b1:17:c8:e9:c8:85:1c:ec:fe:9c:18:65:1a:d1:da:c2:70:e6:
         01:1a:71:72:17:d2:3a:19:03:c5:39:ff:67:38:b8:e2:ee:8e:
         f0:4b:de:53:09:eb:76:62:e9:f2:c3:29:ed:45:60:c9:5a:88:
         62:b7:f9:e5:6e:98:f9:0a:e8:96:1a:d0:4d:e4:df:c4:8a:3c:
         2c:66:c5:d6:e1:3c:b1:08:69:61:73:78:79:f1:25:1e:1f:62:
         bc:c6:c9:09:03:dd:30:52:f2:61:c4:eb:3c:39:02:ef:f7:d3:
         a7:22:e0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:14:27 2025 by rpki-client