Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
File:                     lPNHF_8y_ix2RK610O6iMBYX8SQ.mft (raw, json)
Hash identifier:          rRbbQxg+9UeNry80eR4vPoYZVjkQG+IiZrdP0JKRkcQ=
Subject key identifier:   A2:D4:D8:00:3F:46:E1:F4:13:36:A3:0B:07:B8:33:9D:C9:90:4D:57
Authority key identifier: 94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
Certificate issuer:       /CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Certificate serial:       01974B8D523C3E678EC6D9A3CAB3D0DCFFBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
Manifest number:          04FF
Signing time:             Sat 07 Jun 2025 18:00:42 +0000
Manifest this update:     Sat 07 Jun 2025 18:00:42 +0000
Manifest next update:     Sun 08 Jun 2025 18:00:42 +0000
Files and hashes:         1: lPNHF_8y_ix2RK610O6iMBYX8SQ.crl (hash: qRsNGWx4furusAJJM2aH3xCz2mzh6XdFbQrjIb/Csm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:52:3c:3e:67:8e:c6:d9:a3:ca:b3:d0:dc:ff:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
        Validity
            Not Before: Jun  7 18:00:42 2025 GMT
            Not After : Jun  8 18:00:42 2025 GMT
        Subject: CN=a2d4d8003f46e1f41336a30b07b8339dc9904d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:00:b9:21:0c:cb:4b:21:e4:88:6f:1c:45:31:
                    d4:76:bc:09:e7:d5:67:b1:e2:bb:df:7e:bf:de:1d:
                    a7:04:ab:7b:fd:fa:e9:05:cc:46:27:be:70:d4:1e:
                    40:81:5a:a6:75:47:9c:8a:09:b4:fe:1c:18:97:a2:
                    b9:1c:ba:7f:e6:42:ce:f2:18:44:2d:dc:a6:8d:ea:
                    02:fb:ee:af:b9:1d:5e:27:f5:8f:5d:eb:9e:0a:b5:
                    8d:23:d5:06:f1:13:20:74:dd:ec:64:f6:4c:4b:7a:
                    8d:ed:98:77:fe:16:9b:1d:77:bf:da:a5:5d:e1:8e:
                    ff:2d:1b:49:d4:24:04:10:07:77:f8:1f:74:5d:3d:
                    f2:e7:3f:01:3e:36:0c:d4:53:8e:88:8f:87:82:e3:
                    bb:ba:10:50:b1:5d:46:d6:ec:59:b6:8c:9b:0a:c6:
                    61:a3:04:f3:7f:5c:d6:61:08:d4:19:8c:03:95:2a:
                    dd:9a:56:dd:e9:9b:ae:59:f0:e7:3a:7f:fa:22:5c:
                    c2:94:c0:f1:32:5d:41:23:bd:e1:6d:f5:fd:10:27:
                    c6:9f:e3:d9:97:d9:88:b9:6f:47:4a:43:ce:b9:13:
                    bf:34:0e:29:54:40:ee:6f:82:f6:73:69:63:60:33:
                    19:a9:eb:19:31:f2:34:e9:2f:a6:81:77:7e:43:91:
                    70:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D4:D8:00:3F:46:E1:F4:13:36:A3:0B:07:B8:33:9D:C9:90:4D:57
            X509v3 Authority Key Identifier:
                keyid:94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:10:55:7d:55:fa:91:7e:0e:55:5f:b5:11:fa:a3:01:1f:70:
         94:d9:ae:e4:f8:dd:0f:80:b7:ac:26:10:75:a3:8d:33:7f:9b:
         c4:34:3b:5b:1a:5a:f1:2a:aa:0a:75:ee:a6:df:cc:bd:f8:67:
         af:ff:ee:3b:3f:ce:a2:48:e8:46:3d:5f:e9:ce:57:59:fd:9c:
         93:04:d8:5f:ac:2c:4b:1d:cc:e2:7e:67:dd:71:14:0b:d4:e3:
         0e:3b:84:c8:64:0a:61:57:6e:e5:e3:26:29:7d:12:ef:98:d7:
         e3:6e:aa:a8:df:23:be:b1:2f:40:7f:45:9c:f6:e9:7c:62:54:
         fa:77:00:37:7a:cb:41:4c:96:22:23:e3:85:9c:79:7f:5d:69:
         27:d0:2e:72:da:32:ca:74:af:37:9e:7a:68:ec:d4:95:dd:44:
         b6:d0:88:82:fe:f7:fd:ad:81:f0:40:a4:ab:eb:74:93:a9:f4:
         fa:c7:43:04:77:7d:92:90:21:46:8a:be:92:ae:7a:7e:f3:42:
         54:b8:e6:84:54:63:d1:1b:2f:d2:a3:b5:53:96:b1:c0:cd:ef:
         04:9f:ce:c3:40:76:c1:c2:65:c7:98:3e:8a:98:36:c9:39:6b:
         c9:ff:d9:d9:df:c2:af:82:0c:7a:7f:a0:05:1b:86:f7:b5:3d:
         8d:fb:9e:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjVI8PmeOxtmjyrPQ3P+8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZjM0NzE3ZmYzMmZlMmM3NjQ0YWViNWQwZWVhMjMwMTYx
N2YxMjQwHhcNMjUwNjA3MTgwMDQyWhcNMjUwNjA4MTgwMDQyWjAzMTEwLwYDVQQD
EyhhMmQ0ZDgwMDNmNDZlMWY0MTMzNmEzMGIwN2I4MzM5ZGM5OTA0ZDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QC5IQzLSyHkiG8cRTHUdrwJ59Vn
seK7336/3h2nBKt7/frpBcxGJ75w1B5AgVqmdUecigm0/hwYl6K5HLp/5kLO8hhE
LdymjeoC++6vuR1eJ/WPXeueCrWNI9UG8RMgdN3sZPZMS3qN7Zh3/habHXe/2qVd
4Y7/LRtJ1CQEEAd3+B90XT3y5z8BPjYM1FOOiI+HguO7uhBQsV1G1uxZtoybCsZh
owTzf1zWYQjUGYwDlSrdmlbd6ZuuWfDnOn/6IlzClMDxMl1BI73hbfX9ECfGn+PZ
l9mIuW9HSkPOuRO/NA4pVEDub4L2c2ljYDMZqesZMfI06S+mgXd+Q5FwWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLU2AA/RuH0EzajCwe4M53JkE1XMB8GA1UdIwQY
MBaAFJTzRxf/Mv4sdkSutdDuojAWF/EkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFBOSEZfOHlfaXgyUks2MTBPNmlNQllYOFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jYWIxOTgtM2U4NC00YjAxLWJmYmEt
ODJiOWU1ZmU5YjA2LzEvbFBOSEZfOHlfaXgyUks2MTBPNmlNQllYOFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jYWIxOTgtM2U4NC00YjAxLWJmYmEtODJiOWU1ZmU5YjA2
LzEvbFBOSEZfOHlfaXgyUks2MTBPNmlNQllYOFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRBVfVX6
kX4OVV+1EfqjAR9wlNmu5PjdD4C3rCYQdaONM3+bxDQ7Wxpa8SqqCnXupt/Mvfhn
r//uOz/OokjoRj1f6c5XWf2ckwTYX6wsSx3M4n5n3XEUC9TjDjuEyGQKYVdu5eMm
KX0S75jX426qqN8jvrEvQH9FnPbpfGJU+ncAN3rLQUyWIiPjhZx5f11pJ9Auctoy
ynSvN556aOzUld1EttCIgv73/a2B8ECkq+t0k6n0+sdDBHd9kpAhRoq+kq56fvNC
VLjmhFRj0Rsv0qO1U5axwM3vBJ/Ow0B2wcJlx5g+ipg2yTlryf/Z2d/Cr4IMen+g
BRuG97U9jfuepw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:25:10 2025 by rpki-client