Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
File:                     LbYW860DY-cmnMLrWNG8CGzJdfI.mft (raw, json)
Hash identifier:          FyIPRQ7TQ2CXMy8biPWQFIGcQnrPcxL3H0m+1kLdCx4=
Subject key identifier:   E2:9F:17:07:9A:AA:8D:E8:42:30:E2:A0:16:7B:AF:BB:53:AA:39:DB
Authority key identifier: 2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
Certificate issuer:       /CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Certificate serial:       0197B6A1BDBC154057B49C29DA1B3E46FEA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 13:02:22 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:22 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:22 +0000
Files and hashes:         1: LbYW860DY-cmnMLrWNG8CGzJdfI.crl (hash: 4OxEZ90HFO5ARyA9vsD2IrfHHR/xmJZCHnSksiWgBoY=)
                          2: TtiFva0B7nBQnunu1qXuQVvAjRk.roa (hash: BCLtQWteuqq7HD+J7kkS4GO2lBhow7GRQ0k6IwJXdnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:bd:bc:15:40:57:b4:9c:29:da:1b:3e:46:fe:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
        Validity
            Not Before: Jun 28 13:02:22 2025 GMT
            Not After : Jun 29 13:02:22 2025 GMT
        Subject: CN=e29f17079aaa8de84230e2a0167bafbb53aa39db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:95:b6:2f:f6:e7:3e:0a:82:90:6d:ff:6e:f9:
                    3f:30:53:a4:44:6a:56:c3:51:09:d6:9f:30:d0:70:
                    38:2a:61:19:04:0e:48:1d:bc:b4:31:fb:5f:04:50:
                    96:de:e6:7e:aa:5a:9b:59:c4:f2:c9:a1:5a:4e:09:
                    a0:ac:b6:e4:29:f7:c1:04:cf:89:be:76:88:0b:3c:
                    0f:71:17:a4:42:dc:58:f5:c3:3a:7a:35:e1:84:8d:
                    82:ea:99:a3:1c:96:71:5f:f3:36:dd:96:f5:55:7b:
                    df:36:36:a5:d9:ea:1d:f5:67:da:c8:1e:7e:90:d6:
                    0a:7e:82:ad:3e:11:05:16:f5:36:f5:23:5b:f7:32:
                    78:b6:45:f0:c6:d9:e9:1f:1c:0f:05:66:e2:24:cf:
                    54:1b:8c:6f:15:7e:14:b9:89:6f:1c:98:f6:18:17:
                    ab:89:99:7d:60:db:c4:36:50:13:80:d9:5a:fc:3c:
                    f9:cd:9d:ab:85:28:aa:1d:c6:3d:a2:ac:45:28:11:
                    32:75:7d:30:0d:ad:08:4c:2f:9b:33:06:68:3f:3e:
                    cb:e0:41:ee:79:54:eb:92:77:11:42:fc:f8:0e:a6:
                    f3:ac:30:a6:07:52:0a:0f:e7:ad:55:bd:71:7b:46:
                    84:17:df:ba:84:3d:97:c5:79:06:16:64:ad:b1:de:
                    cd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9F:17:07:9A:AA:8D:E8:42:30:E2:A0:16:7B:AF:BB:53:AA:39:DB
            X509v3 Authority Key Identifier:
                keyid:2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c3:91:6d:43:47:d1:96:56:42:19:03:84:41:08:c5:cd:88:
         50:7b:38:0c:aa:9f:be:25:6d:2c:3b:4c:57:fd:b8:8c:79:10:
         8d:61:81:c1:ce:db:74:75:d6:49:6a:30:92:f3:cb:cc:e7:c7:
         10:c0:fe:39:24:34:83:5d:83:84:b9:d7:00:fa:40:93:6a:3e:
         04:42:c0:f8:05:70:12:c5:9d:55:73:7d:09:c3:28:ca:5f:01:
         5d:a1:8a:58:53:b7:cc:1b:65:ca:19:86:d5:21:71:77:a7:49:
         ea:6f:16:95:bc:95:45:99:4f:ca:2e:08:da:5b:1c:48:5c:d5:
         ba:06:aa:2a:50:5a:bf:2d:74:5f:eb:23:96:ef:78:50:6d:61:
         be:b4:18:ff:3f:28:91:16:68:87:75:fe:f6:93:0e:d2:3e:58:
         0e:e7:f0:93:22:9f:7c:14:22:85:c3:4d:2d:64:d9:b4:b1:c6:
         b1:4f:38:d2:bc:fb:53:62:36:16:c9:0c:f6:be:6c:e7:2c:d4:
         ca:5d:b8:38:10:22:4c:cd:2a:e9:ed:c4:80:ec:6d:84:ac:06:
         f5:a7:97:4f:ba:de:64:3e:96:fb:ce:99:d0:13:c5:18:86:0f:
         c5:20:8d:36:db:b1:16:e8:98:87:ed:d9:21:62:58:85:8b:90:
         75:3a:ea:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:06 2025 by rpki-client