Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft
File:                     LRgVsMncnuIgfslBfN7CvEviPGE.mft (raw, json)
Hash identifier:          iIoYNJbayfAfPwEgQis/KqvyhaOvQ8Y8TINiz7431g8=
Subject key identifier:   7F:F5:59:8F:7E:7E:60:0F:BC:1D:6B:29:53:C4:43:24:5D:DD:22:56
Authority key identifier: 2D:18:15:B0:C9:DC:9E:E2:20:7E:C9:41:7C:DE:C2:BC:4B:E2:3C:61
Certificate issuer:       /CN=2d1815b0c9dc9ee2207ec9417cdec2bc4be23c61
Certificate serial:       0197B6A0E409FF18DB9E27866E772466C0C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft
Manifest number:          1597
Signing time:             Sat 28 Jun 2025 13:01:26 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:26 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:26 +0000
Files and hashes:         1: LRgVsMncnuIgfslBfN7CvEviPGE.crl (hash: bUvcGDeRKCIORStDvCZS43EL+lRqE4U9xi1DwTXc+Bo=)
                          2: PJ1oWEK44Zed3KrYQclwt_PzWxI.roa (hash: ndUhprvQgKRMORI6rgSCOBtWuDBA/APXIOBsxX7wUqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:e4:09:ff:18:db:9e:27:86:6e:77:24:66:c0:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1815b0c9dc9ee2207ec9417cdec2bc4be23c61
        Validity
            Not Before: Jun 28 13:01:26 2025 GMT
            Not After : Jun 29 13:01:26 2025 GMT
        Subject: CN=7ff5598f7e7e600fbc1d6b2953c443245ddd2256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:68:4f:a0:53:5d:5d:75:a9:44:fa:88:76:
                    41:05:c1:11:0c:03:11:e3:4c:13:8f:33:19:07:8b:
                    74:83:86:bc:21:53:30:0f:41:73:45:1a:82:76:39:
                    1a:c8:96:ee:3a:16:33:ce:b7:2e:3b:be:bb:81:e6:
                    75:07:b8:bf:87:b7:d0:80:c6:d0:46:4f:4e:c7:b0:
                    0d:83:4e:b6:15:05:98:ff:f1:ee:36:17:81:f1:7d:
                    b9:96:7f:4c:6e:e9:e4:f0:37:6f:68:33:fd:f7:d5:
                    d3:ec:3a:f9:a3:e7:50:0b:43:51:2e:de:3b:3c:3e:
                    0c:2e:64:78:d6:c0:e9:73:92:e2:71:70:f7:cb:dd:
                    01:65:91:8f:18:9f:fb:3d:47:11:46:5a:b2:f7:a6:
                    ec:8b:0a:39:d0:31:18:38:08:7b:d3:b1:9d:55:18:
                    e4:ae:81:07:e3:48:b8:a1:4b:2c:3e:96:1f:80:98:
                    54:17:cd:62:25:30:16:11:60:87:ee:bd:72:92:da:
                    e0:ea:66:6b:f8:97:4a:78:4f:cf:5b:13:50:e1:10:
                    10:62:92:b8:8d:b2:54:7b:28:2f:d3:22:0e:b4:af:
                    68:e4:70:7e:4b:cc:0e:27:89:96:6a:23:63:01:cd:
                    92:77:fa:3e:f7:5b:48:79:6a:bb:1b:5f:53:30:3e:
                    af:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F5:59:8F:7E:7E:60:0F:BC:1D:6B:29:53:C4:43:24:5D:DD:22:56
            X509v3 Authority Key Identifier:
                keyid:2D:18:15:B0:C9:DC:9E:E2:20:7E:C9:41:7C:DE:C2:BC:4B:E2:3C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a9:06:65:9b:f2:90:5b:d3:4d:24:9f:a5:12:41:45:56:3a:
         06:e8:be:3e:73:3e:a4:d0:8b:b2:f5:5f:d4:43:b5:ab:0f:72:
         b3:d9:81:93:fd:5c:90:4d:f8:1c:f8:91:90:20:82:9c:6d:94:
         7c:dc:40:9a:02:e0:b7:f7:af:da:d5:34:30:0f:27:7f:f4:04:
         9f:ce:b1:ab:05:c8:4f:25:3e:7e:03:9f:b6:26:89:df:16:a3:
         1b:ba:bc:2e:2a:c5:60:40:6f:cf:80:39:bf:41:66:87:2b:7e:
         cd:1e:c6:c3:09:88:da:d9:8c:64:4d:42:b5:29:b1:ea:77:e8:
         cb:32:cc:8f:f2:fa:60:aa:5f:f3:0d:d5:17:92:27:74:86:42:
         ec:f2:66:02:7e:2e:65:2c:07:10:15:17:ae:73:ae:18:63:a0:
         f1:24:83:f8:c5:79:34:52:a3:c2:0b:07:47:63:30:0d:c2:a8:
         28:aa:0a:0d:5c:ff:b5:3b:be:f1:c2:37:96:4f:2c:90:54:51:
         c8:35:93:87:0d:2c:da:be:88:bf:2d:6d:49:d7:72:94:c6:a7:
         2a:2b:09:6c:50:f1:30:01:79:e7:20:d1:de:81:8a:64:ed:2a:
         cc:a9:5a:ae:32:b4:74:15:98:d6:ff:bb:a3:f8:3c:29:87:42:
         f3:39:81:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:32 2025 by rpki-client