Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
File:                     lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft (raw, json)
Hash identifier:          NtbP7d9EJDjT/X7QdcxZM7b1IK4fzorbA3oUxtqLsi4=
Subject key identifier:   B3:C9:94:5D:E9:38:E7:1C:82:27:5D:95:9B:CB:1B:DE:F8:73:5F:CB
Authority key identifier: 97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C
Certificate issuer:       /CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
Certificate serial:       0196D1E29884050159517A47D507B3EA91D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
Manifest number:          1108
Signing time:             Thu 15 May 2025 03:00:10 +0000
Manifest this update:     Thu 15 May 2025 03:00:10 +0000
Manifest next update:     Fri 16 May 2025 03:00:10 +0000
Files and hashes:         1: lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl (hash: J+gX+wX2o/TWs0zPaHUWA+HIVkyHXEBWNlrrEFAN3LI=)
                          2: sE1iK8BGArTufNYA1Zt6v_dSI9Y.roa (hash: OOj0tzcrni9iINX1RsORuXXY2J4W4MPomfi+iy0BJbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d1:e2:98:84:05:01:59:51:7a:47:d5:07:b3:ea:91:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
        Validity
            Not Before: May 15 03:00:10 2025 GMT
            Not After : May 16 03:00:10 2025 GMT
        Subject: CN=b3c9945de938e71c82275d959bcb1bdef8735fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4f:7a:ff:03:81:20:bf:4f:54:18:98:55:e5:
                    89:07:82:85:fa:76:11:54:39:8e:fe:82:d5:7d:06:
                    15:a4:3c:18:d2:33:eb:3c:c5:b8:25:35:02:d0:f8:
                    58:98:9c:a7:b4:96:b7:39:50:e9:17:86:c9:99:de:
                    ca:b3:6d:d5:92:d6:6c:4f:f0:2a:50:2d:58:b5:f3:
                    82:89:d2:d0:f3:d6:65:dc:9a:b0:55:a2:ba:ca:f6:
                    36:95:79:b9:d4:d0:4c:02:58:8b:63:4d:b4:e4:f0:
                    8a:28:34:a9:ce:05:89:13:c9:61:46:84:5f:a2:41:
                    ca:60:4e:d9:4f:1d:2b:e4:70:e5:0b:f9:d7:47:10:
                    12:a7:f8:29:fd:a3:39:3c:5e:df:3b:7e:e4:00:6a:
                    13:40:20:e6:44:84:18:cf:a1:69:29:1d:00:96:6e:
                    32:bc:47:c3:06:e0:37:d4:78:37:20:d8:9d:50:c8:
                    4f:92:ac:64:3b:25:9d:0f:86:2f:c8:d5:17:18:08:
                    8c:90:6f:37:03:9a:09:4d:de:b7:30:ea:09:ee:29:
                    88:31:39:53:63:08:5d:dc:66:b2:26:a0:71:05:01:
                    fd:13:f1:e3:23:d9:10:0e:1d:3f:84:e3:6c:01:7f:
                    56:bb:f9:18:53:cb:a4:f6:53:be:65:5e:58:09:c6:
                    92:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C9:94:5D:E9:38:E7:1C:82:27:5D:95:9B:CB:1B:DE:F8:73:5F:CB
            X509v3 Authority Key Identifier:
                keyid:97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:eb:87:78:c8:df:b2:cd:8d:6c:bd:ec:47:b5:c6:9b:c0:6a:
         b4:b6:d3:9f:81:4a:21:89:35:ae:46:1d:c8:5b:fb:ff:9c:c9:
         72:2c:4c:d6:6c:cb:98:66:fa:8b:8a:5b:7b:6d:c9:9d:8c:fa:
         5a:c2:a7:a9:8d:20:7f:63:71:36:1e:86:5c:75:26:cf:d7:b7:
         ca:74:a6:28:bc:cf:cf:b9:da:26:3a:0e:c1:20:3d:3f:3b:fc:
         30:92:d7:00:3f:a1:ce:d7:12:95:f1:ea:88:6a:06:4b:d7:b4:
         37:d2:29:42:e1:cc:bc:0f:55:3f:e2:87:a7:60:eb:e5:24:d0:
         d0:5f:d8:79:e5:d5:07:1a:01:aa:66:4e:bb:bd:d4:aa:cf:5e:
         fd:f1:18:92:b8:eb:05:7c:e6:13:63:7f:72:2b:93:4c:8c:bb:
         53:c0:64:33:d8:f0:d4:f0:94:6f:9b:ee:2c:14:9f:28:f2:67:
         01:f7:58:a0:e1:f9:f5:33:ac:84:72:6e:6c:9c:55:a0:29:b6:
         ee:8e:9c:bc:dc:d4:06:02:f9:6d:22:39:25:67:93:07:46:81:
         57:49:93:bd:28:58:6b:02:20:f1:43:e4:e1:a8:fc:ec:b1:d0:
         0c:37:b7:50:02:f4:70:7b:69:47:a7:38:73:6d:32:d9:20:91:
         aa:55:2b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:47:55 2025 by rpki-client