Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
File:                     Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft (raw, json)
Hash identifier:          VoI1swAKh4qSh4JA4RfWOxT6xNvTdf1AkfIt8CoenkE=
Subject key identifier:   87:26:49:86:FC:2C:2B:CD:8A:01:8E:B1:4D:EE:AC:F2:2F:90:F3:82
Authority key identifier: 2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
Certificate issuer:       /CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Certificate serial:       0196AB7A47C820E68AF0E520357F0DBCD25C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
Manifest number:          0F36
Signing time:             Wed 07 May 2025 16:00:39 +0000
Manifest this update:     Wed 07 May 2025 16:00:39 +0000
Manifest next update:     Thu 08 May 2025 16:00:39 +0000
Files and hashes:         1: B3anwTfv9G1rVUQa6NJWLwdwXYI.roa (hash: mmLvT4hHYo/WnQMssEwo9M27udmQqtzbwXP4LSX1FYM=)
                          2: Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl (hash: O71AMPLM6Bk393N8QYjraVmx8Vqh1dKRGhQwE8LVszM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:7a:47:c8:20:e6:8a:f0:e5:20:35:7f:0d:bc:d2:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
        Validity
            Not Before: May  7 16:00:39 2025 GMT
            Not After : May  8 16:00:39 2025 GMT
        Subject: CN=87264986fc2c2bcd8a018eb14deeacf22f90f382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:83:cb:46:3b:82:48:ea:24:a5:57:77:bf:7e:
                    94:2f:68:ca:c3:36:34:3d:bf:56:3a:5a:16:2a:b1:
                    8d:ed:05:d4:70:43:f4:4a:26:a6:62:2a:f8:39:65:
                    28:81:6e:7d:2f:86:7e:ed:55:f7:d6:e1:da:f0:91:
                    1c:aa:00:5e:ab:e9:1a:c5:98:ed:75:56:26:5d:ba:
                    fe:2c:c9:87:3a:9d:7c:fe:c7:82:87:c8:bc:6b:2e:
                    92:de:61:52:fe:0d:d7:05:3d:90:80:4d:f8:c3:ac:
                    0f:ae:db:97:ae:23:be:42:65:6f:fc:19:0a:a0:86:
                    49:cf:f2:24:ed:62:d0:c7:09:b8:08:1d:b3:a8:52:
                    54:29:07:d9:90:ac:a8:91:6e:18:17:99:b2:5d:99:
                    c8:c9:a8:d2:1f:8b:1b:f6:94:ee:01:e8:54:11:66:
                    72:bb:76:1e:f8:af:9f:c9:b1:b7:1d:1b:83:f5:24:
                    0f:aa:79:cc:03:82:1e:e2:65:ce:85:3d:dd:10:f7:
                    83:95:c3:23:e4:03:3d:2f:4e:5d:07:7b:3e:3a:ee:
                    be:27:61:7d:9b:31:18:b2:db:0c:12:78:57:d9:3b:
                    e2:d4:94:aa:f5:4c:d1:9b:a6:b0:22:31:0c:e6:09:
                    2e:50:31:1c:6b:5d:c2:5d:c3:d6:8b:ce:c6:51:ce:
                    7c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:26:49:86:FC:2C:2B:CD:8A:01:8E:B1:4D:EE:AC:F2:2F:90:F3:82
            X509v3 Authority Key Identifier:
                keyid:2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:aa:03:10:d9:af:f4:5a:c2:b1:9d:09:22:4a:7e:25:8e:15:
         26:31:29:80:45:22:ed:1f:e8:bb:dc:6a:fa:62:9c:94:23:9d:
         be:31:ba:9f:34:fa:cb:52:7d:28:87:0d:c1:e9:5a:91:75:f5:
         c2:0e:6c:cb:c3:fb:df:99:2d:59:13:94:c0:80:0b:85:51:40:
         70:2c:f3:15:23:47:1c:4e:4a:79:a3:07:b5:ab:76:8e:ce:22:
         76:34:94:ef:9a:2a:ef:1f:d0:26:6c:74:42:36:7f:a6:b1:f6:
         c7:91:dd:b0:09:2b:13:bc:93:d8:76:69:74:d5:29:27:0d:7b:
         d0:25:7a:86:77:ed:ad:c0:1d:48:90:09:2a:12:af:33:0f:07:
         ac:04:01:7e:55:70:d5:8c:9b:6f:22:aa:ec:57:74:d7:63:c6:
         a7:bb:0d:33:4d:0e:8a:d7:11:db:ca:84:4f:a4:5d:7d:00:00:
         e0:54:b1:44:1a:9c:97:84:bb:19:7d:9b:5a:9c:4b:8d:a0:da:
         a5:04:a5:e5:68:b1:fa:f2:41:90:4d:50:9f:3e:f7:8b:0c:4d:
         a4:2f:5c:77:c0:94:b1:62:96:4e:6a:ad:a4:81:7a:20:98:09:
         63:13:12:da:be:4f:0b:70:51:a9:08:59:5b:c2:6d:73:e0:07:
         36:e1:6a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 20:47:30 2025 by rpki-client