Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
File:                     _LVQtxDX8PlLDOQyzw5OlQzE4co.mft (raw, json)
Hash identifier:          4riBIUrrg34514VUA93YljVBBfRAH8iXQq6EMQLcR6E=
Subject key identifier:   0D:3A:39:B6:13:44:4C:05:37:F0:D8:FC:46:66:B2:92:88:BC:6C:A3
Authority key identifier: FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA
Certificate issuer:       /CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
Certificate serial:       0197B88FFB266319A0358B418AD1D134E50B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
Manifest number:          03D1
Signing time:             Sat 28 Jun 2025 22:02:12 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:12 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:12 +0000
Files and hashes:         1: _LVQtxDX8PlLDOQyzw5OlQzE4co.crl (hash: HvXsMMcbNMULDBkkrRpgjeRNO+5R1w1IRV7Kpzhhg6I=)
                          2: nFeHU4vrYRFo-11ovr0Tku54r4I.roa (hash: LbVqewnx/HQRoXd8S+Bxr4d2t69NAHQNt9Q/3oZNLT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:fb:26:63:19:a0:35:8b:41:8a:d1:d1:34:e5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
        Validity
            Not Before: Jun 28 22:02:12 2025 GMT
            Not After : Jun 29 22:02:12 2025 GMT
        Subject: CN=0d3a39b613444c0537f0d8fc4666b29288bc6ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:aa:8b:17:d6:32:1a:19:d5:e6:ee:28:d9:00:
                    50:2f:e7:a5:c5:d7:46:d3:d0:87:54:de:25:4e:81:
                    bd:7d:8c:2c:d7:d2:32:ed:93:b1:9d:c4:29:4e:53:
                    44:23:09:71:9b:58:37:a7:1f:0e:47:c4:55:90:d9:
                    7e:5f:42:fd:d6:a2:2c:06:9a:a5:6d:79:39:cc:68:
                    5c:b5:92:05:b4:8a:45:dd:e5:0b:2d:be:ba:84:dd:
                    e4:2b:1d:73:ab:13:36:cb:87:6e:ff:05:97:3c:90:
                    b8:af:ad:1c:9e:13:ad:8c:f8:bf:84:48:b4:61:b7:
                    19:df:e4:a4:1a:cd:92:1b:7c:3b:23:04:db:2a:38:
                    6d:07:29:14:dc:be:1d:20:97:67:99:2d:e3:37:ab:
                    14:38:8f:54:4d:ac:65:eb:87:be:f8:16:f7:62:af:
                    bd:33:f1:0e:aa:a9:a6:aa:f9:e2:21:6c:34:5b:42:
                    1b:3a:5c:c5:66:b1:5c:4a:24:81:c6:56:8a:d2:b9:
                    f7:80:49:bc:64:20:eb:dd:b9:21:9b:c0:07:1c:39:
                    c1:89:16:3c:b0:5a:54:4c:fe:89:9d:23:c2:d8:ff:
                    31:14:0d:8b:0d:9b:41:3e:ab:90:29:aa:1b:e1:d3:
                    66:7e:fb:51:2c:57:56:94:d5:73:65:ec:d8:8f:57:
                    8e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3A:39:B6:13:44:4C:05:37:F0:D8:FC:46:66:B2:92:88:BC:6C:A3
            X509v3 Authority Key Identifier:
                keyid:FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ff:38:bf:5e:cf:32:73:30:99:09:15:f7:aa:70:91:38:2d:
         42:a5:90:f8:55:22:3e:06:d4:3a:0a:6a:b0:51:6c:57:95:b7:
         00:f9:a0:84:2d:94:f6:49:f7:b0:bd:d0:95:fa:b2:80:0e:b8:
         9f:15:47:5c:82:6a:a6:d9:e8:d7:2a:de:17:ab:28:f4:fc:b8:
         e2:bf:9d:59:f8:36:51:5a:e1:30:a2:13:46:1d:8c:7b:aa:dd:
         20:0b:55:a1:a0:39:64:23:69:1e:5e:51:5f:0a:fe:f1:98:55:
         61:6b:f3:6f:56:42:29:20:d1:6b:42:34:d2:60:c6:34:63:56:
         b8:87:cd:27:de:71:2d:ea:4b:57:70:22:5d:14:65:17:3a:22:
         83:fc:34:5d:35:a8:2d:69:04:6b:7b:35:c6:40:81:0c:82:c3:
         81:60:cb:7f:c5:5b:2b:2e:f8:49:23:02:30:91:16:60:bb:a0:
         a1:07:17:bb:64:01:28:b1:cd:83:c2:17:bf:bf:52:09:80:3a:
         5e:5f:d9:f7:bc:05:88:4f:85:67:bd:72:f2:41:af:88:50:dc:
         b0:c9:44:b1:52:bd:6b:59:71:1f:c7:f4:e5:80:6b:ac:f8:c4:
         37:b3:71:5a:ab:dd:79:b5:51:51:22:55:10:16:7d:d4:1a:ea:
         38:c3:56:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:36 2025 by rpki-client