Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
File:                     LubVYKCKAT8_4OZtra9v0Cvq9D8.mft (raw, json)
Hash identifier:          S6MFndgDcJX2a/7+lgPsnAv9iCfgl8DpZUSthJg2lA0=
Subject key identifier:   38:86:7E:59:44:19:AC:D9:71:E3:28:D8:1C:47:DF:96:B0:A4:47:E3
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Certificate issuer:       /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial:       0197B8C5BDC1EC53DA5E387330707BD9A1E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
Manifest number:          15F2
Signing time:             Sat 28 Jun 2025 23:00:56 +0000
Manifest this update:     Sat 28 Jun 2025 23:00:56 +0000
Manifest next update:     Sun 29 Jun 2025 23:00:56 +0000
Files and hashes:         1: LubVYKCKAT8_4OZtra9v0Cvq9D8.crl (hash: 4MvDNDtT+lZd3oSeNsLMVmO+Rwk0vUDuPYFXrwSmO+4=)
                          2: xfTt7QwtZDYwpOqt-xtQurA5I0c.roa (hash: ZlEBp7t71aNEAPDDQ8kVF7//cmlxkwRPGVq3nvU6tPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:c5:bd:c1:ec:53:da:5e:38:73:30:70:7b:d9:a1:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
        Validity
            Not Before: Jun 28 23:00:56 2025 GMT
            Not After : Jun 29 23:00:56 2025 GMT
        Subject: CN=38867e594419acd971e328d81c47df96b0a447e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4a:d3:e5:98:fb:f0:5f:29:59:bf:38:94:40:
                    6c:45:fb:1e:72:c5:c7:2a:a8:93:58:9f:36:d7:16:
                    1e:bd:e6:0f:d6:63:d8:82:0d:5c:ac:f0:3f:f6:2d:
                    9c:bf:d8:83:87:38:c6:a7:eb:6e:c7:12:ea:49:2b:
                    e1:28:09:f0:cc:b7:98:d5:44:75:f8:28:77:13:14:
                    6b:10:8f:4e:be:53:7c:f4:a9:9c:0f:ef:f2:20:ea:
                    0b:68:c0:d6:2e:35:76:c1:4e:c4:f8:d1:a5:24:e1:
                    37:87:dc:0a:85:ae:86:f5:28:9a:c9:a2:56:aa:ef:
                    83:ce:4e:c7:dd:af:e6:8c:ca:ba:75:7b:fa:cf:f6:
                    26:a0:ef:59:13:9a:76:98:73:f3:f5:f1:80:b2:11:
                    f2:46:83:e4:49:d3:68:1a:e2:43:58:43:4b:c7:68:
                    b4:94:4e:27:2e:40:06:ad:17:49:fa:0e:56:7f:65:
                    f6:78:c0:7d:4d:5f:f6:62:45:c0:e3:8c:1c:c5:66:
                    1a:c1:40:cf:68:ab:c9:82:2c:0b:e2:12:97:af:ec:
                    e3:4a:81:8c:f9:c7:9f:b1:04:0f:5a:92:a9:1f:73:
                    82:7f:87:85:86:f5:1e:85:98:cc:69:59:1a:e6:bb:
                    f8:34:fc:5c:ea:fa:26:02:c5:47:70:24:a4:e2:84:
                    a7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:86:7E:59:44:19:AC:D9:71:E3:28:D8:1C:47:DF:96:B0:A4:47:E3
            X509v3 Authority Key Identifier:
                keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:13:59:e6:f7:fd:38:41:9f:d6:af:c1:c0:54:da:87:ff:ca:
         d6:de:61:61:a7:89:ac:db:16:35:ca:3a:b6:81:41:98:c1:d7:
         a6:67:7d:c6:54:5b:1c:32:e2:da:1f:59:53:c1:c9:da:89:86:
         63:e5:34:54:29:ea:0f:0a:dc:cc:fd:60:60:a6:45:9d:71:d0:
         c2:f6:d2:7d:14:51:5a:d3:b1:03:aa:6b:51:60:8e:14:d5:c7:
         dd:00:b2:f5:36:3e:4a:dc:f2:ef:f5:72:a4:6e:db:91:a9:c3:
         4e:b7:4f:d7:8a:f8:cf:87:4a:bb:73:0f:8d:c8:ce:d8:29:86:
         a5:8e:f9:f1:d3:3b:a9:c8:cf:c9:94:25:bc:ea:c1:3a:f3:fc:
         f5:30:44:87:2f:e5:c0:ef:d2:fa:0f:08:a0:b4:72:b1:bc:ad:
         55:a4:a2:94:dc:1b:b9:82:70:be:d1:27:8d:ef:35:40:e8:c0:
         47:c1:ee:9a:e3:39:25:92:dd:e4:be:70:e0:de:09:5e:ec:2c:
         08:f8:03:3b:38:45:8a:df:7e:e2:36:23:7b:50:84:0b:44:df:
         2a:39:3a:cf:f2:ca:8e:66:11:da:60:4b:7e:fe:e7:3b:a8:23:
         00:68:1f:a5:44:fd:59:70:a5:9e:a5:23:67:40:ea:02:d2:6d:
         34:07:9a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:56:00 2025 by rpki-client