Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
File:                     LubVYKCKAT8_4OZtra9v0Cvq9D8.mft (raw, json)
Hash identifier:          Gw1APQ+8rwLfp38JJXne9vmiYJmIirUxJaIhx4iooNM=
Subject key identifier:   1C:82:85:24:8B:05:88:72:26:78:30:2A:A7:54:EA:7D:C5:B1:E3:6B
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Certificate issuer:       /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial:       0196C1941D241EA7B0963D9626971D6AE1D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
Manifest number:          1572
Signing time:             Sun 11 May 2025 23:00:31 +0000
Manifest this update:     Sun 11 May 2025 23:00:31 +0000
Manifest next update:     Mon 12 May 2025 23:00:31 +0000
Files and hashes:         1: LubVYKCKAT8_4OZtra9v0Cvq9D8.crl (hash: jwL9eK4gvtwTiLw2hxUnMcNNZXbyt08Gi2aXAOploFI=)
                          2: xfTt7QwtZDYwpOqt-xtQurA5I0c.roa (hash: ZlEBp7t71aNEAPDDQ8kVF7//cmlxkwRPGVq3nvU6tPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 23:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:94:1d:24:1e:a7:b0:96:3d:96:26:97:1d:6a:e1:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
        Validity
            Not Before: May 11 23:00:31 2025 GMT
            Not After : May 12 23:00:31 2025 GMT
        Subject: CN=1c8285248b0588722678302aa754ea7dc5b1e36b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7e:2d:7a:6c:4a:65:5a:86:84:3f:85:bd:42:
                    17:06:99:46:bc:dd:9d:24:83:0a:91:16:01:5f:a4:
                    b0:33:53:91:8f:3f:0f:05:22:bd:35:d6:ac:9b:26:
                    59:c9:ed:fc:d8:92:b9:80:16:10:a1:9b:07:cf:fd:
                    af:6b:b0:75:38:4b:e2:d4:6a:67:77:f8:48:a5:27:
                    f5:fc:b8:9a:06:87:60:71:09:9c:7d:48:b5:7e:6d:
                    32:a6:34:02:15:79:03:23:54:a1:3f:bd:c2:a6:ca:
                    74:bb:23:e3:82:5f:23:89:aa:df:fe:16:50:ea:38:
                    14:7c:e2:3f:59:13:26:cb:54:17:4b:ca:b3:86:c9:
                    0e:76:79:b3:dd:81:b5:12:dc:14:e5:4f:08:0d:de:
                    54:8d:81:91:9d:5b:9e:d9:f3:ee:93:79:c3:b3:67:
                    b7:e1:4f:a5:15:de:7b:5e:69:83:05:f0:2d:0b:1f:
                    be:0b:d1:44:9a:9b:a9:24:9a:07:5b:aa:14:8a:03:
                    45:75:86:f1:86:1f:22:3b:92:c6:c1:27:63:a6:f7:
                    4c:a8:e2:75:24:39:14:68:12:8c:5f:01:2c:8e:cf:
                    5a:90:56:91:cb:a5:64:83:08:20:e0:33:66:84:9c:
                    2c:53:9b:64:38:d4:79:dc:dc:77:85:88:86:64:34:
                    04:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:82:85:24:8B:05:88:72:26:78:30:2A:A7:54:EA:7D:C5:B1:E3:6B
            X509v3 Authority Key Identifier:
                keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:13:ab:47:17:b7:18:31:30:4b:56:79:be:22:cd:ba:19:75:
         df:cf:25:bc:87:0c:b3:3d:f9:39:ea:87:57:bc:2c:1f:d8:98:
         b4:a8:17:5e:d3:af:b6:6f:ad:e2:af:45:69:89:33:16:b9:26:
         5a:e5:5a:3f:61:a6:12:f3:24:51:83:c9:ad:51:0f:99:5b:6d:
         e1:93:f8:44:f5:01:f2:47:90:6e:9e:ad:da:24:06:bf:8e:23:
         57:91:cf:b2:b4:e7:a3:3d:86:bf:a9:2b:08:d1:d4:1d:d5:4b:
         10:46:a4:ce:c8:d9:5d:85:79:9b:06:f6:e5:05:76:30:29:1c:
         38:c2:4f:97:b8:58:3d:2e:9c:b6:a4:1b:f3:e2:13:b9:d8:54:
         d3:d0:50:9b:a6:c2:21:2a:a3:dc:f5:13:2d:53:98:55:b1:fa:
         63:bd:90:de:51:24:a7:f3:ea:db:34:60:8c:23:23:ba:dd:f0:
         1a:62:52:b0:b4:ea:75:03:ca:b3:26:d6:26:ee:8f:db:5a:78:
         84:10:f2:52:ac:b8:cc:fa:4b:ac:29:50:d0:65:37:dd:ef:23:
         7f:72:97:27:7e:d1:06:9e:95:86:0e:ec:4a:a4:c0:5d:d3:ca:
         2b:96:fc:45:b1:f9:03:12:00:20:9f:75:86:1d:e4:c0:c8:fb:
         3b:4a:e6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:56:14 2025 by rpki-client