Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft
File:                     Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft (raw, json)
Hash identifier:          NnLJCdolOraY1v9xWTGnJ9os6HVhO4Ht3PFgCOP0qsk=
Subject key identifier:   77:6E:AC:F9:6A:63:F8:9E:92:52:3D:3B:05:E8:55:F9:84:94:A4:69
Authority key identifier: 2F:1B:39:F7:F0:A9:E6:2A:A0:60:49:B8:CC:A3:0D:22:F5:2D:04:35
Certificate issuer:       /CN=2f1b39f7f0a9e62aa06049b8cca30d22f52d0435
Certificate serial:       0198D473FCA7BE5B84A1344E58BE33C3244B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft
Manifest number:          0AA8
Signing time:             Sat 23 Aug 2025 01:03:47 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:47 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:47 +0000
Files and hashes:         1: Lxs59_Cp5iqgYEm4zKMNIvUtBDU.crl (hash: d/KNvG8n6gietww84VMiUPXlHBKYxtog5DZtVvVRSOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:fc:a7:be:5b:84:a1:34:4e:58:be:33:c3:24:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f1b39f7f0a9e62aa06049b8cca30d22f52d0435
        Validity
            Not Before: Aug 23 01:03:47 2025 GMT
            Not After : Aug 24 01:03:47 2025 GMT
        Subject: CN=776eacf96a63f89e92523d3b05e855f98494a469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:eb:2c:85:89:17:0e:78:a5:6a:48:12:71:53:
                    af:a3:83:17:0d:c4:69:25:e7:b0:df:d3:8c:5d:f3:
                    c4:9b:c3:2a:f2:85:52:52:af:ce:dd:61:4a:68:2e:
                    9e:d7:00:16:9f:e4:3e:31:12:3a:79:7a:3a:6f:45:
                    95:c7:0f:8b:13:f4:6d:eb:35:d8:36:85:51:51:2a:
                    5f:03:9b:00:fd:4a:1e:2d:68:0d:47:85:8b:72:49:
                    95:f1:38:fa:b6:87:e5:0e:12:61:b4:56:32:a9:02:
                    00:7c:e2:53:1d:0f:3c:eb:68:ac:93:0c:0f:b0:16:
                    d3:43:09:68:56:80:ce:03:5a:76:a4:5d:6f:5c:3f:
                    09:cd:28:bc:36:4d:7e:9e:58:a2:1f:63:fe:68:e9:
                    37:d6:69:5a:74:ef:cf:cb:78:ef:b1:28:4d:70:ea:
                    9f:77:3a:a0:3c:30:89:32:ee:62:91:09:14:1a:87:
                    9d:d5:d6:70:13:2a:d2:65:a0:e1:9d:5c:5b:c4:8b:
                    14:cb:4d:f2:47:6f:5e:57:5a:a7:6e:08:d1:19:0e:
                    e6:90:5b:10:6e:cd:48:b3:30:e8:e6:03:e9:2a:3f:
                    87:03:30:a1:d8:a9:65:8b:1b:11:fc:46:2a:60:16:
                    39:a5:d7:45:9d:ec:50:f1:db:c1:4d:d6:f7:bd:5f:
                    aa:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6E:AC:F9:6A:63:F8:9E:92:52:3D:3B:05:E8:55:F9:84:94:A4:69
            X509v3 Authority Key Identifier:
                keyid:2F:1B:39:F7:F0:A9:E6:2A:A0:60:49:B8:CC:A3:0D:22:F5:2D:04:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:27:cf:86:59:04:8a:bf:80:92:32:c3:57:50:bf:5b:de:b6:
         ae:73:33:c6:a6:71:aa:4d:64:51:99:19:99:ed:f4:7d:33:e0:
         e1:40:47:80:af:02:b5:69:95:50:8d:0e:eb:d9:1d:31:a2:39:
         11:1b:2e:71:77:3f:6e:ae:69:d8:33:28:1a:7b:ca:71:6c:c3:
         8b:7f:6d:64:16:63:f1:de:83:59:a1:48:0d:68:a6:71:ca:c3:
         4d:3a:22:55:7b:ea:d7:de:72:83:1c:dc:f5:40:88:82:52:67:
         bf:66:13:82:1a:d0:5f:95:cb:e6:23:47:9b:e0:57:0a:f2:0a:
         6d:96:65:6e:3a:42:1e:a2:f9:da:e1:91:d3:07:f6:4c:51:e7:
         cf:79:bb:93:ff:2d:48:58:16:33:01:70:2f:cf:5f:69:bc:93:
         03:58:87:6c:e5:18:bb:ab:fd:04:0c:d1:54:15:c6:81:53:5e:
         fa:ff:3d:da:25:db:cc:bb:31:a2:2b:f4:c2:da:f4:1c:2d:aa:
         c3:20:04:4f:4a:30:5c:3d:aa:c0:0c:9b:8b:bf:21:15:80:e0:
         db:f5:2b:94:c7:5f:18:a3:d5:5d:82:f4:be:ff:ea:17:5c:5c:
         01:7a:15:eb:0b:39:6b:d9:cf:17:57:14:4d:0c:cc:8d:df:50:
         21:6d:45:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:18 2025 by rpki-client