Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
File:                     LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft (raw, json)
Hash identifier:          cjkn1JcK2hmVCLIY1qy1ivr4G1GLWGZQFHwZUQeIvvk=
Subject key identifier:   BD:27:E0:1C:D2:F9:52:5A:3F:25:95:DE:6F:EF:75:A0:52:F8:BA:4D
Authority key identifier: 2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF
Certificate issuer:       /CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf
Certificate serial:       0197C425DD004C3F1D4CAEC3EC3DA85B3205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
Manifest number:          0EF0
Signing time:             Tue 01 Jul 2025 04:01:45 +0000
Manifest this update:     Tue 01 Jul 2025 04:01:45 +0000
Manifest next update:     Wed 02 Jul 2025 04:01:45 +0000
Files and hashes:         1: LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl (hash: kdYbuwFHSaiSFimPZLxTM0u9vZqnTmXsUg+R0fuRY6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 04:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c4:25:dd:00:4c:3f:1d:4c:ae:c3:ec:3d:a8:5b:32:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf
        Validity
            Not Before: Jul  1 04:01:45 2025 GMT
            Not After : Jul  2 04:01:45 2025 GMT
        Subject: CN=bd27e01cd2f9525a3f2595de6fef75a052f8ba4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4a:b4:f1:4e:b3:0c:6b:57:a3:ff:6a:a1:58:
                    b5:ca:b3:61:a7:74:a2:ee:e0:0a:de:4f:8a:c8:ae:
                    39:7c:39:37:38:a9:4a:b7:a0:c6:94:4f:e4:7f:a3:
                    8c:cf:a5:af:26:ab:33:0d:36:2f:c7:dd:97:0a:57:
                    ec:55:00:79:e5:9a:42:fb:c6:15:e2:6f:49:8a:ac:
                    2f:bb:f1:13:33:7c:eb:17:56:6b:3b:00:81:44:c2:
                    bd:f8:ee:f6:f8:d9:44:fb:02:10:35:e4:a7:65:9b:
                    f3:e3:46:1a:15:ae:81:a7:89:69:f8:b1:3a:47:5e:
                    6c:45:9a:63:e2:ea:8b:77:03:ff:8f:e9:78:b6:02:
                    c3:0b:ac:d9:06:2a:d7:d4:36:72:58:47:e6:a3:31:
                    ff:dd:bb:87:53:88:e7:98:14:a3:b6:c0:fa:86:ea:
                    db:dd:1d:6e:80:e9:be:15:3c:1b:17:d7:21:c6:5e:
                    9a:8e:5c:74:08:ed:4c:94:03:0a:ca:0c:29:c2:38:
                    2e:fa:52:91:f7:14:17:62:88:61:22:d3:22:40:36:
                    49:07:4a:35:07:a2:cb:14:c8:4a:d5:31:4a:32:e4:
                    67:56:19:fb:d4:0d:d7:ce:22:a0:3e:34:a9:b4:1e:
                    d4:34:01:b8:9c:14:7e:83:cc:82:44:4b:3d:0f:31:
                    a3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:27:E0:1C:D2:F9:52:5A:3F:25:95:DE:6F:EF:75:A0:52:F8:BA:4D
            X509v3 Authority Key Identifier:
                keyid:2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e9:1f:82:36:26:0e:98:ce:b8:f4:4f:f0:30:c4:86:e3:29:
         d3:2f:b4:ba:82:3d:c8:e4:e6:bb:a9:ed:60:4d:c3:35:bf:70:
         6a:27:e7:46:01:ba:2c:5b:f9:b9:d9:bb:19:b4:88:90:8a:d1:
         28:e8:62:5f:7b:31:df:36:8c:ba:4c:fa:ec:14:46:f2:27:ed:
         37:1c:2d:9f:e3:c1:4c:bb:92:f5:91:90:8b:6a:b6:80:10:1c:
         61:a9:fe:9f:2a:19:f5:8d:f5:53:8c:65:d9:0b:35:ee:97:25:
         8d:d8:70:79:bc:7a:98:6e:56:76:a7:9f:b8:f4:0e:12:5c:e4:
         5b:5b:de:34:15:51:4a:8c:32:37:8b:a9:ba:50:48:a4:bf:3e:
         ef:d4:90:93:27:f7:52:89:ef:13:f9:24:1f:65:a3:c2:c7:f8:
         da:71:42:37:2e:16:74:45:a3:80:06:b4:9d:fd:bc:1e:78:84:
         cd:43:3c:fa:81:cd:f1:9a:43:1b:89:8f:3c:01:e8:fe:07:38:
         e9:07:07:19:b5:20:d3:43:b2:fa:bd:aa:ae:3a:e5:bb:14:a4:
         ab:63:9f:4c:34:8f:36:65:cf:f7:03:bd:a3:23:00:99:28:ea:
         e3:18:89:84:96:66:cb:5f:af:f1:df:a3:7a:b7:8d:9f:e2:ee:
         87:93:79:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:09:47 2025 by rpki-client