Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
File:                     LS19l0PeLvovYzN4omj1jyqhYFA.mft (raw, json)
Hash identifier:          LiIQX4Sy4qixhH5jRbwKbsdXkg6ppdUOXMZoGkMz+MM=
Subject key identifier:   20:F6:41:0B:4E:59:89:A7:36:DA:63:68:A8:A6:11:A5:F8:8D:1A:02
Authority key identifier: 2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50
Certificate issuer:       /CN=2d2d7d9743de2efa2f633378a268f58f2aa16050
Certificate serial:       0197B6A0F88D13F16EE557CDB1F41D43000E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
Manifest number:          1464
Signing time:             Sat 28 Jun 2025 13:01:32 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:32 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:32 +0000
Files and hashes:         1: 1-buam4cvzrUESLjjB1PACZifMOE.roa (hash: +T6bdmpI7/RrpdxHnXaaldhbLqtyNHZghNENwZHAAMA=)
                          2: 1Xxzpu5NB_tAOFF7vKFky5CdRts.roa (hash: n+JshJ/fSDMDcSDZOom+oloo+zJzlcN/7rhG+Doia9U=)
                          3: LS19l0PeLvovYzN4omj1jyqhYFA.crl (hash: jGAr2HZMuqS+r4Tk4AdkUBGHa/g+ydOxN17O3xTsxtE=)
                          4: fKVvugVq57Vok-HeOBFsVeEq_KY.roa (hash: F7Yehco5YSDWcARYN+I7zPfrg1uSQ0Y+IfgsllPqsIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:f8:8d:13:f1:6e:e5:57:cd:b1:f4:1d:43:00:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2d7d9743de2efa2f633378a268f58f2aa16050
        Validity
            Not Before: Jun 28 13:01:32 2025 GMT
            Not After : Jun 29 13:01:32 2025 GMT
        Subject: CN=20f6410b4e5989a736da6368a8a611a5f88d1a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:77:f8:c9:35:7c:b7:83:c8:56:07:cf:39:b2:
                    e9:f7:ab:a7:dd:d4:6b:d3:71:db:a6:6c:55:71:fd:
                    6f:9f:39:9c:f1:13:a5:c6:04:b0:28:f7:ed:b3:15:
                    f4:06:75:4c:34:3f:c3:81:8b:df:a3:8f:75:84:a7:
                    d0:a4:6a:4a:92:ea:e9:9b:a0:e8:e5:2b:cd:aa:6a:
                    10:c2:82:fd:3f:e5:72:6b:f9:6f:1f:d8:cd:43:4e:
                    83:e0:d8:5f:54:cc:66:83:cd:e7:69:20:42:03:80:
                    28:91:ed:73:8a:89:f0:33:3a:3a:93:02:09:cb:18:
                    3c:69:d1:8c:f6:44:b0:14:99:52:19:e0:79:63:2e:
                    19:b0:0e:b9:7f:0c:9b:e6:75:74:ac:af:d2:4d:ab:
                    8f:97:50:81:4d:41:91:4a:8f:04:68:22:57:1b:15:
                    4e:51:c6:17:94:46:fa:97:ee:6a:0e:34:f4:9e:e2:
                    24:6f:75:32:48:0d:32:c4:98:81:5b:d8:b5:47:bd:
                    17:0a:43:7f:0c:a2:98:29:3f:81:13:5a:1f:09:1f:
                    37:7a:b6:8a:25:c4:f9:54:72:bd:4e:03:f2:d1:99:
                    64:00:16:3e:2a:b0:6a:b8:bd:fb:4c:af:29:2d:ee:
                    3e:0d:f2:9b:27:6f:a2:17:32:cf:a7:61:ba:b1:cd:
                    e9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F6:41:0B:4E:59:89:A7:36:DA:63:68:A8:A6:11:A5:F8:8D:1A:02
            X509v3 Authority Key Identifier:
                keyid:2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:6e:71:7f:28:85:ac:04:46:87:c5:64:76:79:cc:6e:32:9a:
         2d:9f:90:9d:66:63:1e:29:b4:e0:f6:84:47:61:f6:7d:ea:c1:
         db:7c:b1:89:26:73:02:43:3e:90:7a:ef:b1:56:a4:6d:ae:fb:
         ed:2b:11:97:aa:2d:94:fd:9a:5e:d6:2c:2d:73:ec:69:5e:55:
         f3:b8:07:1b:77:d9:e5:18:f1:04:67:cf:ac:92:c2:71:56:cc:
         cb:34:54:bf:9c:5d:a8:63:79:ec:19:5d:7c:4d:63:ca:aa:ec:
         ba:18:a8:65:a8:7b:42:29:29:1d:e1:7c:b9:35:e6:90:51:15:
         77:6e:1a:bc:d2:56:1d:bc:29:69:25:42:e6:84:8d:65:5b:2e:
         d5:03:a3:0f:59:d6:c6:da:d7:34:2e:b9:b2:a3:cc:fb:f4:d7:
         4c:c3:3d:e4:3f:0d:37:f4:01:41:ce:f6:ce:21:e0:c2:42:1f:
         5b:bc:53:d9:5f:33:1c:c2:33:9e:f0:04:13:56:20:12:27:e4:
         aa:e0:ca:df:c5:51:ad:68:21:5e:a1:01:6a:13:82:6e:18:de:
         f5:e6:02:8b:9e:57:ca:51:2d:88:48:99:53:95:14:b4:82:ef:
         b1:a0:4d:32:cf:f4:4e:0c:96:57:55:c4:61:f6:61:0b:f5:cf:
         6f:ed:5e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:43 2025 by rpki-client