Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
File:                     LudClvzo0gvvoYeZ2ubseDHWHFo.mft (raw, json)
Hash identifier:          Atgr7CkzMxgXwfxBfLKnDuEnODlyzeF1iT0go7rQfF4=
Subject key identifier:   35:2D:8A:9C:E2:13:30:C9:79:AE:75:7C:22:48:99:71:71:3F:B2:6E
Authority key identifier: 2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A
Certificate issuer:       /CN=2ee74296fce8d20befa18799dae6ec7831d61c5a
Certificate serial:       0196AFC4FFF901C2A86DFAC2F70AB4F3A5E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
Manifest number:          106E
Signing time:             Thu 08 May 2025 12:00:45 +0000
Manifest this update:     Thu 08 May 2025 12:00:45 +0000
Manifest next update:     Fri 09 May 2025 12:00:45 +0000
Files and hashes:         1: LudClvzo0gvvoYeZ2ubseDHWHFo.crl (hash: Tr5vtMdTY9eZnVMtc0dCc33LCuPJ3G/nVTvEOVkGpus=)
                          2: Rb7F4D-VQenGCJGFIQ0pL_-8SdI.roa (hash: KCwYXkc96nmO8iiK2Z3c2R72L9yE00WdCTlXlazDdHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:af:c4:ff:f9:01:c2:a8:6d:fa:c2:f7:0a:b4:f3:a5:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee74296fce8d20befa18799dae6ec7831d61c5a
        Validity
            Not Before: May  8 12:00:45 2025 GMT
            Not After : May  9 12:00:45 2025 GMT
        Subject: CN=352d8a9ce21330c979ae757c22489971713fb26e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d8:32:9d:1c:68:fd:81:cd:4e:44:49:a8:47:
                    a8:42:fd:df:12:98:3a:e9:ee:a2:6c:fa:f4:40:91:
                    a1:e0:8f:0f:d7:78:87:1a:ae:63:cc:1f:2b:59:0f:
                    75:d7:17:79:7e:79:e6:07:de:7c:b3:74:68:0e:95:
                    b9:34:42:1c:57:c4:37:0a:16:02:8e:8b:30:2e:f3:
                    76:5b:4a:36:0f:67:5e:d4:1b:a8:dc:9b:00:1d:28:
                    32:72:29:c3:c9:ef:2d:b2:2c:e5:83:8a:45:20:c9:
                    f1:83:b8:80:c1:1c:31:7e:2d:d8:11:45:a3:c2:e7:
                    3a:bf:b4:13:c5:f2:32:e5:38:d7:50:cf:0d:f0:26:
                    f6:c9:e7:57:bf:ba:8d:66:d3:30:70:64:b5:a3:3d:
                    d2:35:51:f8:b6:2c:5e:c5:0f:6a:20:e4:d0:24:bd:
                    ad:fb:9e:a0:44:6f:c0:dd:af:a0:60:fe:22:be:62:
                    cf:9d:32:7f:4e:7a:d7:5a:bd:71:14:d5:7a:c8:13:
                    c8:79:b5:35:5f:d5:5a:07:3f:8c:8a:cc:26:88:4b:
                    7b:1c:05:40:8f:7f:aa:13:5f:74:ba:80:80:4c:01:
                    34:43:8d:2f:c9:77:e0:28:a8:39:10:a4:b5:4d:12:
                    97:de:fb:33:85:07:96:06:d3:1f:ce:c4:ff:ba:4a:
                    e0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2D:8A:9C:E2:13:30:C9:79:AE:75:7C:22:48:99:71:71:3F:B2:6E
            X509v3 Authority Key Identifier:
                keyid:2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:17:00:5f:83:5b:75:33:e0:c2:98:00:26:fb:4d:55:a1:33:
         7d:58:c0:56:4b:94:23:61:cb:61:3d:b3:55:c9:af:ef:90:e1:
         33:5e:73:ff:4d:99:07:a2:cc:b1:fa:50:f0:36:76:93:c4:72:
         48:2d:1a:2a:9a:fc:6a:f8:3a:10:f0:87:55:75:c6:8a:53:8a:
         f6:f3:47:f6:a0:62:6d:cf:e0:86:90:86:39:c5:14:f6:ec:db:
         92:45:b3:14:eb:d5:4e:35:af:2a:41:70:82:c9:a5:66:89:6b:
         71:53:d0:f0:58:0d:76:a1:0c:7f:2f:83:f6:43:c2:b6:41:04:
         ca:54:e8:d3:5b:52:df:1e:d5:79:bb:29:75:3f:bc:29:84:82:
         cb:6f:34:1c:85:ad:de:6e:a2:43:9c:44:21:0f:62:49:f2:9b:
         d7:3c:b5:ab:cc:00:b6:6b:96:b8:4d:a8:ee:0d:83:18:d2:80:
         6f:77:12:a0:dd:0d:53:0c:9c:f7:96:f3:c0:82:c0:29:46:64:
         87:2e:a9:9e:e9:57:62:4b:c2:4d:b3:b0:14:59:60:fb:4e:74:
         06:68:98:b0:8c:42:df:a9:21:d0:a2:7c:63:77:87:c7:46:b1:
         28:43:9e:f4:8c:fd:a8:25:6f:07:d8:b1:82:18:5f:a8:a4:df:
         50:d9:5c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:38:29 2025 by rpki-client