Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
File:                     LXR59FZDorguENq_c-_vdwOx4tI.mft (raw, json)
Hash identifier:          GDCug3ljIe5sPgndq32u4cxkqp/nAwF9mPHNuTjnABs=
Subject key identifier:   0A:C4:E0:11:DF:03:69:32:64:B3:85:C3:D3:7C:BD:D9:FE:6A:8B:80
Authority key identifier: 2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2
Certificate issuer:       /CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2
Certificate serial:       0197B70EE0D8089CE5209E62965B65245F18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 15:01:34 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:34 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:34 +0000
Files and hashes:         1: LXR59FZDorguENq_c-_vdwOx4tI.crl (hash: gcgWeeGzKOnp3ntAMLzp6aEc6njZ3Cs0GGsuOVSeTjw=)
                          2: unRbkKxOnR98ml1J5g6bUjmiKYg.roa (hash: dSoLjUhYv2hRLBN1CZDtznSmSO++ZyOw/lIWfxfiQjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:e0:d8:08:9c:e5:20:9e:62:96:5b:65:24:5f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2
        Validity
            Not Before: Jun 28 15:01:34 2025 GMT
            Not After : Jun 29 15:01:34 2025 GMT
        Subject: CN=0ac4e011df03693264b385c3d37cbdd9fe6a8b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:22:37:1b:53:45:9c:69:ab:c6:fa:e3:5f:16:
                    d8:59:82:10:fd:59:f7:99:ce:c8:03:f9:52:6b:1b:
                    77:dd:55:bb:60:16:6d:8b:0c:26:38:f3:f1:11:a7:
                    4e:1f:7a:60:25:cf:09:42:7c:08:30:bc:52:18:eb:
                    ce:d6:28:c5:79:b9:5e:92:ac:7c:bb:aa:17:2f:97:
                    31:2e:20:92:9b:8b:1a:02:e0:09:5f:33:4d:97:ec:
                    22:e4:a6:f9:ed:44:ea:ad:fc:15:1b:02:fc:3a:4b:
                    c2:14:a8:97:84:3b:60:75:73:d9:e5:1a:18:2e:2b:
                    36:d0:da:99:de:5f:72:8b:45:0e:17:8b:6c:ca:ac:
                    26:70:1a:f5:14:71:4d:52:ab:95:b1:66:6b:90:c1:
                    b6:d7:2f:ef:67:26:b8:fc:27:f0:38:2e:c6:eb:6c:
                    3b:9b:9f:cb:97:b6:d4:e8:0e:05:c1:c6:c9:76:0f:
                    0b:af:63:89:a8:61:85:72:db:b4:37:fe:45:a6:b0:
                    65:d9:1e:2a:20:87:7c:63:5d:9e:19:31:46:5b:b0:
                    9e:78:2c:01:85:36:6a:b5:3f:b8:b3:02:1e:b9:41:
                    fc:da:9f:b5:c1:e2:51:9d:5c:be:c7:fe:76:45:39:
                    27:63:20:8d:2b:84:fd:54:e0:de:51:47:b2:06:d1:
                    a8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C4:E0:11:DF:03:69:32:64:B3:85:C3:D3:7C:BD:D9:FE:6A:8B:80
            X509v3 Authority Key Identifier:
                keyid:2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ec:2d:55:df:40:90:0f:ec:70:35:42:07:61:f0:17:35:ac:
         d3:9e:32:74:48:8d:fc:23:97:a4:80:cf:cc:e3:16:63:b6:6f:
         c4:12:38:84:e7:c2:2e:16:64:64:41:a0:1d:6b:6c:c5:03:10:
         a8:4f:b7:07:eb:5c:ae:0e:f6:be:ad:be:22:e0:9e:d4:d5:75:
         ae:08:ba:cf:94:5e:07:83:b0:77:1a:64:80:35:a4:ec:2b:51:
         7c:65:a4:d7:46:e6:39:ce:88:e0:31:52:48:11:8e:57:f8:15:
         6f:31:0a:96:f5:c8:e4:19:a4:53:88:07:b3:c4:08:98:34:85:
         44:52:67:47:48:b7:5e:36:1c:8e:f9:d4:47:fe:91:d8:4e:c5:
         03:dc:3f:45:ed:63:2d:32:9f:aa:9d:cf:72:19:8a:3d:9d:28:
         95:2a:c9:00:4a:df:5d:74:2c:4f:66:4e:b4:c9:57:55:cf:10:
         bf:17:df:2b:ac:d2:b3:ec:23:79:5d:39:e9:f8:60:b6:e6:71:
         20:a8:07:b7:53:6a:a8:45:c6:44:19:82:3e:c7:1d:12:34:6a:
         e2:8e:50:26:66:2d:b2:aa:d3:bf:62:b8:0d:bd:21:17:c3:16:
         96:9d:80:80:32:65:cd:ef:5a:4b:bc:9b:e0:64:b5:20:10:45:
         b3:4e:e3:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DuDYCJzlIJ5illtlJF8YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNzQ3OWY0NTY0M2EyYjgyZTEwZGFiZjczZWZlZjc3MDNi
MWUyZDIwHhcNMjUwNjI4MTUwMTM0WhcNMjUwNjI5MTUwMTM0WjAzMTEwLwYDVQQD
EygwYWM0ZTAxMWRmMDM2OTMyNjRiMzg1YzNkMzdjYmRkOWZlNmE4YjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSI3G1NFnGmrxvrjXxbYWYIQ/Vn3
mc7IA/lSaxt33VW7YBZtiwwmOPPxEadOH3pgJc8JQnwIMLxSGOvO1ijFeblekqx8
u6oXL5cxLiCSm4saAuAJXzNNl+wi5Kb57UTqrfwVGwL8OkvCFKiXhDtgdXPZ5RoY
Lis20NqZ3l9yi0UOF4tsyqwmcBr1FHFNUquVsWZrkMG21y/vZya4/CfwOC7G62w7
m5/Ll7bU6A4FwcbJdg8Lr2OJqGGFctu0N/5FprBl2R4qIId8Y12eGTFGW7CeeCwB
hTZqtT+4swIeuUH82p+1weJRnVy+x/52RTknYyCNK4T9VODeUUeyBtGo5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArE4BHfA2kyZLOFw9N8vdn+aouAMB8GA1UdIwQY
MBaAFC10efRWQ6K4LhDav3Pv73cDseLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFhSNTlGWkRvcmd1RU5xX2MtX3Zkd094NHRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85ZGZlMWUtY2Q3NC00NzFlLTkxYmYt
MGZjM2ZkY2Y1OWFlLzEvTFhSNTlGWkRvcmd1RU5xX2MtX3Zkd094NHRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85ZGZlMWUtY2Q3NC00NzFlLTkxYmYtMGZjM2ZkY2Y1OWFl
LzEvTFhSNTlGWkRvcmd1RU5xX2MtX3Zkd094NHRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+wtVd9A
kA/scDVCB2HwFzWs054ydEiN/COXpIDPzOMWY7ZvxBI4hOfCLhZkZEGgHWtsxQMQ
qE+3B+tcrg72vq2+IuCe1NV1rgi6z5ReB4OwdxpkgDWk7CtRfGWk10bmOc6I4DFS
SBGOV/gVbzEKlvXI5BmkU4gHs8QImDSFRFJnR0i3XjYcjvnUR/6R2E7FA9w/Re1j
LTKfqp3PchmKPZ0olSrJAErfXXQsT2ZOtMlXVc8QvxffK6zSs+wjeV056fhgtuZx
IKgHt1NqqEXGRBmCPscdEjRq4o5QJmYtsqrTv2K4Db0hF8MWlp2AgDJlze9aS7yb
4GS1IBBFs07jPg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:28 2025 by rpki-client