Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
File:                     LysmxVJWMAYhPP5IFKncKg_Bb0M.mft (raw, json)
Hash identifier:          gLP8myvjRXYzqYZWtMN0bubTfrNaz4Flag1qbazUXR8=
Subject key identifier:   28:A6:03:1F:F6:03:C3:50:28:43:5C:52:09:1E:AE:93:15:6C:09:A3
Authority key identifier: 2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
Certificate issuer:       /CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Certificate serial:       0197B89036723254B75E6D886EEFCDD85F03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
Manifest number:          07B4
Signing time:             Sat 28 Jun 2025 22:02:28 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:28 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:28 +0000
Files and hashes:         1: LysmxVJWMAYhPP5IFKncKg_Bb0M.crl (hash: jA7F8a79Dp8fawr0JqCyL3iZheqLVGouF7glP8P85G0=)
                          2: W6QOjqpakncZ5btUn_LFYWHRhQI.roa (hash: 0Tpx1buqzp+SVfsKSz/Tn137XUEd3v/VStC3KMX88hA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:90:36:72:32:54:b7:5e:6d:88:6e:ef:cd:d8:5f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
        Validity
            Not Before: Jun 28 22:02:28 2025 GMT
            Not After : Jun 29 22:02:28 2025 GMT
        Subject: CN=28a6031ff603c35028435c52091eae93156c09a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:41:b2:ca:ed:05:01:d7:8f:5b:1e:b8:86:7f:
                    60:9f:59:5c:60:e1:6e:cc:14:27:5b:7e:11:41:6a:
                    ff:bc:c6:af:86:5e:d5:0f:6d:58:c7:19:16:af:5b:
                    26:41:e9:7a:f9:2a:d8:e4:24:b0:34:57:a6:86:d9:
                    c8:69:fd:6c:43:db:cf:90:10:cf:b4:7c:c7:57:2f:
                    13:4a:67:5f:83:45:33:17:49:3d:1c:92:af:98:d4:
                    63:1e:5b:11:26:ff:91:5a:ba:ed:f6:fc:68:82:f3:
                    1c:6b:04:43:fa:b8:3e:ec:18:67:96:37:9a:14:62:
                    d7:64:8d:6e:11:c6:4e:fe:74:63:c3:a5:f1:0d:64:
                    4e:fe:f0:67:3f:2c:43:5c:b2:30:f7:31:b9:4a:50:
                    62:f4:26:82:89:ba:c3:1f:eb:92:91:05:cf:9c:76:
                    6a:1f:ba:3d:10:02:35:88:70:d3:9d:e6:2f:99:54:
                    7b:83:54:32:a6:d9:d1:3c:61:2f:a0:d1:4c:e1:1f:
                    59:7d:d9:a9:d9:1b:4e:96:cb:72:8c:b3:52:8f:9c:
                    c4:0f:3d:55:56:64:7e:ba:7b:c2:e1:48:30:56:0f:
                    22:b3:4d:d1:07:98:cc:b5:7d:4e:2c:40:88:b3:c7:
                    74:1c:db:b6:55:b8:21:83:01:91:2e:34:5e:ac:ae:
                    8a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A6:03:1F:F6:03:C3:50:28:43:5C:52:09:1E:AE:93:15:6C:09:A3
            X509v3 Authority Key Identifier:
                keyid:2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:bb:2b:37:ce:eb:61:c2:a2:32:e1:aa:a2:e2:25:f3:62:29:
         ba:6b:d8:4e:71:db:14:2a:a9:30:99:6a:57:68:6a:87:6d:3b:
         62:80:87:8b:0c:7a:8d:8e:6d:6d:9b:bb:38:03:0a:77:46:67:
         f4:27:f1:71:d5:7c:ce:2b:22:3f:24:09:65:47:37:b7:ee:c0:
         35:b3:2f:57:94:79:79:dd:4a:94:0e:a1:4e:29:55:fb:8d:19:
         11:1e:65:ad:b9:ef:94:18:c7:21:87:b2:c1:dc:38:38:ac:27:
         a9:82:05:eb:70:33:e4:60:b3:19:6f:ce:99:de:9d:88:dc:40:
         f9:1a:a0:ce:d4:ab:a6:86:3d:61:c1:31:45:d9:19:d9:f9:b0:
         c7:61:27:61:5b:d8:e2:61:a9:36:7c:2d:a8:3a:cc:85:ac:75:
         28:15:19:17:d6:7f:59:1b:74:2d:16:33:42:98:66:3c:8e:89:
         cd:ec:c0:91:a3:18:81:35:c1:d5:7f:7c:57:f4:b4:33:cf:16:
         ce:0a:29:50:43:75:59:92:be:63:e4:0b:43:41:2e:58:9c:3c:
         23:d7:5e:0d:fb:d2:dc:a0:50:93:aa:e3:c4:94:61:5e:9e:89:
         a9:b6:e9:43:c6:4f:b4:eb:a8:f4:f4:fe:d5:4e:39:ba:6b:36:
         c7:9b:a9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:09:57 2025 by rpki-client