Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
File:                     LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft (raw, json)
Hash identifier:          wt8UQGakxfISdjKfOkmAuj72Wy5p4jpvYPo4/Mj/9so=
Subject key identifier:   78:7E:1E:56:20:D3:3B:C9:04:44:3C:D9:8C:6B:AA:EB:08:CA:01:F3
Authority key identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
Certificate issuer:       /CN=2e481909559480d248490d8e1d71c3c093b05fe5
Certificate serial:       0197C8392C3CE2EC86068003379F7B591B64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
Manifest number:          15BA
Signing time:             Tue 01 Jul 2025 23:01:19 +0000
Manifest this update:     Tue 01 Jul 2025 23:01:19 +0000
Manifest next update:     Wed 02 Jul 2025 23:01:19 +0000
Files and hashes:         1: LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl (hash: ibfNW1NB4w6bJOsGjcuaW5LngIyJpAKo+5jaIKjHhK8=)
                          2: pRiOuP5ZVMbih8_UbkXq1OLRH1c.roa (hash: TjkUGx8VVF7JIz25EEx+I/z8EyX0AiRRScQg07c6hKc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c8:39:2c:3c:e2:ec:86:06:80:03:37:9f:7b:59:1b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e481909559480d248490d8e1d71c3c093b05fe5
        Validity
            Not Before: Jul  1 23:01:19 2025 GMT
            Not After : Jul  2 23:01:19 2025 GMT
        Subject: CN=787e1e5620d33bc904443cd98c6baaeb08ca01f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f8:e7:0c:b3:3a:c9:94:6a:4d:19:94:fd:38:
                    a2:e0:b2:07:3f:c6:13:8a:d6:2d:13:9b:94:66:1e:
                    1c:30:47:3c:de:42:9f:e3:89:a6:aa:2b:bd:0a:51:
                    ee:22:59:ba:5b:33:1b:d5:54:1e:5f:14:5a:e2:31:
                    e0:ed:50:0e:95:40:54:4a:e2:a6:9c:b8:84:e0:c0:
                    21:90:7b:91:7e:a0:d5:09:fa:db:3e:0a:6e:bd:56:
                    fb:4d:8d:d8:1b:0d:8e:7a:21:33:68:43:04:82:3f:
                    40:4b:01:7c:36:4e:40:3c:86:3d:87:72:81:d3:d9:
                    37:7a:bd:3a:2c:e6:a6:6a:23:87:fa:64:11:e8:74:
                    b8:b8:aa:39:b4:06:63:18:69:45:30:d2:fd:6f:cd:
                    31:cd:28:9e:ca:c6:2d:0a:c7:72:97:a6:ec:77:4e:
                    43:7c:bd:98:52:c8:6f:d4:8c:5c:74:ab:4f:37:9a:
                    bf:4a:1f:1c:c0:94:68:0f:85:fd:7b:59:47:88:04:
                    06:f5:bf:2b:22:e3:6b:f8:06:38:ea:05:03:7f:5a:
                    f2:e4:99:b7:53:a7:cd:77:3c:6b:06:97:88:81:3d:
                    21:f6:c0:6b:ac:a2:50:2c:e0:9a:a0:c1:7e:29:a0:
                    1e:34:6c:43:db:cb:17:ea:b4:49:0c:ca:f5:96:dc:
                    06:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7E:1E:56:20:D3:3B:C9:04:44:3C:D9:8C:6B:AA:EB:08:CA:01:F3
            X509v3 Authority Key Identifier:
                keyid:2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:3c:5d:42:28:68:84:7a:b2:62:43:86:7e:fe:94:79:4f:cb:
         04:95:1d:ce:60:c5:13:f5:11:49:8c:dc:9b:91:48:6c:59:a9:
         a4:00:ef:de:08:5a:16:02:ef:3d:24:40:99:96:61:e6:22:a8:
         ec:1d:c8:f4:fc:af:6e:e9:65:7c:02:16:76:61:a6:aa:19:db:
         c2:7f:7c:3c:52:da:64:63:81:1b:e4:46:0d:0c:7a:7e:0b:19:
         60:96:29:d4:67:0f:c0:5b:a9:73:26:84:71:af:88:ec:33:f8:
         3d:96:bc:d2:b2:4b:62:0b:42:ad:8a:d1:61:de:c2:d2:4c:5b:
         ad:99:2f:c6:fd:59:52:55:37:b4:de:af:2d:7d:e4:a1:f9:53:
         b3:b9:6c:ce:71:b2:95:2c:9c:aa:2e:db:46:c0:b7:eb:65:db:
         82:8c:c5:76:3a:8f:67:f1:07:37:00:00:4c:2d:16:0c:4b:f4:
         d4:5c:9d:52:a3:c9:0f:01:65:f2:e2:26:d1:51:f9:1a:db:3a:
         fb:b0:c8:5f:20:f4:75:b3:13:1d:b4:0f:e1:21:8d:63:67:40:
         9f:d6:46:06:be:10:16:25:5b:34:15:28:fb:d1:c5:d1:df:ac:
         a7:70:45:3b:ea:6b:78:4f:07:9f:53:34:ec:1e:37:8e:23:2c:
         a6:db:a1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:43:45 2025 by rpki-client