Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
File:                     LR08AN6C--6zs4rsMv19LHyamOs.mft (raw, json)
Hash identifier:          y3EaUwbo0thEcq1H+S4pemli64TvAk70Gw+5Q2/GNkI=
Subject key identifier:   9D:E4:5D:87:25:97:9A:98:9C:F4:02:A4:74:78:1F:3D:C8:40:A0:40
Authority key identifier: 2D:1D:3C:00:DE:82:FB:EE:B3:B3:8A:EC:32:FD:7D:2C:7C:9A:98:EB
Certificate issuer:       /CN=2d1d3c00de82fbeeb3b38aec32fd7d2c7c9a98eb
Certificate serial:       0197B6A0B4E7B1C3AA7B0E0193F5E9D01D03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
Manifest number:          02DC
Signing time:             Sat 28 Jun 2025 13:01:14 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:14 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:14 +0000
Files and hashes:         1: LR08AN6C--6zs4rsMv19LHyamOs.crl (hash: 23cMrOLQPF/D7zwwcZL9P2TsW2/861+JBFP6Slm05jA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:b4:e7:b1:c3:aa:7b:0e:01:93:f5:e9:d0:1d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1d3c00de82fbeeb3b38aec32fd7d2c7c9a98eb
        Validity
            Not Before: Jun 28 13:01:14 2025 GMT
            Not After : Jun 29 13:01:14 2025 GMT
        Subject: CN=9de45d8725979a989cf402a474781f3dc840a040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cd:cb:8b:01:84:95:af:51:8a:64:f7:a2:60:
                    b0:14:36:56:0f:7d:de:8b:1c:c8:2a:84:c4:2e:a1:
                    5f:53:bd:23:55:39:7e:2e:11:7b:dd:10:1c:11:1c:
                    23:b4:8f:65:7a:44:f3:e5:5d:78:bd:d4:eb:d2:06:
                    7d:40:5a:9e:d4:33:e6:a4:65:be:c6:81:84:3d:7a:
                    6d:13:94:65:a7:bd:a9:6e:8f:f7:4e:8b:0d:9a:ad:
                    ee:57:70:e1:fb:05:6f:3c:86:90:15:4c:2c:3c:9e:
                    17:ce:39:92:79:e2:f2:be:e9:ed:1e:10:25:ab:6c:
                    b2:f0:94:d7:9e:2b:7c:bd:fa:d0:8a:9e:64:e4:2c:
                    9e:7f:a4:70:fd:a3:88:cc:76:63:e5:9f:58:ef:23:
                    3a:87:6d:ca:69:aa:36:8a:02:1a:10:65:13:ea:95:
                    b4:0a:e1:5b:ee:e6:e6:45:dd:c6:3b:34:56:44:9c:
                    bc:71:3a:68:4d:4c:a8:a9:9e:55:0f:81:50:be:f4:
                    a1:f0:88:0e:00:d0:74:50:12:db:78:cb:f0:75:e9:
                    8e:8e:ec:80:bc:3c:6a:cb:74:92:14:b5:f3:9f:8e:
                    50:36:96:ef:3c:00:79:b6:68:71:e5:83:74:4b:ca:
                    6e:3a:36:f2:57:fb:f7:f6:1a:e0:35:a0:8b:fc:ae:
                    b0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E4:5D:87:25:97:9A:98:9C:F4:02:A4:74:78:1F:3D:C8:40:A0:40
            X509v3 Authority Key Identifier:
                keyid:2D:1D:3C:00:DE:82:FB:EE:B3:B3:8A:EC:32:FD:7D:2C:7C:9A:98:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:d6:1d:c1:28:e9:76:56:16:26:0c:1e:60:da:8a:49:63:97:
         21:ea:b0:82:73:7c:ff:b5:e2:8a:28:6d:82:b6:15:37:82:64:
         58:9a:c8:13:b2:03:f6:4e:40:f0:84:08:db:d6:b5:82:ac:5e:
         34:9d:58:91:c4:93:04:e2:52:f5:56:b6:36:21:7a:94:ca:75:
         78:60:05:0a:43:ca:96:a2:8d:6a:cb:1d:9c:15:da:36:14:44:
         aa:77:c4:12:57:4d:8d:72:aa:26:69:e8:d3:fd:60:eb:af:4f:
         ec:a2:c3:13:4d:a0:34:09:fe:8d:0e:8d:cb:af:d9:e3:1e:d9:
         83:51:d3:a9:46:dd:54:a9:da:d6:eb:5c:ec:c1:98:b6:5a:ee:
         a9:b2:48:c5:69:a9:3c:4d:28:10:a1:8c:08:30:6b:ec:5c:0e:
         49:f9:1d:36:71:fb:e1:4f:32:a4:dc:9d:22:0b:e6:ca:30:2d:
         a2:09:de:b5:bf:51:b9:65:14:fe:03:e2:ad:95:8d:d7:7f:a4:
         34:a3:cc:76:4b:07:29:49:7a:0e:45:58:bb:91:e8:05:2c:5b:
         46:2c:36:07:f7:53:6f:b8:99:7a:e4:12:f0:10:f5:46:d1:2d:
         a7:7e:6d:10:f9:65:e7:76:b2:7b:4b:d0:1e:19:cf:a1:e3:fe:
         c2:2a:0c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:13 2025 by rpki-client