Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
File:                     LgojFvTptYqlLe7lx9H0uER27IY.mft (raw, json)
Hash identifier:          aFuX5BQJxqNSxrUoWL12LuL7ypKVI/fX/nQ7JpC/DXU=
Subject key identifier:   55:1C:3C:1A:79:7F:8C:FC:DA:D4:A0:A1:5D:7D:BD:73:99:AF:55:9C
Authority key identifier: 2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86
Certificate issuer:       /CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
Certificate serial:       0197B6A19255EF7B2C20FBC87B4FE52E0FB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
Manifest number:          0496
Signing time:             Sat 28 Jun 2025 13:02:11 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:11 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:11 +0000
Files and hashes:         1: LgojFvTptYqlLe7lx9H0uER27IY.crl (hash: 6J5VXIKC7RLV43azzSK8uZgdzjSWw7lpZ8YSarZUtrY=)
                          2: vD_wlkgUOjWQBEijGo7zeI_oZVI.roa (hash: IGyJ6LlIsYwYqLNNokHWFdPflPgBGjUNsyBItLlUI9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:92:55:ef:7b:2c:20:fb:c8:7b:4f:e5:2e:0f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
        Validity
            Not Before: Jun 28 13:02:11 2025 GMT
            Not After : Jun 29 13:02:11 2025 GMT
        Subject: CN=551c3c1a797f8cfcdad4a0a15d7dbd7399af559c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:47:89:84:c4:4b:88:07:69:ea:4f:02:ca:7e:
                    25:79:9a:67:c0:23:91:53:c8:ee:4b:e0:a7:f8:06:
                    5a:42:6a:a9:2f:72:2d:ed:03:12:7b:05:58:74:51:
                    d7:6f:c3:7f:b0:74:56:70:ce:47:21:ff:7e:71:4a:
                    18:8b:e4:23:fd:0c:47:5d:79:50:0b:56:9e:96:26:
                    20:fe:1a:a2:d4:1f:31:33:91:04:b1:2f:3c:6e:78:
                    00:15:e4:98:14:a7:3c:ef:19:ce:4c:5a:05:1a:1b:
                    c1:8b:cf:fe:d3:42:20:8c:f3:86:72:c6:ef:ac:36:
                    89:23:33:29:9f:e3:48:be:90:c7:c3:6f:81:ba:37:
                    f5:5b:a6:34:d8:e0:6d:74:19:9b:a2:67:82:47:10:
                    36:43:8c:88:32:81:80:a8:7c:e3:35:d3:64:b5:45:
                    b7:cf:5a:6e:c2:f1:78:79:5f:71:35:1a:a1:8a:4e:
                    fa:e7:a1:1f:67:c7:20:24:19:00:27:20:75:62:c3:
                    dc:13:ff:7d:c2:e9:36:1c:d9:bd:04:21:36:88:73:
                    13:2d:6a:ec:fb:f9:16:90:c2:87:49:7c:8c:34:46:
                    53:da:ca:23:c9:e3:36:20:a7:21:0c:23:36:7a:a1:
                    b8:72:3f:a5:2c:d9:42:ca:4a:b7:d3:72:71:49:96:
                    85:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1C:3C:1A:79:7F:8C:FC:DA:D4:A0:A1:5D:7D:BD:73:99:AF:55:9C
            X509v3 Authority Key Identifier:
                keyid:2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:c1:33:cf:85:6f:fb:7c:61:93:c3:57:8b:35:86:35:b3:14:
         f8:36:4e:0f:42:a8:80:90:a6:35:73:cd:10:a3:e0:60:05:86:
         ad:63:37:9f:c1:f3:54:bd:44:1f:8c:4b:08:37:76:3d:fa:e9:
         e1:32:3b:6c:c4:fc:dd:55:f5:8b:db:3b:4f:a0:cf:c7:42:75:
         aa:cf:4b:6f:b4:26:a1:58:ed:a4:23:bb:65:d1:db:59:84:85:
         c1:9b:92:22:a6:fd:12:03:06:d2:aa:88:b8:69:ec:bb:f1:01:
         67:47:15:ca:22:e5:42:72:6b:3e:93:77:ed:f3:b6:80:87:41:
         92:89:40:7d:71:28:cb:9d:40:4e:d2:c5:43:10:99:5b:9f:6f:
         2c:9a:73:79:88:00:39:30:2c:3e:0e:f8:33:27:19:c5:cd:5b:
         fc:36:8a:7b:98:e5:ef:11:90:d4:02:3d:29:e1:d7:5c:4b:91:
         58:ca:5a:fe:bc:2e:a7:d1:e0:b7:2d:f9:d1:d6:04:13:91:55:
         06:fb:cb:2a:29:78:49:40:6f:dc:57:b4:9e:3e:ba:8f:d5:20:
         15:8b:72:4b:d0:f2:35:7d:2c:b8:25:f8:df:35:6d:57:7f:00:
         73:40:8c:b9:bf:9b:47:62:02:df:61:b5:49:6e:e6:be:b2:27:
         a5:af:ed:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:29 2025 by rpki-client