Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
File:                     lSGiYvUHXiSys8m2nIr0DimIoeQ.mft (raw, json)
Hash identifier:          S8E0OHAB276I/0DpAln7OMEHLnVuDguNA+eYHJ0KwOM=
Subject key identifier:   6D:40:32:49:1E:B8:63:11:CA:03:69:71:09:5C:D7:17:9A:E3:25:A1
Authority key identifier: 95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
Certificate issuer:       /CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Certificate serial:       0198737436374386995C431621F902EB947A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
Manifest number:          0337
Signing time:             Mon 04 Aug 2025 05:00:52 +0000
Manifest this update:     Mon 04 Aug 2025 05:00:52 +0000
Manifest next update:     Tue 05 Aug 2025 05:00:52 +0000
Files and hashes:         1: Lpcsk8pQMiEPT6ApZhOXx9JAafQ.roa (hash: UQY6sisXum2gKK35fkWx14SykCBKN5d6dEz3tT5FKwk=)
                          2: lSGiYvUHXiSys8m2nIr0DimIoeQ.crl (hash: Lky46RPehc+zqqTIpfXRTQsdAgkdzlONn3K1QDEHYBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:36:37:43:86:99:5c:43:16:21:f9:02:eb:94:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
        Validity
            Not Before: Aug  4 05:00:52 2025 GMT
            Not After : Aug  5 05:00:52 2025 GMT
        Subject: CN=6d4032491eb86311ca036971095cd7179ae325a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ca:46:f5:9a:19:2c:f5:9a:c5:42:87:9f:b8:
                    ff:bc:c3:3a:aa:c9:f1:07:5c:76:d9:ed:59:ae:e8:
                    d9:b8:44:34:0d:96:2b:f2:b5:28:a5:4c:82:1a:c3:
                    13:05:10:12:11:9a:c3:5c:40:6c:3e:d5:60:a1:7a:
                    09:6d:37:6b:d5:41:df:b6:00:d5:5b:99:35:20:b2:
                    05:d2:38:1b:da:84:a9:1a:46:b9:fa:d9:3c:05:10:
                    50:34:71:c6:21:d5:92:2b:8c:bf:87:7d:5c:91:ce:
                    ba:1b:06:cd:d2:22:7c:e6:a9:27:8c:2f:8c:26:5a:
                    03:63:6d:8a:8d:a5:56:2f:b2:d9:08:9f:d9:33:7b:
                    c8:f4:5c:4c:3e:d2:a7:7e:13:a0:16:37:65:91:02:
                    80:5b:6a:11:ba:56:c5:2e:14:b7:3f:50:28:ec:1d:
                    ac:01:91:e1:41:47:7f:32:f6:88:ac:19:de:71:16:
                    be:08:1d:88:18:f1:b1:25:b8:74:9f:da:9d:cc:eb:
                    2b:93:92:7f:2b:f2:e3:f7:3b:5a:3d:ac:93:2a:99:
                    97:32:4a:64:d5:de:7f:7b:10:5d:27:b5:fe:01:b9:
                    d0:0a:0d:44:46:31:07:1b:90:34:0e:1f:72:d5:1a:
                    d7:b7:1e:54:42:20:90:84:87:af:2c:80:d7:09:08:
                    c4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:40:32:49:1E:B8:63:11:CA:03:69:71:09:5C:D7:17:9A:E3:25:A1
            X509v3 Authority Key Identifier:
                keyid:95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:1f:cd:95:90:88:4b:f5:cc:a3:f0:56:62:7a:c9:e7:2b:3a:
         5b:98:7b:2e:df:61:0b:3e:54:c7:5e:3f:cb:cf:f9:cc:8d:a6:
         ce:9e:7b:54:d7:28:a8:39:49:a8:dd:20:29:e1:ae:1f:74:19:
         b0:81:ee:33:b8:f1:93:2c:93:8f:fe:d9:92:79:18:7c:0c:bf:
         3e:f8:cf:7c:3d:ae:3b:1b:96:b9:d5:70:46:03:5e:1f:7a:6b:
         9e:64:02:5d:15:62:47:2c:91:29:fe:98:68:2e:58:8e:9d:3c:
         53:cd:6d:0d:d1:37:a9:6f:8c:ea:8b:23:9a:9e:e3:e9:42:ad:
         ba:b0:cd:57:cd:21:1d:01:10:d0:b4:00:9a:83:b8:88:23:0d:
         b9:7d:99:cc:ac:65:f4:20:66:68:db:bb:fc:e1:33:cd:ab:a0:
         4c:a0:84:e0:0d:7d:89:fa:e0:5d:f6:14:c5:0d:aa:2d:47:d9:
         6c:68:31:6f:f7:7b:73:d5:b8:f7:47:d3:be:09:19:23:83:e2:
         6f:70:90:35:92:55:c3:2e:af:44:21:cd:fb:96:52:41:2e:60:
         d6:03:f2:dc:18:61:b1:54:82:4f:78:cb:37:ae:65:73:3d:bb:
         a4:5e:4f:26:9e:e0:29:2b:8b:a1:54:18:53:a8:1a:8d:ef:1d:
         89:57:54:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:20 2025 by rpki-client