Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
File:                     LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft (raw, json)
Hash identifier:          pUHkzfnRbUiWdI7gE6DDPlebdCnFODNqVEx9KST9Jmo=
Subject key identifier:   8B:C6:3A:09:5F:54:AF:79:14:55:5B:DE:B9:8A:36:C1:F5:F0:45:DE
Authority key identifier: 2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F
Certificate issuer:       /CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
Certificate serial:       01976CCFACCDE6653EBB07BEA1FCA1CA98C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
Manifest number:          0195
Signing time:             Sat 14 Jun 2025 05:00:38 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:38 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:38 +0000
Files and hashes:         1: 0XZQM4HI3XhlmYvdoGd0b4phC5w.roa (hash: U0I63h+zWa/76rG6uJx/JmYr6Xgzo7IgH0GTSgv+Tfg=)
                          2: LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl (hash: 16ixrmT3aPktwU3tJv4MBkGe/mHvrZNDG/52nmvnEjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:ac:cd:e6:65:3e:bb:07:be:a1:fc:a1:ca:98:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
        Validity
            Not Before: Jun 14 05:00:38 2025 GMT
            Not After : Jun 15 05:00:38 2025 GMT
        Subject: CN=8bc63a095f54af7914555bdeb98a36c1f5f045de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:81:35:85:2e:b6:73:c9:4e:af:5e:7e:73:98:
                    cf:fb:fb:b1:9c:95:e0:74:60:4e:99:03:88:d5:8d:
                    a4:64:f9:aa:fc:f5:7e:5a:48:ed:da:37:4c:ce:64:
                    3d:e2:b2:b6:16:52:23:7a:78:82:1b:14:79:ab:9f:
                    79:86:6e:cb:28:85:e9:f0:d2:af:e7:c1:0f:38:ae:
                    9b:26:8c:51:f4:0e:e9:44:bd:8b:81:ef:77:a7:de:
                    60:59:c0:88:6b:71:69:38:2f:e1:d6:8d:be:2c:93:
                    73:2b:62:cc:23:e4:77:15:be:da:56:a6:0a:ec:e5:
                    af:8e:b1:6d:a5:6a:47:b2:cf:13:ac:b6:f1:3d:d2:
                    5e:3d:88:35:e7:de:9d:7b:aa:ce:ff:57:c9:39:f3:
                    69:8c:8b:36:26:b8:f4:67:0d:2e:7d:93:0c:a3:1b:
                    a4:77:cf:af:25:1d:e8:09:67:2f:4c:3f:e8:9a:26:
                    fb:a3:b7:f3:30:04:b8:84:22:a6:0b:77:38:7f:fc:
                    f6:43:3a:bd:4b:b1:21:26:cb:b9:76:3c:a2:e5:3a:
                    27:47:ea:0d:05:ad:96:91:83:70:03:a8:65:d4:00:
                    03:9c:83:c6:1e:50:50:f3:2d:4e:16:53:a1:ec:86:
                    52:44:eb:29:40:4e:94:4e:82:0a:2e:a6:5a:f5:26:
                    9f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C6:3A:09:5F:54:AF:79:14:55:5B:DE:B9:8A:36:C1:F5:F0:45:DE
            X509v3 Authority Key Identifier:
                keyid:2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:e8:e9:39:72:fa:e1:f1:42:78:52:ca:6c:13:7d:ac:1b:37:
         27:f1:1a:8b:d7:e6:74:76:ea:2d:89:c6:ee:f4:62:38:ca:6f:
         b0:06:1d:05:61:f8:fe:21:5a:9f:d0:bf:2b:19:8d:ba:9d:38:
         5c:2f:1c:7c:b3:d1:41:d4:c9:be:fe:dd:0a:7e:78:43:7c:e1:
         4b:8d:82:84:e1:bd:26:20:ff:80:00:03:4c:70:a1:89:d2:c7:
         73:4c:f0:87:bc:3f:d5:aa:3f:2c:c3:1b:8d:2f:c6:95:28:9b:
         02:ba:b4:c2:1e:6c:cb:30:66:7b:41:d2:ac:ec:68:88:00:96:
         8f:d3:cd:52:33:9a:b4:0e:e0:81:16:d2:41:a9:c1:a6:91:4f:
         3a:ea:fd:79:7c:92:8b:80:b1:45:98:e8:d9:00:37:00:29:5e:
         49:97:37:96:e7:f1:7e:f6:9b:39:e9:83:80:9b:89:d4:2b:80:
         b4:43:33:55:db:c0:60:b6:ae:cf:55:1a:88:97:16:a3:2f:e0:
         2d:20:87:9f:65:e9:f4:01:e5:92:0f:d7:5c:ae:28:a5:4a:dd:
         fa:5b:71:c9:9f:20:4b:2b:26:9c:c9:55:94:c9:f8:4d:44:a1:
         c3:45:83:98:3c:75:1e:e9:e5:13:d0:8b:7c:cd:9e:d0:6e:16:
         68:f7:75:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:07:41 2025 by rpki-client