Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
File:                     LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft (raw, json)
Hash identifier:          ISiOt1NeQykAha83J+e7AgqYJxRBIrGi9I+esd0HQa4=
Subject key identifier:   F0:C9:37:0F:2A:2A:21:37:23:09:51:53:59:2D:84:ED:75:05:7F:BD
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Certificate issuer:       /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial:       01987D8A5F087078BDC5166D9803E3BA5F5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
Manifest number:          06BD
Signing time:             Wed 06 Aug 2025 04:01:16 +0000
Manifest this update:     Wed 06 Aug 2025 04:01:16 +0000
Manifest next update:     Thu 07 Aug 2025 04:01:16 +0000
Files and hashes:         1: 86xyLg9Vhu1lk5RReT6Rdf_tmoI.roa (hash: j1UEYdI/3BGkPHWxLGmlianOUX6y8XMwomdD1NaeQqE=)
                          2: DNGDsibsMhX2Jm35ON8Z46A3KTk.roa (hash: IiQeZ36+XfzMEhi+j/AEKPMJtu/iUB+BlQw1Cz0Efws=)
                          3: ISe6Pp3VA_kxRdnQPPWGbrrMrrw.roa (hash: jRDpIWsPHeWViUOgK2ZXMO2/p/iubNFjVCoGO2Bmfv0=)
                          4: JHvjruZud8UPbDjx1Bd9LjVOBzk.roa (hash: vjoEoMaWJ1MAMYUlr7M3XUcS+6k16egCExbMn9yAMb4=)
                          5: LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl (hash: Z8JunfMHvWa7x6+t5QVC282vCp5CvAsw/1AHUjPVdJw=)
                          6: jjSMkguCrtN8dke8B6BypY8W9bE.roa (hash: FKDJSDKH8RGck3prDQ6XfAn1r+nBQFd0Ov1wTU/64lk=)
                          7: jvqaPKegN_TBTkX1iGxxtfLozMg.roa (hash: XuER/cHOoxfeKVPHA4CmD36sE1MXBYBHja2ydtJkaoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8a:5f:08:70:78:bd:c5:16:6d:98:03:e3:ba:5f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
        Validity
            Not Before: Aug  6 04:01:16 2025 GMT
            Not After : Aug  7 04:01:16 2025 GMT
        Subject: CN=f0c9370f2a2a213723095153592d84ed75057fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:06:be:aa:38:6c:05:0e:47:a5:91:e4:64:f5:
                    77:4c:55:31:21:f3:d4:da:27:c8:53:07:a2:22:8a:
                    18:33:f9:0a:5e:d4:ae:96:7a:4f:6e:4b:8f:49:94:
                    e8:2f:a1:d5:69:87:46:31:f2:d1:e6:aa:d1:78:da:
                    6a:f7:3e:7c:76:97:aa:0a:f0:f5:52:53:ec:fa:8c:
                    e0:06:5f:47:66:9e:68:5d:13:b4:0c:87:bc:87:9e:
                    56:27:0c:f6:8f:cb:a4:1d:32:a2:fc:9f:12:c9:40:
                    ab:6e:6d:cd:61:44:14:03:72:50:19:04:e0:20:12:
                    05:88:b3:ae:8e:f7:ed:3c:80:de:9c:55:33:7c:93:
                    ca:a9:47:d4:8d:88:1f:e4:be:ab:39:f7:f0:5b:63:
                    43:df:52:d6:43:5e:10:fb:f8:87:62:86:b4:ba:59:
                    65:90:dc:b9:a3:26:38:c8:ef:a4:b0:4e:27:39:2a:
                    d1:d1:cb:e2:d7:58:71:40:34:69:d7:6e:d8:53:76:
                    89:dd:7c:a5:ab:04:94:6f:f2:ad:35:9e:49:6f:d9:
                    2e:c3:e5:11:aa:4d:02:31:46:66:1e:1c:6e:21:d3:
                    13:6a:54:5e:55:b1:de:22:ac:bc:d1:8f:21:83:fa:
                    dd:f4:a5:3d:65:df:58:cf:1d:a2:57:c5:9f:0a:77:
                    d9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C9:37:0F:2A:2A:21:37:23:09:51:53:59:2D:84:ED:75:05:7F:BD
            X509v3 Authority Key Identifier:
                keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:87:fc:40:38:c8:3e:87:0e:c2:f7:57:0a:1b:72:8d:6a:32:
         89:e9:34:5e:04:09:d6:fc:4f:0c:10:f4:9a:c4:64:f5:f8:3e:
         d7:2e:91:f7:34:98:1a:4f:3f:46:14:4c:d4:e7:bb:5d:c4:72:
         09:73:7e:ca:66:3c:53:5f:2f:e2:92:88:0e:5a:d6:f3:1e:11:
         41:2c:6e:ad:21:7f:52:e8:4d:0b:f1:ea:5a:00:a3:f8:a1:0d:
         8f:78:41:f2:93:95:f9:aa:8b:ff:ba:cc:e4:8d:0c:27:5a:e3:
         60:f3:60:04:f7:44:a2:80:04:54:11:c4:08:d2:9a:00:93:66:
         37:7f:90:0a:f7:b9:5a:a7:85:fb:ce:35:3c:6f:f1:f7:ef:ae:
         a7:53:5b:db:c3:77:eb:da:65:5e:90:5d:11:2b:17:e8:7d:a4:
         4c:3e:c8:cf:fd:bb:a4:03:67:25:6c:5b:f2:50:7d:9e:e2:8a:
         e8:01:c1:67:0c:3d:d0:4c:11:c7:d6:1e:61:a8:14:e0:f1:91:
         b7:a1:8f:d0:45:5f:18:16:b3:3d:db:cf:92:69:fc:ba:66:b6:
         25:c3:d6:42:e9:87:d0:de:da:9f:08:b3:04:76:bd:77:55:ab:
         55:94:bd:d4:ec:ed:88:c3:d8:9e:84:41:63:09:62:0f:a7:66:
         e6:3a:8d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:29:16 2025 by rpki-client