Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
File:                     LONOJrtlYwuGk29JaTU-18hplcg.mft (raw, json)
Hash identifier:          FMmf+7BIKGRGR3cWBO3XLihHFGUAMCM5GRpW9qCKDKQ=
Subject key identifier:   62:E9:8D:04:2D:8A:4B:9E:3B:58:C6:7D:DA:FC:DE:2E:E0:A2:DC:20
Authority key identifier: 2C:E3:4E:26:BB:65:63:0B:86:93:6F:49:69:35:3E:D7:C8:69:95:C8
Certificate issuer:       /CN=2ce34e26bb65630b86936f4969353ed7c86995c8
Certificate serial:       0198733D3D5B5D46A80D576A28B0E34A4305
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
Manifest number:          1551
Signing time:             Mon 04 Aug 2025 04:00:49 +0000
Manifest this update:     Mon 04 Aug 2025 04:00:49 +0000
Manifest next update:     Tue 05 Aug 2025 04:00:49 +0000
Files and hashes:         1: LONOJrtlYwuGk29JaTU-18hplcg.crl (hash: mCdsV5W5jTPQ0jTS3BCfsCbwQ7ySOXwn/KP5uBlkJ20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 04:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:3d:5b:5d:46:a8:0d:57:6a:28:b0:e3:4a:43:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ce34e26bb65630b86936f4969353ed7c86995c8
        Validity
            Not Before: Aug  4 04:00:49 2025 GMT
            Not After : Aug  5 04:00:49 2025 GMT
        Subject: CN=62e98d042d8a4b9e3b58c67ddafcde2ee0a2dc20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c5:bc:97:44:43:b1:ef:30:0b:96:1e:00:45:
                    c9:d3:38:92:f5:f3:ab:99:87:bc:0c:32:59:f7:6e:
                    b5:15:ed:b1:ff:6d:e3:45:a1:e4:6c:6b:ff:92:8b:
                    2d:20:8e:bb:9e:cf:10:d3:71:ac:3c:5c:92:00:09:
                    dc:94:b7:73:1f:8c:db:23:8e:48:d3:c5:43:a5:13:
                    f5:c7:25:ec:93:60:36:a0:1a:f5:71:e0:91:12:e8:
                    62:8a:cc:80:bf:55:d1:1f:af:ad:d4:93:94:0e:84:
                    e0:14:88:b2:d7:46:36:8f:61:fd:6b:a7:ea:a2:08:
                    3b:23:01:d2:60:94:b4:42:57:4d:94:35:f4:0a:05:
                    52:63:73:a8:c3:81:e9:b3:dd:a5:30:ae:6a:0c:b0:
                    fc:7f:d6:c8:75:ae:b3:b6:4b:65:44:7b:d2:6f:03:
                    0b:c9:5b:35:23:89:b9:5a:66:72:1d:9a:ac:a9:2b:
                    64:0c:29:2f:bd:e9:02:7d:7f:8c:1c:cd:8d:cd:63:
                    cf:3b:5c:0c:fd:72:db:4a:48:3d:1e:68:da:1e:c9:
                    03:74:5d:35:12:d1:a8:52:f6:fc:be:16:b0:d9:84:
                    be:94:fd:69:93:27:13:28:c2:7b:86:4b:86:ea:49:
                    5b:64:38:37:50:5f:6e:5d:51:1d:55:0e:4b:1d:3f:
                    87:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E9:8D:04:2D:8A:4B:9E:3B:58:C6:7D:DA:FC:DE:2E:E0:A2:DC:20
            X509v3 Authority Key Identifier:
                keyid:2C:E3:4E:26:BB:65:63:0B:86:93:6F:49:69:35:3E:D7:C8:69:95:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:e8:2e:24:8a:64:6c:ec:15:87:05:de:9b:a2:93:20:16:fb:
         40:e7:99:9f:79:7d:1f:02:75:c4:08:16:fe:c1:57:90:0b:ef:
         8b:be:43:66:93:4b:84:b8:e5:35:3a:dd:3c:71:04:ea:15:a1:
         7b:e8:06:e7:1e:a7:4a:77:1c:6f:2b:bd:4b:93:04:b9:ac:f4:
         6f:ee:e2:51:b5:f5:11:5c:c2:07:c7:aa:ac:e4:db:e5:3a:87:
         d6:bc:7a:28:57:03:57:bd:64:e1:eb:22:c1:3f:85:50:b9:ff:
         0d:b4:b1:c9:a6:c9:9d:1e:03:8e:0e:b4:cb:b5:91:a1:ae:c6:
         88:af:e0:84:9c:f2:97:2c:9d:80:a2:36:a0:73:89:ee:21:cf:
         9d:62:5c:a3:3f:50:cf:e7:99:ee:7f:7e:96:39:5f:c2:83:7d:
         79:40:4c:f0:d3:07:89:06:b2:69:3b:59:34:77:e1:c0:e7:43:
         ff:0b:c0:99:63:0e:04:87:f2:9d:12:83:35:1f:0a:4f:ae:a6:
         80:7b:b7:74:b6:59:74:bc:9b:84:54:65:0b:ed:e9:51:b4:d1:
         bb:a0:60:bb:ef:b3:58:c2:c1:e1:27:fc:8c:03:f9:e3:38:1b:
         d9:bb:79:89:e6:94:43:e8:ae:97:cf:f8:7c:11:b9:f0:95:7a:
         5c:1a:43:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:06:38 2025 by rpki-client