Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
File:                     lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json)
Hash identifier:          VfOsgA2UtkWMXJRDP//6+3OWRndqaiuIqyroOrJKZGI=
Subject key identifier:   FC:69:A7:A3:DC:42:72:4F:7C:C4:55:78:CD:4B:D4:61:8D:49:40:DC
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Certificate issuer:       /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial:       01988B0F9F44128D26ED8CBC3C3F38316C33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
Manifest number:          1623
Signing time:             Fri 08 Aug 2025 19:01:53 +0000
Manifest this update:     Fri 08 Aug 2025 19:01:53 +0000
Manifest next update:     Sat 09 Aug 2025 19:01:53 +0000
Files and hashes:         1: e5DeESZZoV9ugwD2DDetvmmqaNQ.roa (hash: oBItgFG7VmwghbXnqb4YDSc7wHHSkFpawBFKEQ4ggoU=)
                          2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: FR0hlp7amwFeP+s9vPFTB9UY2kg0baV+u0gS94qUvsQ=)
                          3: pusRxy9QftUa2YYJz6wip986r9U.roa (hash: RNMs7mYaUX06i+bmjYIm1r/crAvFi8r8tzeB1u4p4Jk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0f:9f:44:12:8d:26:ed:8c:bc:3c:3f:38:31:6c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
        Validity
            Not Before: Aug  8 19:01:53 2025 GMT
            Not After : Aug  9 19:01:53 2025 GMT
        Subject: CN=fc69a7a3dc42724f7cc45578cd4bd4618d4940dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:81:c6:e5:e4:02:81:04:d3:bf:42:47:e2:f8:
                    81:39:11:e8:d3:92:22:73:70:d5:e6:58:f8:a4:c0:
                    06:78:9a:af:a9:37:55:0f:a5:9f:ab:58:9f:75:65:
                    cd:eb:47:85:80:fd:43:fe:79:db:f8:f9:a3:80:1f:
                    74:c0:39:2b:4b:3e:bf:66:30:76:c4:97:4a:0f:9e:
                    23:46:35:a8:68:3c:ec:2d:5f:de:0c:76:6d:21:c9:
                    17:d2:fa:0f:05:a5:9b:00:84:ab:50:9a:72:7a:d5:
                    2f:16:c9:25:2f:de:21:6b:df:3a:55:31:6f:6d:9d:
                    d4:75:31:90:58:f2:9f:ca:d0:0b:f6:9c:c6:03:7a:
                    a7:e2:e1:48:b8:96:f8:22:e6:62:6a:4b:a5:8b:68:
                    03:16:d3:6f:93:ad:d1:be:a3:58:fa:0d:86:d7:48:
                    96:6e:78:c9:58:54:22:2a:3d:92:87:76:ac:5e:69:
                    30:1a:55:ea:91:f0:d8:2f:d6:1e:47:ac:4e:f5:67:
                    5e:ef:39:08:a9:92:f2:dd:98:ba:0a:79:f3:f5:c0:
                    fa:68:50:be:e0:cb:46:2d:0d:ed:44:77:5b:ba:06:
                    f1:b9:f1:e6:d7:c5:fb:96:cc:0e:1f:4e:7b:59:b8:
                    75:44:2c:d5:31:0e:51:97:62:d4:f3:1e:17:41:ad:
                    72:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:69:A7:A3:DC:42:72:4F:7C:C4:55:78:CD:4B:D4:61:8D:49:40:DC
            X509v3 Authority Key Identifier:
                keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:7a:d3:41:b2:e1:a6:96:c4:b4:a0:71:d0:34:ca:9a:97:e5:
         22:d6:09:89:d8:a6:cb:55:9e:16:f4:dd:5a:63:e5:8e:0a:c1:
         26:07:f1:73:b2:a2:d0:45:d5:40:80:8a:03:46:ac:21:eb:45:
         df:2d:81:9c:70:9f:c8:ac:a2:1a:06:4b:75:14:51:ad:0b:1e:
         49:48:7b:a5:98:3f:51:8f:06:47:8b:db:6d:ef:46:f6:55:9c:
         93:ed:2d:59:87:a8:72:92:ef:97:6b:d7:46:8f:49:68:4d:a0:
         60:fb:34:f5:63:02:ee:bc:ce:b7:80:a4:ac:85:0e:ee:15:0e:
         3d:e5:b8:9a:12:65:12:4e:b6:8b:46:8e:b2:37:5f:71:d1:93:
         a8:86:0f:31:b4:ed:70:28:d4:f2:13:3a:60:f6:4a:91:00:34:
         e2:6e:63:06:2b:ca:9d:c5:c3:a6:26:cf:a5:5b:61:40:1a:b3:
         b9:f9:00:13:20:06:c9:97:38:dd:2b:11:8c:3e:31:99:9f:bc:
         f2:76:d8:55:55:97:61:00:d4:0e:d1:46:1e:30:94:ee:c0:46:
         89:58:6b:16:12:26:b0:98:b3:d0:7f:bf:b5:09:d0:12:8d:c3:
         b3:11:ee:09:f4:b6:a4:4c:f9:95:e9:f6:51:03:e4:42:f7:0b:
         73:bc:b2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:04:57 2025 by rpki-client