Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
File:                     LsEh4VRd8-W7hukYjygl-tdHf3U.mft (raw, json)
Hash identifier:          MCs7aEu9P0F7iIhJ2muTUpN4TJhjWQJ2UM1BgpAv4DE=
Subject key identifier:   09:32:70:80:B8:C2:32:8B:5B:B5:69:B0:80:4A:D6:E1:80:34:4D:56
Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
Certificate issuer:       /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Certificate serial:       0198744FDD65100C28B1EBE177B668CD2893
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
Manifest number:          1619
Signing time:             Mon 04 Aug 2025 09:00:47 +0000
Manifest this update:     Mon 04 Aug 2025 09:00:47 +0000
Manifest next update:     Tue 05 Aug 2025 09:00:47 +0000
Files and hashes:         1: 0IG7CMPC-7SDKCTiz8anhD3c0zs.roa (hash: fOnGjT4Xyjjotwa9/pecYw3cI1uzEt3+li8tB/lSTXY=)
                          2: BU0Pzn4hZS4sQu5v8Q1Qbbhp9vM.roa (hash: 9kbaESAN0/YNybQyxy7LooDJN3A5I92At9aUcKOvy/s=)
                          3: IwlbmFExD2G5c49HgZqQSHA1wZk.roa (hash: 45pPUt5QNz8dN0ylQGV0BCVZpBwOOv2uaieuY/tEzHc=)
                          4: JH5Q15rYm3yauoa5O0AtnaEF5T8.roa (hash: P8bh12UacYgaXKXWnxHFtSknccP/NWYvpFtt4o+MFnQ=)
                          5: L1Jr9Ntwc8rL0VyBMGBPBeMOSbU.roa (hash: 2Po6H5pjnfZQ8LGkU3TaUi4GHx7DH6w6vtm+1KWoyVI=)
                          6: LsEh4VRd8-W7hukYjygl-tdHf3U.crl (hash: Etp10ZaDDWUMNe1geUYfTVefRXH1Q8hT0OX+MHOnKb0=)
                          7: X1X4I6xtC4Tyzz9jxci5NVZVFuk.roa (hash: Y7rSJ5Le7s/lA/Q7YQ3ZJcSkf2udL6S8lMTSgJ0RabQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:4f:dd:65:10:0c:28:b1:eb:e1:77:b6:68:cd:28:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
        Validity
            Not Before: Aug  4 09:00:47 2025 GMT
            Not After : Aug  5 09:00:47 2025 GMT
        Subject: CN=09327080b8c2328b5bb569b0804ad6e180344d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e2:c6:fc:8c:f1:3c:82:10:46:b4:c9:e3:a6:
                    8d:95:21:10:87:3a:76:5c:46:02:ea:c1:d4:83:b5:
                    bf:8e:e0:82:09:7a:93:f1:f3:12:80:9f:da:46:cf:
                    ab:e0:07:27:60:c9:de:58:4e:db:0e:4d:b6:13:07:
                    70:d1:14:5a:2e:18:d5:eb:e3:92:3d:f4:9f:c6:6e:
                    ed:37:6b:d7:b0:0b:c3:f9:af:75:81:2a:12:f6:34:
                    0e:4e:70:3b:a6:a6:7d:9c:03:f1:16:95:68:f7:0a:
                    ae:b4:f6:4f:bd:a4:1e:8f:08:f6:e1:3a:c9:d4:92:
                    82:6d:56:d7:27:40:48:b6:4d:aa:7d:d8:1b:5f:9e:
                    1a:79:64:bc:71:5d:79:4a:3c:36:42:c4:b8:e6:d8:
                    9c:76:bb:e1:41:ee:32:e3:0e:ea:b2:bc:22:b5:ab:
                    b9:ff:6b:30:0a:c5:5e:72:66:d8:ec:6e:b8:1d:6c:
                    1b:3c:10:aa:a9:74:42:15:6b:77:63:e0:c7:30:dc:
                    4b:55:46:1a:a7:cd:17:bc:f8:83:16:b3:c9:b5:31:
                    14:09:03:c1:b8:aa:45:de:87:37:4d:3a:db:89:7d:
                    7a:04:3e:a1:6a:90:1b:b3:a4:24:4b:dd:33:95:30:
                    a2:64:ad:26:a6:50:82:97:e4:07:47:3d:f6:72:ca:
                    1d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:32:70:80:B8:C2:32:8B:5B:B5:69:B0:80:4A:D6:E1:80:34:4D:56
            X509v3 Authority Key Identifier:
                keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:2b:36:11:2a:bc:d0:34:90:f3:5e:94:1b:2b:3d:f1:c6:3a:
         a1:a4:5b:e7:19:1e:81:5e:37:c9:c3:f7:7a:6d:6c:d2:7a:2b:
         4c:c9:fb:82:58:e2:b8:30:30:50:aa:9e:2d:e4:59:43:c4:16:
         c8:c2:a9:31:0b:25:56:db:5e:17:19:0c:5e:de:69:d9:f0:bc:
         40:09:e6:af:7b:6b:f3:3b:c0:55:a5:3e:e9:12:aa:c7:fa:3a:
         30:11:94:46:ca:ff:3e:ec:6b:be:03:09:ef:e7:2a:58:08:72:
         10:83:b3:0e:5b:05:3f:c9:8d:35:f4:73:56:f5:12:68:05:ed:
         15:4c:68:cc:2d:4a:40:0d:58:c8:e9:e4:6a:1e:94:43:07:01:
         3f:0a:9d:ef:b1:ef:73:86:f3:f9:3e:59:1d:5c:25:68:92:93:
         e2:93:29:f4:14:99:a2:80:bd:45:76:81:03:db:46:40:a2:79:
         1c:06:13:ea:e6:8f:9d:1f:6e:80:ec:9b:4e:0b:9e:e6:b1:d1:
         03:9c:54:9c:76:d3:61:b8:2e:d0:00:6e:90:8f:0c:2d:48:b2:
         66:1b:c8:0f:7f:6f:61:68:60:e6:94:29:eb:b9:67:a0:f7:b8:
         7b:d1:d1:dc:4d:cd:5b:8e:47:33:e8:17:84:bf:33:5b:2b:06:
         5c:a2:fd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:09 2025 by rpki-client