Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
File:                     lDBvaK6kuuEk-shfLJqj9a6FARM.mft (raw, json)
Hash identifier:          H9hVAw0DyfxAADkuLye7z/arFLqQ86kZx1JSobEtW5c=
Subject key identifier:   00:2D:63:61:8E:84:B5:E1:FF:F6:02:23:16:06:D0:44:04:A6:49:B4
Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
Certificate issuer:       /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Certificate serial:       019873E3640E581CF87D372D78FFCBFC6158
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
Manifest number:          0333
Signing time:             Mon 04 Aug 2025 07:02:18 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:18 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:18 +0000
Files and hashes:         1: 2dDLJD08E9QpNd4AzHqAGaj9Rdc.roa (hash: kvq8BEE4NygHaJH3QQ2Qsn2UgSTjHUPYk5ETZ2RJd3E=)
                          2: FYcjZuHT4JZu7kEqPYetpvF-Qx0.roa (hash: L5G/m+Q1fagnOrSl7UqJpYi3BYMPHAymC5hLCegmYeg=)
                          3: R2xDf0hT3bwTslHF7Ulhf-HarRU.roa (hash: NAVYlsHQmPmwP3TvDnFkO23YGDJlDkO0kffvGr4O5Zs=)
                          4: lDBvaK6kuuEk-shfLJqj9a6FARM.crl (hash: 6HoPDv1Y+8s9bz+80BhyEjB5hLsv7MYvxkCHxTvep7A=)
                          5: uzUGTfjtsuHWlcN_I0IA8CMrfBY.roa (hash: vK/HOcliDT8rJeC9+pxXMkuRxyO7UoQeXCrhqdkwGeA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:64:0e:58:1c:f8:7d:37:2d:78:ff:cb:fc:61:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
        Validity
            Not Before: Aug  4 07:02:18 2025 GMT
            Not After : Aug  5 07:02:18 2025 GMT
        Subject: CN=002d63618e84b5e1fff602231606d04404a649b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:26:cc:3b:19:4e:fe:7f:ee:19:7d:61:9d:61:
                    2f:e9:74:7d:f2:aa:61:3e:ad:c8:16:16:03:3f:25:
                    5c:95:94:42:cd:e8:00:80:91:50:6d:85:a1:02:cc:
                    6c:1a:2b:e3:2a:b4:fa:da:56:14:ff:f2:2c:94:19:
                    c5:b6:3c:91:cd:ba:8a:fa:31:dd:f3:ea:6a:7c:df:
                    91:bf:7d:86:03:fb:68:df:6a:42:24:d2:d7:70:83:
                    e4:aa:5a:f7:c6:96:8a:14:5b:b2:c3:b5:3b:d5:94:
                    5a:ad:76:4c:74:99:ca:00:f1:61:9d:08:e3:65:a5:
                    25:17:5a:60:16:81:cb:ca:00:58:5e:31:c0:2e:04:
                    7f:bc:54:8b:9f:bd:00:86:91:01:71:35:75:8c:cc:
                    ce:dc:40:cb:0d:e4:ab:91:d3:a2:76:82:04:aa:aa:
                    5b:35:1d:7e:92:65:ed:8b:e0:47:8b:90:e8:e0:cf:
                    b6:e6:1a:1c:4d:ac:a5:ea:1f:c1:fc:fa:ba:89:29:
                    e2:b8:88:fb:c7:97:5f:fe:71:06:78:20:aa:49:82:
                    b0:18:7b:99:da:c6:af:1a:86:7a:c7:dd:dc:ce:cc:
                    7f:73:62:ff:fd:9d:bc:3d:73:04:00:89:61:32:5e:
                    5b:20:10:40:3f:79:15:4a:2a:90:64:fa:1c:4e:f0:
                    80:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2D:63:61:8E:84:B5:E1:FF:F6:02:23:16:06:D0:44:04:A6:49:B4
            X509v3 Authority Key Identifier:
                keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:7b:88:12:d7:1a:82:d5:a5:58:93:d1:28:60:57:ef:1d:0a:
         a0:19:77:30:02:af:d5:23:47:77:1a:fd:1f:80:0c:6a:ab:bc:
         1a:3d:99:35:6c:3b:d7:fb:24:e1:af:be:da:44:8d:d4:87:a9:
         59:a2:22:e6:38:63:30:ff:91:84:e2:01:3e:d7:bd:81:0d:01:
         e8:a8:79:a6:3b:f1:ba:02:bb:db:7e:4d:04:24:cf:0a:d8:05:
         71:f8:75:a4:8b:aa:36:c7:35:34:5f:4f:ca:24:09:18:b3:d0:
         11:97:18:cb:b2:4e:40:b7:39:26:22:8c:37:cc:25:e9:93:e0:
         17:1b:33:fc:d4:2d:2a:0e:3a:d2:de:7b:e8:66:8b:d4:46:1c:
         4e:de:f7:19:c6:39:9a:f3:8c:de:17:89:30:25:35:95:c7:31:
         48:62:e7:02:de:49:e2:2f:53:1a:f5:b4:9d:f2:f4:49:55:80:
         f8:19:fa:9a:69:c6:83:e2:9e:cc:b2:0f:31:98:5b:02:d4:13:
         50:8b:bb:7e:26:ce:d2:a1:1a:ea:0b:1e:fc:1f:af:42:28:cd:
         d5:27:55:90:ba:46:32:19:4e:f4:9f:c5:eb:96:51:08:75:f8:
         65:df:71:8c:d4:d9:da:77:f8:1d:16:6d:b4:c8:6d:c0:b9:80:
         5c:0a:c9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:07 2025 by rpki-client