Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
File:                     Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft (raw, json)
Hash identifier:          KzUnwBi73MWikjZS1aicU3MXsJOE/pSfLpQneyA4AcU=
Subject key identifier:   36:BD:C6:2D:06:6E:D9:8A:38:C0:32:AD:AF:25:F1:91:AD:D9:2E:FD
Authority key identifier: 2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
Certificate issuer:       /CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Certificate serial:       01989147A2722A8E9C1E026439DBAF3C18DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
Manifest number:          1629
Signing time:             Sun 10 Aug 2025 00:00:47 +0000
Manifest this update:     Sun 10 Aug 2025 00:00:47 +0000
Manifest next update:     Mon 11 Aug 2025 00:00:47 +0000
Files and hashes:         1: 6IT6mwHMW9EmbRzGBzUbwgbsgAw.roa (hash: IGvYi40SLFLfH2GmSqyI1/Hiu8HPblZw4TFx94fRjF4=)
                          2: ATi_Bwlv3Jj4IB4BpyKVNAFc_kM.roa (hash: MWLTnUp2/uK02bics6n76jtOUMYQIGtbRzMIp5qiCR0=)
                          3: Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl (hash: vF8aCq9NydOcA54+lR5qwpdtfSX4/1dOdys699joh7g=)
                          4: X8j-g5UXznvugZtsX4vPUTZkNCs.roa (hash: m7iBDDotS9ucjB95WAdQ3fETMEIIDDjOdH3AnU2GIAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 23:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:91:47:a2:72:2a:8e:9c:1e:02:64:39:db:af:3c:18:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
        Validity
            Not Before: Aug 10 00:00:47 2025 GMT
            Not After : Aug 11 00:00:47 2025 GMT
        Subject: CN=36bdc62d066ed98a38c032adaf25f191add92efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dc:b0:84:c1:3c:6f:18:af:58:a8:bf:ba:53:
                    8b:d8:c8:0b:28:6a:f4:76:3f:e7:68:56:a1:8b:b4:
                    4e:af:ec:37:a6:39:4b:2f:0f:5b:8c:60:af:75:c5:
                    fb:cf:f4:d0:e6:91:a3:62:03:92:44:33:71:bc:fe:
                    d9:2b:fd:ed:57:26:37:b0:75:63:95:be:97:34:17:
                    a1:ba:5f:e0:30:32:72:c7:c5:fc:92:d0:bd:d8:77:
                    d5:ef:24:8d:8c:0e:b7:c8:f1:5f:68:8c:a0:19:7f:
                    02:a5:e2:ff:41:57:0d:84:41:4d:ae:1c:3e:40:cf:
                    fb:a2:69:f1:7b:c9:88:25:66:96:bb:11:81:3c:fe:
                    4c:d6:a3:48:bf:28:92:0e:0d:91:ff:05:f7:60:14:
                    a5:b7:50:e9:98:bf:1e:6f:22:89:01:3e:1e:85:27:
                    ae:42:d6:fc:e9:0a:04:94:2f:80:f5:27:15:83:8c:
                    e5:89:bf:1e:94:41:dc:1d:c8:08:36:6c:bc:cc:fa:
                    0e:92:ae:cf:d4:78:9c:dc:39:51:f5:00:1f:76:17:
                    d9:ba:ab:43:97:ba:fe:8d:9b:1a:e2:e5:b9:cb:4b:
                    d1:9a:72:6f:9a:87:1f:e7:0e:60:e1:f1:50:34:17:
                    96:c0:42:72:af:5e:42:f5:3d:12:de:96:7c:4e:fd:
                    6d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BD:C6:2D:06:6E:D9:8A:38:C0:32:AD:AF:25:F1:91:AD:D9:2E:FD
            X509v3 Authority Key Identifier:
                keyid:2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e7:9b:41:27:db:c4:c9:17:e6:e0:9d:64:c8:a5:28:aa:73:
         53:d8:01:74:d0:18:4f:6a:e3:47:e9:e8:3c:02:72:d6:9c:11:
         c0:3d:35:48:26:ab:d2:5c:7e:76:5d:5b:4d:36:5a:d6:2c:cc:
         6a:16:05:f8:fd:fa:ef:90:07:54:00:d8:c7:ee:bc:ec:6f:68:
         66:9e:c8:e4:79:26:cd:1c:e5:35:0c:ee:05:7a:10:98:6e:8c:
         80:58:2d:d3:66:51:c1:50:11:02:8f:97:2e:ce:4c:98:5c:a4:
         00:f9:af:3a:e2:ee:ce:82:0d:50:99:3b:46:77:5c:de:96:59:
         ea:c1:c2:e2:e1:bf:04:a9:98:c6:39:ff:92:4b:06:bf:50:68:
         a2:71:b7:de:c3:4f:6f:d1:6d:dc:31:23:8f:29:c3:c0:2b:68:
         ac:6c:d2:ad:30:94:c5:69:62:27:2a:92:80:87:8c:f1:5e:0d:
         e1:2e:1a:47:81:39:22:18:35:2b:57:0c:6e:68:0e:1d:a8:6e:
         32:62:d1:11:e4:cd:e4:21:21:39:35:0d:a2:c9:43:66:fa:f8:
         b3:62:b1:c1:d3:b3:6a:eb:b1:dc:71:12:44:05:bf:8f:bd:ce:
         d7:f8:8d:a7:d9:52:cb:5f:27:27:76:12:38:79:d1:c6:6b:ae:
         f4:c5:56:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:00:13 2025 by rpki-client