Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
File:                     LcgdJMRd2qNF-QZN4p-8p7EppSw.mft (raw, json)
Hash identifier:          QjURES2xF/XJNvv3YJONvljvaYK14wgAGOIv3FMyD4E=
Subject key identifier:   0B:57:8D:B2:0A:D7:9B:43:76:22:20:B0:74:61:B1:CF:E7:A7:68:D3
Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
Certificate issuer:       /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Certificate serial:       0198752B54C5682344D2877B47E77335D0E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
Manifest number:          162B
Signing time:             Mon 04 Aug 2025 13:00:30 +0000
Manifest this update:     Mon 04 Aug 2025 13:00:30 +0000
Manifest next update:     Tue 05 Aug 2025 13:00:30 +0000
Files and hashes:         1: 1-Gxr6vIW4yBzcBwkpTyv09TdOlo.roa (hash: Ez8uNLSpiX9S8lz0pVk5NS7jK9ai+KC6g5pGfPW50c4=)
                          2: LcgdJMRd2qNF-QZN4p-8p7EppSw.crl (hash: oA+ijsllxeM9ie3XBX4E39+LVVW6Y70RY9A8jcB/Nx0=)
                          3: Tqry6ntz7b3kTeJ5OCnwPvloJIw.roa (hash: y/Hg2mPZLnUNHUkA7kXq+J0F+bsaFDCzyOC2OJvkyTk=)
                          4: fd3RJJ6-t5MPxFMjaOieMyrNj1Q.roa (hash: Gp0oxYbqR8uF0JIVNiZGflyEv6T2n/2lVC4AqntijqM=)
                          5: iCEtvdo35QYS0XZzbCSkUBvLIzs.roa (hash: zyoo6UPzEwr9Wic7Dppcx0mzsl7aajEnMpuXSdefYMA=)
                          6: yGvOgFMZISJsfSPqCjNlOqtAHMM.roa (hash: Y4gEqzV+We8lCW3rGQRh7ia7nliYhdhTWgBtjF9WRdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2b:54:c5:68:23:44:d2:87:7b:47:e7:73:35:d0:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
        Validity
            Not Before: Aug  4 13:00:30 2025 GMT
            Not After : Aug  5 13:00:30 2025 GMT
        Subject: CN=0b578db20ad79b43762220b07461b1cfe7a768d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7d:08:f9:03:2b:bc:aa:da:cb:2d:fe:cb:27:
                    1b:88:ff:cd:53:b9:10:0d:e2:84:23:7f:2c:92:02:
                    33:7d:69:35:9f:1f:f8:b0:d9:e6:c0:05:31:58:e4:
                    98:46:ae:6d:59:05:2f:a9:6e:6a:f1:50:09:5d:2a:
                    b4:49:31:db:8c:72:da:92:38:2d:3d:3f:4d:87:af:
                    09:7a:ce:81:d0:bf:fa:e4:1d:d2:c7:0d:98:59:ad:
                    2a:d3:ff:92:56:d8:21:11:5d:5b:b8:43:ce:7f:70:
                    fe:0d:6a:75:48:d3:9f:de:eb:f9:a6:30:9e:82:11:
                    d7:5d:b4:ee:58:1f:b4:49:37:0e:da:2a:05:32:11:
                    6f:3f:6b:20:d4:f8:6c:5c:ff:66:9f:ec:a1:62:5d:
                    01:6a:b1:8d:2d:25:f5:6f:c5:60:5f:47:2c:9f:4e:
                    c7:e7:06:0f:23:53:fa:1d:41:48:0a:01:60:be:30:
                    25:77:dc:a6:ed:5d:27:0f:9e:7d:94:2c:10:35:c4:
                    49:bf:a3:1d:00:81:0c:71:76:34:f5:b3:cf:e7:6b:
                    8d:af:e2:08:e1:f2:8c:02:df:77:22:cc:2d:c4:69:
                    8e:27:96:50:7c:d4:aa:f1:66:77:ed:66:2e:61:84:
                    08:49:65:e4:c3:5e:bf:f7:b8:61:be:e7:df:14:1f:
                    a4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:57:8D:B2:0A:D7:9B:43:76:22:20:B0:74:61:B1:CF:E7:A7:68:D3
            X509v3 Authority Key Identifier:
                keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:a0:8c:60:ab:b0:79:45:23:c7:37:0f:d0:55:5b:b1:14:9a:
         37:31:36:e0:88:c4:d3:65:56:32:6c:ca:b4:b3:4e:59:cb:6f:
         b3:2d:86:7a:85:0c:57:91:c7:72:87:e8:42:c8:13:f9:88:05:
         96:6d:6b:a8:76:28:3c:b3:8f:e5:af:cb:a4:72:7b:f4:bc:5b:
         d9:d9:6d:e4:dc:44:6b:86:0c:80:45:3b:6f:8b:a8:31:e6:b9:
         69:54:f5:05:3e:8e:d8:8b:d0:6d:02:50:20:f9:20:bc:3d:31:
         1a:3a:1b:a4:1e:2d:36:7f:4b:a8:4c:b1:52:82:eb:7a:cb:fe:
         64:b0:8d:ab:02:7e:5a:f3:09:31:06:7d:2a:23:0d:e3:97:e7:
         ff:70:35:ab:7a:27:6f:78:6b:a7:77:ca:60:c4:10:9d:14:c3:
         f2:8e:64:1c:4f:56:42:00:af:23:41:62:4c:05:e0:7e:11:14:
         42:10:10:c1:0c:96:a1:a0:66:ff:bb:bd:3e:f1:f9:94:dc:c6:
         bb:9c:2f:e5:f3:34:4b:67:8f:38:79:f8:1a:cc:47:30:dc:a1:
         4f:98:67:1d:ef:2d:b8:94:c9:cf:cf:89:64:cc:9e:f9:f1:8a:
         c2:8d:d7:d1:02:ae:d7:e0:c1:f3:14:76:05:83:c6:53:62:7b:
         23:a0:a9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:36:29 2025 by rpki-client