Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
File:                     LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft (raw, json)
Hash identifier:          I4gdiImosqw+DWDjpFXRjZx9XX0peMa4APdNmslNghw=
Subject key identifier:   87:CE:52:F1:69:88:5A:4F:4A:C3:98:47:A6:EE:EF:C7:41:1F:58:E1
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Certificate issuer:       /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial:       019872D00CE6D0DC32EB0D0BB7C3D0A3C7AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
Manifest number:          1626
Signing time:             Mon 04 Aug 2025 02:01:33 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:33 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:33 +0000
Files and hashes:         1: 01X6uEQds9Y9s0Nj6vCgByaYk4o.roa (hash: zRPbzdJELLZCFUdSNf06UKLGLPusehNC5YazUYIIsTM=)
                          2: 0tRB9OCC9xas7e6MVH8FJn0Ja3c.roa (hash: cbQqhS8rCleS/cZGOp49BraWBlvDlSz9avYU2nr/DSU=)
                          3: 9tSoewyxusy3XiU4MPlfgCKviQM.roa (hash: 4mAbpqKotMEUi55o3nvNZU9MOu3aXF7KZ9T6UnO+Ftc=)
                          4: FSPf9GPeE9OlDZ4wjRNl7LN012Y.roa (hash: qnw8o1IATV+jUOf4O3NJflnEbA239Ao6/8MIoEaYYAw=)
                          5: Ik5x4sxVpJGKDVZlhpgzVJyFcdE.roa (hash: hUjlBlwFujOIxjIsUbH4qKxEVtqgo5ThvH9AsXM845U=)
                          6: LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl (hash: NfNVH/JFG+rOBj9Hpntl/fkiFbEpbvYIoReQ9OwJ49E=)
                          7: ewUitY15BVRTKh0SmutPUcBQMXQ.roa (hash: B5ro7AbVa+pZeZWKqhB5vQ8tCOIi1/1KiBGVk/ZJiIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:d0:0c:e6:d0:dc:32:eb:0d:0b:b7:c3:d0:a3:c7:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
        Validity
            Not Before: Aug  4 02:01:33 2025 GMT
            Not After : Aug  5 02:01:33 2025 GMT
        Subject: CN=87ce52f169885a4f4ac39847a6eeefc7411f58e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:85:be:e9:18:34:7a:ed:35:bf:b5:ba:e7:a5:
                    f7:89:01:9e:02:89:14:a3:19:05:be:7e:94:e5:ed:
                    08:f1:96:56:74:dc:c5:e5:a0:e4:28:3a:5a:60:18:
                    50:a9:b2:46:33:52:a5:8a:ce:c5:da:fe:68:f0:4c:
                    1e:e4:a8:ee:4d:b3:cc:8e:cb:99:11:91:d7:4f:54:
                    59:56:b8:70:06:36:ba:a5:2f:b1:3e:73:e4:a7:3d:
                    36:29:1c:5a:20:b6:34:70:e8:4c:20:3e:5e:21:eb:
                    c1:3d:d5:2b:5d:8d:ba:c6:26:8b:1a:61:bf:d1:05:
                    21:61:f4:27:8a:5f:5a:17:9c:ce:d3:f0:66:7e:13:
                    e9:6e:82:f9:f1:aa:f0:62:02:a8:df:6c:9a:ee:66:
                    08:6b:fe:75:2c:d2:42:cc:43:ce:14:a1:9d:62:3c:
                    1f:a3:21:f2:73:ec:87:4d:1a:56:35:cc:9e:67:c6:
                    da:c7:00:f6:77:05:2c:06:7d:ff:66:8d:f4:c7:82:
                    32:0a:f7:ad:53:87:54:53:91:85:fc:2c:eb:e7:6b:
                    9b:87:8a:20:3c:10:65:c7:98:03:e9:1d:37:01:3b:
                    a9:61:da:e5:0c:d0:3c:5d:7e:7f:d1:2c:a7:d5:12:
                    5a:62:8e:f1:cd:93:18:0f:9e:0a:b7:f8:8a:16:22:
                    35:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CE:52:F1:69:88:5A:4F:4A:C3:98:47:A6:EE:EF:C7:41:1F:58:E1
            X509v3 Authority Key Identifier:
                keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:83:c1:25:cd:7c:fd:7f:5f:9c:52:0a:78:54:7a:bf:71:5f:
         e5:4e:a4:33:14:c1:31:8d:90:06:20:b9:64:7f:ce:16:07:fe:
         7f:fe:49:e8:c0:10:ab:f3:02:94:ab:a0:38:1d:48:77:a7:8e:
         5a:4c:7a:58:bb:00:ee:6b:5f:df:56:9b:c4:d9:47:3b:03:3b:
         64:55:ce:b9:26:18:18:c0:71:49:3f:aa:1f:dc:6f:78:5b:5a:
         2d:ee:7b:50:65:a6:98:09:46:dc:de:75:b4:a4:de:93:d0:52:
         04:d1:12:82:53:fe:e3:eb:35:48:27:b6:3c:ec:42:d1:59:14:
         2b:57:ce:b7:2c:09:f4:4a:7a:f9:60:ea:9e:69:25:59:14:4b:
         e0:d2:b9:fe:16:5a:20:69:88:97:04:e6:7b:54:25:02:7f:c3:
         f8:3d:bf:d2:c8:18:2b:b3:b1:90:b8:e8:05:00:d1:18:c6:ec:
         04:5d:14:5f:e8:2b:01:ec:07:ab:7f:a5:a5:9b:1b:3c:00:41:
         f7:32:22:ff:b7:cc:5e:19:10:8c:5d:24:67:1d:c6:3c:7e:ba:
         e8:43:60:ad:6e:1b:c5:10:ed:f8:76:4c:a3:9d:01:44:e1:24:
         68:28:89:a0:cc:99:f3:72:c4:01:fd:a9:b9:ca:e1:ee:fc:e8:
         48:f4:d3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:48 2025 by rpki-client