Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
File:                     ljUcRzoWujj6tNUXBZIl4PEzyL8.mft (raw, json)
Hash identifier:          mVFFuaFZTkP7FXSUEgw1AGKOBaQxL8E6CexdZR1pGw8=
Subject key identifier:   ED:29:B4:66:61:89:AC:45:81:62:20:A8:D1:DE:74:FA:EC:8E:51:8A
Authority key identifier: 96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
Certificate issuer:       /CN=96351c473a16ba38fab4d517059225e0f133c8bf
Certificate serial:       01987B9CA5E9E6013C55EBCA90508261052B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
Manifest number:          15A7
Signing time:             Tue 05 Aug 2025 19:02:00 +0000
Manifest this update:     Tue 05 Aug 2025 19:02:00 +0000
Manifest next update:     Wed 06 Aug 2025 19:02:00 +0000
Files and hashes:         1: 9ePFbgefAOZuTmJLiFLvd1beyls.roa (hash: RIcriqMlU4ZWl7joZj4XClpYJLpavsjnCJfKx3wYXhA=)
                          2: HVOOHQPc-5Eu7cwWFhbNRCpA9A0.roa (hash: x9bBQ84HsMACBPfPIx9csANOJkhCAtUu4np9OsZI7x4=)
                          3: KSjUnukZG8WOY9QNez7ybTNOls4.roa (hash: swbthPAwvXge6wDssbFVck74lGidoJQL+o3507ng0tk=)
                          4: ljUcRzoWujj6tNUXBZIl4PEzyL8.crl (hash: binoYQYEiDMXwgvjoAhxN1PkTLMBUj+/fR3yd/hnqas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 19:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9c:a5:e9:e6:01:3c:55:eb:ca:90:50:82:61:05:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96351c473a16ba38fab4d517059225e0f133c8bf
        Validity
            Not Before: Aug  5 19:02:00 2025 GMT
            Not After : Aug  6 19:02:00 2025 GMT
        Subject: CN=ed29b4666189ac45816220a8d1de74faec8e518a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:55:54:5d:16:48:93:bd:52:fe:1e:c2:61:c7:
                    db:25:c1:98:9e:03:fd:27:fa:5d:f6:51:0b:5b:e8:
                    eb:b5:15:82:06:0c:c6:1a:08:f4:76:d0:7c:e6:6e:
                    af:e7:17:91:f2:96:62:69:e3:5e:5e:2d:fd:92:21:
                    1d:45:6f:4a:52:74:a1:9c:13:97:07:75:3b:7e:63:
                    91:5d:60:53:a9:eb:02:04:0d:7f:5c:94:4a:cb:3e:
                    ca:de:91:a3:f6:74:a2:a6:f9:6d:bf:bf:45:8d:d9:
                    86:3f:c1:a3:5c:4b:34:49:5f:f5:1f:fc:69:c6:7a:
                    01:6b:95:bd:e1:a1:26:f2:71:71:bc:d5:52:7f:e3:
                    53:12:2a:da:03:78:c3:bc:16:1c:b9:15:17:ab:f4:
                    b4:ce:92:b2:f4:4d:17:ac:9f:e4:b7:1e:11:e1:e2:
                    7e:0b:44:73:f0:9a:aa:5d:d0:dd:cd:48:96:b3:85:
                    ed:96:e4:47:8f:36:ee:94:fb:9c:3d:3b:52:fd:2d:
                    07:da:d0:d7:f4:85:b7:be:97:49:29:cf:dc:fa:3c:
                    8c:64:65:08:23:1e:e5:20:51:bd:b1:dc:ae:a0:fa:
                    cd:29:7a:aa:38:c7:2f:40:6d:11:af:14:7f:2f:cc:
                    11:06:80:db:cf:31:ae:5c:75:37:f7:c4:2f:fa:9e:
                    77:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:29:B4:66:61:89:AC:45:81:62:20:A8:D1:DE:74:FA:EC:8E:51:8A
            X509v3 Authority Key Identifier:
                keyid:96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ae:94:3c:b9:f0:c8:4b:c1:76:57:e4:82:3e:d5:1a:92:fb:
         74:e9:d4:c6:7c:32:c4:ad:bc:bf:2a:93:80:43:da:66:44:80:
         b7:7e:a9:2c:32:ab:f8:85:dd:93:a3:52:18:b2:7b:8e:45:ee:
         b2:f8:db:98:42:54:4b:14:9d:24:d5:b4:d4:2c:a1:78:4f:98:
         47:c8:38:71:56:47:f3:56:ff:0d:24:39:74:e4:04:0a:13:8f:
         c4:2e:8f:be:b3:1e:d1:e6:ca:14:25:70:9d:8f:91:40:fa:b8:
         0b:df:f0:4d:ca:79:55:d0:3b:90:d8:a7:c7:f0:da:8f:83:39:
         94:46:3b:8f:9e:f4:89:75:5c:27:ff:53:a8:be:e7:c5:ba:fe:
         df:a4:82:4b:9a:86:51:3e:00:a4:c5:13:52:94:b3:97:46:8c:
         86:96:a3:d1:cc:7f:0d:bd:a8:76:5f:45:7d:08:03:1b:19:e9:
         62:e0:8f:2a:9b:21:05:ed:4d:e0:cc:04:50:ba:db:81:49:cb:
         27:6e:2f:8c:cd:48:81:df:b6:8b:98:15:70:36:4e:2a:ed:ee:
         47:72:13:bf:70:8a:13:0d:61:85:0d:2e:12:2b:16:2c:a4:e9:
         4a:68:ab:1a:d3:46:fe:f6:a4:9b:c5:47:ee:38:88:4c:6c:dc:
         3e:ea:cb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:59:17 2025 by rpki-client