Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
File:                     rLICUNTN02Zxm5adb0EjAcE-uQE.mft (raw, json)
Hash identifier:          kGsdXdEFrfv96MTcXUNBsh71Avad3H+CLUzBHFNDPGU=
Subject key identifier:   53:DC:B3:25:7B:0D:E8:9D:64:4F:82:C9:94:C6:5B:A4:52:A9:F2:B1
Authority key identifier: AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
Certificate issuer:       /CN=acb20250d4cdd366719b969d6f412301c13eb901
Certificate serial:       0198A04E48C4B5EE4BBED1998EF7503BC48A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
Manifest number:          162B
Signing time:             Tue 12 Aug 2025 22:02:21 +0000
Manifest this update:     Tue 12 Aug 2025 22:02:21 +0000
Manifest next update:     Wed 13 Aug 2025 22:02:21 +0000
Files and hashes:         1: 5n7dgIWemJ_305TpiU3O_0-YbeA.roa (hash: LdWHm24O7+fxQTfSmSb6FS6jzu11KxxrVzOXyxJmUuE=)
                          2: rLICUNTN02Zxm5adb0EjAcE-uQE.crl (hash: B066vNLpr9phPqlsHKgR1Gi4uvIdVj3n2TJw3wS1UWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:4e:48:c4:b5:ee:4b:be:d1:99:8e:f7:50:3b:c4:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb20250d4cdd366719b969d6f412301c13eb901
        Validity
            Not Before: Aug 12 22:02:21 2025 GMT
            Not After : Aug 13 22:02:21 2025 GMT
        Subject: CN=53dcb3257b0de89d644f82c994c65ba452a9f2b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ef:95:1a:a3:ea:f2:d4:e7:85:4b:1e:93:9d:
                    2c:b3:c9:44:02:91:b7:d6:92:01:dd:b4:ba:28:dd:
                    cb:75:ab:8c:80:ac:56:61:89:f2:38:ee:a8:34:4f:
                    af:bd:f1:ca:d8:4a:ab:16:71:f3:10:fa:69:df:e3:
                    54:a0:13:6c:cc:8b:1b:52:ad:bb:c7:31:2f:35:d4:
                    b2:23:33:99:00:88:04:1f:08:cb:c0:fd:1b:a1:7e:
                    12:d1:de:4e:e3:fd:50:05:23:ee:43:0f:5c:b4:fa:
                    79:b6:c7:6b:22:79:c5:aa:d0:8c:b6:63:66:a4:7d:
                    03:8b:a7:3f:78:cf:76:81:2d:f1:9d:e0:c1:06:dd:
                    92:6c:90:7d:18:05:49:fc:65:c3:8d:67:28:f7:f8:
                    83:b7:b4:13:3c:e3:2c:91:6e:b1:93:e8:7a:65:83:
                    ca:72:98:76:f5:8c:77:f6:fa:67:ad:51:ba:d8:a0:
                    c6:e6:89:64:59:91:92:1a:a9:36:d0:9e:9d:62:06:
                    11:c8:21:13:28:7f:43:41:ac:74:1b:2f:7f:33:c9:
                    c3:75:70:7c:a7:5e:af:b9:e9:62:32:b6:15:ad:64:
                    a1:4c:f1:7b:e6:ea:49:38:17:e8:8e:4d:13:bc:c1:
                    b7:bf:11:be:0b:65:47:eb:38:2d:bb:c3:f0:bf:e5:
                    85:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:DC:B3:25:7B:0D:E8:9D:64:4F:82:C9:94:C6:5B:A4:52:A9:F2:B1
            X509v3 Authority Key Identifier:
                keyid:AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:57:ce:f5:81:9d:06:4b:24:bc:72:28:e7:d8:51:4b:4d:05:
         5d:3a:04:46:e6:ea:07:9e:21:89:94:de:28:29:00:5a:28:2f:
         6a:da:ec:77:e2:51:5a:45:70:e6:3d:50:3c:f3:77:ad:4a:27:
         88:9c:46:a0:68:7a:54:af:67:c5:8b:18:fb:f9:20:f2:2e:8a:
         81:b1:6b:79:e1:7c:35:c6:6a:3f:0c:53:b7:9c:4c:94:36:4e:
         99:b5:31:b3:db:8d:de:e5:4a:dc:79:f4:54:9a:b3:7c:9a:1a:
         54:80:53:75:71:ce:f1:39:72:81:b0:9a:cb:ac:eb:40:97:5e:
         c5:d9:e4:44:c4:d8:39:8c:a3:c1:8d:ac:bd:54:a4:73:7f:9f:
         96:7f:af:8e:39:2b:6a:a9:1e:ac:22:84:92:4d:06:a8:c6:b5:
         a6:eb:66:75:a3:1b:2c:d9:3c:e6:9b:d5:cc:5b:7e:95:ee:50:
         aa:32:f0:4a:f9:50:e8:4e:a3:8d:9e:05:3e:21:af:5c:83:54:
         38:b7:c6:9a:27:ed:79:e1:77:80:70:a3:7b:8b:d0:e2:e7:2c:
         9d:8d:b2:bb:a2:17:45:c6:83:85:58:78:03:0a:8e:c8:41:0a:
         c1:e5:ac:40:75:d1:2b:ec:cf:03:52:ee:0e:52:f5:7e:ab:96:
         99:7c:2b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:39:31 2025 by rpki-client