Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
File:                     Lt7Joglt7BA7ri18N5bg1HCFwgI.mft (raw, json)
Hash identifier:          KIUkx0QbPp3SQ8sNt+qndF6xvn6/jIFZVSfJrXPgZV4=
Subject key identifier:   2D:06:50:86:B8:75:9C:39:D8:17:AE:8F:51:34:85:C2:EE:19:DA:4F
Authority key identifier: 2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
Certificate issuer:       /CN=2edec9a2096dec103bae2d7c3796e0d47085c202
Certificate serial:       01987D52B62036407C76106E78B461CEAE29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
Manifest number:          0545
Signing time:             Wed 06 Aug 2025 03:00:29 +0000
Manifest this update:     Wed 06 Aug 2025 03:00:29 +0000
Manifest next update:     Thu 07 Aug 2025 03:00:29 +0000
Files and hashes:         1: 1--dh8h3abapBU31_SJb0tICxWyY.roa (hash: gh7e8+8RLdU8Cqp+9LrY341h9N8Mjd03If+6kczgoM8=)
                          2: 2ln04Sg9DivwIxT4Jv87YLQ6VeI.roa (hash: g09lK1EFFtoN7I42vdwkeDH5p7Q5p78NRRZq7eIR1YA=)
                          3: Lt7Joglt7BA7ri18N5bg1HCFwgI.crl (hash: p0bLu4Qbqqq5RmZ/GufvVSeDjHK/Vy0QBN9fiw7gzCQ=)
                          4: zJpW5AryOfpuFShU6Wx7sRKJLe0.roa (hash: kHndwEH09Z6K6s5i2KfWYNtL/YWUF/jq+TLxVETYvrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:52:b6:20:36:40:7c:76:10:6e:78:b4:61:ce:ae:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2edec9a2096dec103bae2d7c3796e0d47085c202
        Validity
            Not Before: Aug  6 03:00:29 2025 GMT
            Not After : Aug  7 03:00:29 2025 GMT
        Subject: CN=2d065086b8759c39d817ae8f513485c2ee19da4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:aa:08:1a:4e:b7:b9:e0:e5:7a:86:19:16:da:
                    1d:0d:0e:12:fc:06:59:d4:bd:c4:f4:c3:3b:16:71:
                    11:d6:07:80:60:a9:1d:77:be:d1:d0:d4:31:32:c3:
                    87:84:d5:ab:c5:1f:44:ef:21:44:f8:31:4d:b2:e6:
                    ff:4a:49:89:e8:62:f6:3a:06:53:cc:2c:7a:28:f2:
                    3a:b0:0b:75:fe:de:27:9a:86:ae:c3:a0:b5:0c:da:
                    e1:9f:0c:06:b0:5d:cb:7c:61:50:3d:0b:e0:02:4a:
                    ad:2e:17:e7:62:06:13:91:50:c2:b6:e6:7f:62:68:
                    0f:3c:5a:9c:92:b7:71:d3:dc:f1:58:1c:68:f3:d0:
                    e8:eb:66:4c:ee:7f:ac:a4:8b:4b:08:1c:4b:d0:3f:
                    04:5b:ad:36:47:63:3f:5d:95:8c:b6:d1:63:28:92:
                    62:7e:9d:ac:9b:da:1a:4f:85:66:53:d9:37:16:56:
                    e7:a6:61:6a:53:ee:45:34:b8:8a:a5:4f:2e:b4:fa:
                    00:ae:3b:27:f1:59:0e:99:12:1c:e5:87:87:cc:24:
                    4c:e0:7d:65:05:64:e3:1b:42:6a:7d:3d:f5:ef:7c:
                    b4:c8:f2:3d:d6:a1:90:af:72:78:47:de:da:7e:96:
                    98:3a:de:dd:66:da:59:11:c7:e9:db:f6:37:99:4b:
                    44:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:06:50:86:B8:75:9C:39:D8:17:AE:8F:51:34:85:C2:EE:19:DA:4F
            X509v3 Authority Key Identifier:
                keyid:2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:12:1c:ac:e3:0d:d6:2d:78:8f:fe:ca:5b:40:9c:02:1c:48:
         f6:40:bd:c3:58:ff:b8:f5:ce:62:1a:68:b4:f9:5d:52:67:d4:
         f2:04:95:66:60:38:a8:35:8e:ff:ba:70:e4:1e:3e:27:d4:eb:
         84:c8:bb:fd:93:55:7b:72:cc:45:44:e8:8c:0e:5e:81:8d:4d:
         c0:b5:72:ff:35:da:e3:2d:b8:1c:3f:b0:11:74:c7:99:a1:0d:
         f5:9c:fb:03:06:69:52:fa:34:73:8e:ed:5b:91:59:5b:2a:19:
         6d:7f:f2:4c:f7:78:6c:f6:7f:3b:fe:c8:19:9e:37:97:c8:fe:
         df:5a:e3:d1:d4:96:1e:b8:7d:3c:eb:fc:0b:03:13:b9:6b:8d:
         82:53:2d:9a:c1:f8:37:b7:cd:11:80:5c:92:74:27:21:29:41:
         5c:e9:4c:90:d0:b2:82:42:69:63:c2:df:92:6e:6d:72:25:51:
         4f:7a:d8:fc:de:22:c0:71:c5:1a:2b:4b:95:b2:a6:30:09:32:
         cd:92:88:09:54:65:e8:8c:78:23:fe:e7:4e:0a:bf:b3:ef:59:
         84:7b:dc:82:b4:c9:c4:35:eb:87:be:77:88:71:7b:eb:5c:d9:
         6b:cf:3c:1d:d3:d6:23:95:51:fe:e2:2a:4d:f9:c3:9f:09:cb:
         3b:ff:ca:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:49:59 2025 by rpki-client