Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
File:                     lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft (raw, json)
Hash identifier:          iE+Mwuj4dqYDdA9dF4fN/0tztWqqwRGQCUHgDGxso7c=
Subject key identifier:   A3:C4:94:9D:02:AC:83:AE:33:D9:2F:E5:5C:32:30:A8:F0:30:1B:2D
Authority key identifier: 95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
Certificate issuer:       /CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
Certificate serial:       01988B7CD061B95E8FEB1FBCCD7E09362E71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
Manifest number:          1623
Signing time:             Fri 08 Aug 2025 21:01:09 +0000
Manifest this update:     Fri 08 Aug 2025 21:01:09 +0000
Manifest next update:     Sat 09 Aug 2025 21:01:09 +0000
Files and hashes:         1: 7akWYjQwsX6a6HhUzkzvmpveN9o.roa (hash: NaXDBHO9cOnr/DrruhF4XLx1P8skQ7ZIYlWJ7+sC7iA=)
                          2: lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl (hash: Qo7tYH7z/N2e/eiMSReMtV1tKB01kykq5vnLPtDzhXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7c:d0:61:b9:5e:8f:eb:1f:bc:cd:7e:09:36:2e:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
        Validity
            Not Before: Aug  8 21:01:09 2025 GMT
            Not After : Aug  9 21:01:09 2025 GMT
        Subject: CN=a3c4949d02ac83ae33d92fe55c3230a8f0301b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:01:06:ae:4c:cf:5a:2a:13:b0:25:77:d0:11:
                    4a:d0:f8:16:33:65:aa:76:b9:24:8d:2b:9d:3a:30:
                    e9:b2:71:1a:1f:d7:8a:78:3f:10:28:4d:93:19:12:
                    f1:96:35:99:0c:cb:b7:38:d9:37:41:be:15:af:ab:
                    58:f8:3e:37:97:1e:5d:dd:9e:07:ca:75:a9:fa:c7:
                    56:62:03:cd:17:0a:12:d1:0c:6a:d7:12:c5:4f:fa:
                    aa:4c:78:93:aa:71:1c:8d:28:48:d9:66:6d:a2:f2:
                    ac:11:91:64:14:d8:a7:c9:00:b3:a7:b3:bf:ad:c9:
                    39:6a:2f:b2:01:3b:43:d4:d4:e6:85:57:86:df:5f:
                    9e:2c:3b:5b:80:c5:4d:a4:c0:49:7a:e5:81:80:fc:
                    89:e9:6e:15:25:80:ee:8c:92:e2:89:23:b2:83:69:
                    1d:2d:55:04:e5:6e:c2:0f:2e:2f:0e:f0:ca:f9:1b:
                    18:5c:f4:ae:1f:05:f9:42:44:d1:d8:a5:3f:2b:ff:
                    28:88:17:b4:2a:03:cd:86:01:38:63:c3:3b:ab:8a:
                    9b:31:5d:ab:c1:d2:b8:fc:75:92:6a:22:30:18:da:
                    f5:06:78:ca:72:60:21:d6:d5:ac:b1:71:30:77:7e:
                    8b:9a:c7:7e:47:59:ed:9e:2e:a1:06:1b:95:7b:12:
                    15:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C4:94:9D:02:AC:83:AE:33:D9:2F:E5:5C:32:30:A8:F0:30:1B:2D
            X509v3 Authority Key Identifier:
                keyid:95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:28:53:f4:4d:50:93:7a:ff:3f:de:11:df:a1:22:34:24:ef:
         ef:ed:e1:40:a4:fc:88:c5:35:4d:9b:a7:3a:1d:61:80:1c:00:
         2c:43:97:8e:d6:1f:c8:4a:0d:2d:c3:5c:b2:06:51:1a:c4:0d:
         f8:c1:f9:aa:2b:ad:a7:ab:69:98:2d:ba:76:17:64:c0:73:56:
         3d:3b:0d:e8:5b:09:9c:48:9b:47:bd:72:8f:74:40:de:68:b9:
         9c:b6:ea:9b:d0:32:bb:b5:3a:2a:16:10:c1:c2:00:22:74:75:
         1b:4e:2a:14:b0:36:18:4a:43:52:e9:e9:b9:ab:c9:7c:79:55:
         91:96:dd:e4:44:2d:6d:c5:5e:f3:4e:07:88:4e:1e:92:de:b2:
         4c:24:75:c9:ae:16:39:f6:59:59:5e:b2:2a:38:04:6c:d0:32:
         a5:34:fa:f3:b7:5e:ed:9f:af:18:1b:8a:ff:75:67:58:a4:b2:
         61:4c:01:42:a1:31:67:1d:74:cc:b1:cc:3c:9e:5b:60:8f:76:
         a6:87:0e:04:84:d0:b6:23:c2:21:6b:a5:b4:41:04:92:93:43:
         10:3f:2a:e2:9c:34:58:06:85:c4:29:e2:2e:35:d7:87:16:20:
         d1:f6:bd:ea:82:0a:25:45:f0:b6:d3:08:53:6d:3d:6d:68:39:
         75:cc:67:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:39 2025 by rpki-client