Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
File:                     LRjYfouf6XS-3wl_iJSDmIYaxH4.mft (raw, json)
Hash identifier:          zUl4iUKHnTO9geV344qtnqSFGQOemgX1y1pTjU4HM/I=
Subject key identifier:   50:B7:A9:F8:0E:55:35:1C:E1:04:7D:17:66:10:2F:DC:1C:2A:E2:46
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Certificate issuer:       /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial:       019873E1E5A0F028DCFEEC9ED91C532411F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
Manifest number:          0EC5
Signing time:             Mon 04 Aug 2025 07:00:40 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:40 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:40 +0000
Files and hashes:         1: D0SM7svQIwgtTWtBXQRfVaYEWCM.roa (hash: 0gzyVGki8KAciWCmOf7f1a5tlOgoH/nOkPBzCHojuSo=)
                          2: LRjYfouf6XS-3wl_iJSDmIYaxH4.crl (hash: jWaJVNzR0FIcIYp3r5u4gPEgL0GOkL+rHRn6A5MW46U=)
                          3: _IXLnCzw_zVB3dV_MJacG4jX80Y.roa (hash: Gt8+0DW6xRdgGsnmBSXKglilyEwDNEUME1kVSSFIiv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e1:e5:a0:f0:28:dc:fe:ec:9e:d9:1c:53:24:11:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
        Validity
            Not Before: Aug  4 07:00:40 2025 GMT
            Not After : Aug  5 07:00:40 2025 GMT
        Subject: CN=50b7a9f80e55351ce1047d1766102fdc1c2ae246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b7:e1:27:c0:a3:61:b7:66:93:bd:93:58:7e:
                    4c:29:a9:f1:16:53:17:d3:d1:bd:dd:2b:6a:5a:b2:
                    eb:da:e2:d1:95:df:77:28:8d:9e:76:78:d6:96:69:
                    1d:dd:e3:55:69:75:9f:cf:eb:48:af:0e:46:41:a0:
                    c7:0d:79:aa:e0:db:53:0f:93:0f:03:cd:74:4f:60:
                    bb:f9:4f:cc:10:7e:9a:69:ff:06:f9:9a:df:09:0e:
                    bd:db:9d:15:21:4e:be:29:32:07:ac:e5:99:5c:9a:
                    db:cb:dd:33:52:c0:18:31:83:8e:2a:ef:47:8e:81:
                    36:a8:2b:ee:b3:11:ef:c2:df:58:12:8a:fe:71:6d:
                    a8:8b:97:32:aa:54:79:90:73:62:b0:49:87:b3:38:
                    7e:73:2b:6e:26:5d:a9:d4:07:f7:be:8c:25:81:0b:
                    76:3e:0a:1a:2a:23:f8:fe:db:f5:74:7a:0e:c4:d1:
                    50:1a:69:0b:e1:b1:a8:f4:8d:31:87:3c:46:ab:a7:
                    71:e3:d7:cc:bd:49:8f:de:4e:f7:94:52:09:cd:bc:
                    f0:21:fd:f4:83:8b:2e:18:59:38:f7:d2:9c:32:4c:
                    9b:b5:b7:99:6e:3e:2d:c9:77:7e:cd:59:54:31:a4:
                    77:46:b2:64:a2:f4:c0:94:c9:a4:bd:90:6c:03:93:
                    0d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B7:A9:F8:0E:55:35:1C:E1:04:7D:17:66:10:2F:DC:1C:2A:E2:46
            X509v3 Authority Key Identifier:
                keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:eb:05:27:10:8c:69:6f:0d:75:d9:6b:41:82:e6:5d:d4:b9:
         a6:a1:7f:82:59:e9:b7:40:04:51:02:0f:a8:ec:6c:9f:61:97:
         f6:3b:9a:ac:6d:f9:b9:08:08:c4:cc:03:43:2d:c8:82:13:b7:
         13:1e:77:5f:ac:71:00:83:36:f3:80:f7:b8:9d:70:a8:dc:2b:
         4f:0e:ba:e1:40:99:bc:64:ac:34:2c:d5:fc:b3:36:92:e2:17:
         6c:7f:73:49:bc:07:d2:02:fc:69:b5:75:9a:d2:39:7b:aa:d4:
         7b:2f:a1:f1:75:12:d7:3a:be:7d:c6:36:8c:5c:e8:22:2c:28:
         51:22:fc:87:31:32:f0:c7:aa:71:75:84:d5:11:f1:da:b9:73:
         a7:6a:c7:c6:65:bd:b6:36:a6:7d:82:8c:1f:05:c9:62:3c:7b:
         f1:b2:46:bf:2c:70:45:9b:f7:06:32:29:48:18:41:85:c3:af:
         53:cc:41:37:5d:47:cc:bc:e5:d8:50:25:bf:d9:d6:8d:4f:89:
         2b:75:78:81:75:f5:79:0e:95:9d:5e:de:a5:3c:31:8e:5c:d7:
         0a:67:ce:ec:6b:15:49:6c:5a:2f:5a:27:47:fc:a7:c8:70:bb:
         c6:25:d7:1d:13:87:4c:a0:c3:ab:df:0f:d1:07:73:49:7f:97:
         36:b2:a6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:08:18 2025 by rpki-client