Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
File:                     LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft (raw, json)
Hash identifier:          h5V2ExnNERIai8J+Jxt4is5robzbmZGIQA/DGVBrWDs=
Subject key identifier:   8A:A9:2A:DF:33:12:89:DE:F8:80:77:CE:71:EE:FA:2D:E5:48:51:7B
Authority key identifier: 2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36
Certificate issuer:       /CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
Certificate serial:       01984A41073A8A6ED2E51AC305ECCB436CB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
Manifest number:          1514
Signing time:             Sun 27 Jul 2025 05:00:32 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:32 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:32 +0000
Files and hashes:         1: LAKkoAndva90SPNLZD7phJpzuqA.roa (hash: OPV3y3ajSvAOqXe2gXH83vJ/FKUxnXcCmYMqv/uyJZU=)
                          2: LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl (hash: wEedyZ0ZLFx1ekLWROLdTwLiZW8/PauzeK4VVKiBJ2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:07:3a:8a:6e:d2:e5:1a:c3:05:ec:cb:43:6c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
        Validity
            Not Before: Jul 27 05:00:32 2025 GMT
            Not After : Jul 28 05:00:32 2025 GMT
        Subject: CN=8aa92adf331289def88077ce71eefa2de548517b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e3:25:48:f9:3d:4a:ec:7a:d4:c6:56:e3:60:
                    15:d6:d7:6c:f6:43:cd:e2:37:a9:29:70:68:22:2d:
                    e7:83:d5:a1:5e:fd:c2:5f:a5:19:6c:b7:e2:33:93:
                    26:7d:9f:07:9e:f2:7b:1f:f0:76:3e:95:b3:12:2c:
                    de:ef:7d:51:fd:ba:32:70:52:44:12:8a:95:0c:e8:
                    82:b9:62:17:6d:39:f6:42:8e:39:bd:48:23:d4:68:
                    16:c2:33:7d:20:72:95:6b:e1:d6:22:cd:53:68:07:
                    85:a8:9e:e3:96:23:b8:b9:19:d2:b2:f5:26:18:a3:
                    8d:8f:79:ca:92:a2:05:0e:e6:77:73:fc:9a:a1:01:
                    ea:9e:51:14:08:d5:dc:00:c8:d6:f9:7a:15:f8:46:
                    18:a9:3e:d8:22:32:1e:e9:56:69:ef:01:ed:b9:f6:
                    93:49:55:84:b0:c6:ea:30:21:3e:33:ab:90:f3:96:
                    a7:db:a4:a7:5f:88:e5:ea:4b:37:ee:58:5c:c5:26:
                    58:a1:e6:28:2c:26:52:70:a7:5e:6e:ca:17:97:b5:
                    1a:e0:1c:da:19:e2:ad:11:f2:b7:6b:83:d0:69:9b:
                    74:22:36:c6:93:8c:1b:30:ea:26:1b:c1:b4:18:56:
                    5e:d3:44:5e:97:83:6c:28:1f:c5:d9:0a:51:28:98:
                    fb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A9:2A:DF:33:12:89:DE:F8:80:77:CE:71:EE:FA:2D:E5:48:51:7B
            X509v3 Authority Key Identifier:
                keyid:2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:96:1a:60:67:1f:f8:49:39:47:80:ae:d3:c4:03:d6:9a:a6:
         c3:19:df:13:b6:ff:7d:e4:6e:d0:af:80:df:34:02:19:db:e2:
         f9:ff:64:1f:6a:e4:46:68:3c:81:6a:f8:88:43:11:19:c7:cb:
         2a:1d:36:3a:d8:b6:8b:64:8f:96:fd:22:2d:dd:f1:fd:38:f1:
         73:18:99:e4:10:9d:31:12:f8:88:22:93:1f:5a:af:00:0e:7a:
         8a:7a:94:b3:42:b3:fc:ea:c1:fe:8c:dd:d5:61:ae:9f:b7:a3:
         a0:1a:e7:e9:13:b8:1d:b3:30:e6:a2:f4:b3:79:4d:49:3a:37:
         92:85:eb:3a:cd:62:0e:5a:cc:42:ae:0a:60:66:84:fa:04:e4:
         19:4b:3e:11:dd:cb:ba:ed:a9:4a:d5:2c:26:2b:67:47:fc:75:
         d0:e8:52:ee:a9:6c:2a:62:04:65:5a:2a:a3:a2:db:f2:50:51:
         b2:8c:7c:4a:90:63:5d:43:bc:7f:1b:a2:90:17:5f:1e:42:cd:
         32:4f:f7:14:73:d5:7e:e7:21:03:49:8d:3c:bd:23:56:1f:23:
         86:79:5b:bd:f9:ed:9a:6e:62:8b:0e:80:47:9a:5e:91:d2:f2:
         34:e9:0f:3c:7b:6b:b9:2d:32:64:77:79:c5:bf:9c:7a:90:d2:
         d4:83:50:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:39:31 2025 by rpki-client