Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
File:                     lJgy8CXL76HqG8oMOQtjwXaUjNI.mft (raw, json)
Hash identifier:          Wydmm1W4OTAarVkVDewnj59u3uIhr52fuRVrCUunkvc=
Subject key identifier:   75:1A:3A:48:E8:0D:AF:9C:C3:F5:D0:C7:A2:19:3F:A6:B2:E2:6C:55
Authority key identifier: 94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2
Certificate issuer:       /CN=949832f025cbefa1ea1bca0c390b63c176948cd2
Certificate serial:       019848C018F1E425795DBE8D388C84365E1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
Manifest number:          047B
Signing time:             Sat 26 Jul 2025 22:00:05 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:05 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:05 +0000
Files and hashes:         1: euJQQHPXaEEafjtTEpsACoT0UO8.roa (hash: LMr9+ppvHgb0CfRsIuadMwP8K1TTGxo74gFD8Bmp2bs=)
                          2: lJgy8CXL76HqG8oMOQtjwXaUjNI.crl (hash: qBug8q5V1dU/N6ZP9vlAyz+kXITuktcF/TY78zbx7eM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:18:f1:e4:25:79:5d:be:8d:38:8c:84:36:5e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=949832f025cbefa1ea1bca0c390b63c176948cd2
        Validity
            Not Before: Jul 26 22:00:05 2025 GMT
            Not After : Jul 27 22:00:05 2025 GMT
        Subject: CN=751a3a48e80daf9cc3f5d0c7a2193fa6b2e26c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:14:86:c9:89:63:4a:8f:92:33:3a:37:50:57:
                    1f:b9:d1:9c:22:6c:df:e0:37:cf:fc:c5:f5:53:27:
                    6d:46:31:90:5b:0b:ef:05:87:72:9e:85:7e:ff:c4:
                    85:92:80:d5:1f:b8:fd:4a:2b:d2:41:d7:16:62:05:
                    fe:62:45:67:ab:66:66:d6:f5:40:14:55:22:c7:d5:
                    30:a3:7a:bc:08:32:8e:5f:39:d0:8a:6c:ba:a4:1d:
                    56:df:e5:57:29:f2:ab:8a:87:09:7a:91:3a:0e:a7:
                    5c:d7:27:1f:f4:0e:12:84:51:79:2b:3b:fc:1f:c2:
                    c7:d7:c1:53:b5:b1:9d:2c:5f:e6:47:c8:d2:b3:61:
                    49:4f:01:8a:17:48:6b:d9:c9:c5:4c:8e:6a:ea:ae:
                    7e:70:86:01:02:97:65:22:38:64:fc:ca:fe:d6:27:
                    aa:87:73:db:a6:62:2d:9f:3c:9b:a8:5d:78:15:7c:
                    88:e8:67:04:06:77:95:ea:5d:f8:f4:9e:e5:ac:60:
                    78:12:c1:92:8d:6a:66:45:04:19:dc:e8:ac:78:f4:
                    41:f5:5f:2b:c3:09:40:c9:41:25:6a:be:81:71:83:
                    fa:e6:0a:3c:11:f9:6b:7f:ee:f9:2d:45:b3:79:8b:
                    89:45:97:34:23:da:3f:5f:4f:24:34:80:cb:f0:4a:
                    ac:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:1A:3A:48:E8:0D:AF:9C:C3:F5:D0:C7:A2:19:3F:A6:B2:E2:6C:55
            X509v3 Authority Key Identifier:
                keyid:94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:0e:38:5c:ed:31:65:ed:7f:60:db:96:f7:48:d2:dc:ef:98:
         c3:05:8d:af:a3:08:1f:3e:7f:1c:39:78:02:28:44:99:c3:8c:
         1c:5b:e0:21:4c:5b:d8:6d:ee:7d:4e:4b:2c:6e:04:7b:e3:80:
         f1:74:a4:78:24:9a:5b:04:bc:9f:8c:f8:5d:bf:b1:8e:6d:e1:
         3b:9b:f0:15:a5:4a:03:a7:88:cd:46:f3:a8:af:ac:46:bc:ef:
         7e:bf:4c:0d:21:3a:c9:0a:b5:a2:33:dd:99:b6:ce:2e:1f:5c:
         55:56:94:03:2c:cf:cb:11:6b:4a:80:32:73:f6:5c:cc:90:56:
         f7:9d:08:b5:9c:fd:89:ab:45:7b:c8:08:18:c5:95:6e:24:3c:
         46:59:ce:f0:80:ab:6a:40:7e:27:f4:8c:64:f1:90:f0:59:b7:
         e1:21:bc:32:38:68:ae:a7:5a:d4:4e:e5:c0:9e:b3:ed:ac:be:
         8b:a9:0b:19:63:6c:e3:d8:f7:10:33:f7:df:44:7d:b5:3b:6d:
         96:ad:d6:66:38:8a:1e:25:59:55:61:72:8b:f2:89:ae:05:b1:
         54:7a:f6:f6:2a:7b:ad:7c:42:27:4e:88:2f:af:d9:0f:94:91:
         5f:1c:e3:40:65:ad:17:de:78:41:95:4b:fb:83:fd:5f:09:ee:
         ac:75:d3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:32:45 2025 by rpki-client