Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
File:                     lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft (raw, json)
Hash identifier:          AmPJrTORXQLUkEzEAZhMnUyetwufijn8ijbouXuGSdc=
Subject key identifier:   FD:7E:26:E8:E5:7A:86:01:51:DA:2D:05:39:D7:09:E8:F2:DB:B1:7D
Authority key identifier: 95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
Certificate issuer:       /CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Certificate serial:       019849654234A7B873DE083C8CE7EF704FB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
Manifest number:          02E2
Signing time:             Sun 27 Jul 2025 01:00:29 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:29 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:29 +0000
Files and hashes:         1: fxlFgI3EysiECIF3mL-wg3P66gA.roa (hash: WG+Wf/XaXu5fK/R90C0HW02K/9LIUpQXBf5GmZqFRDg=)
                          2: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl (hash: uj3rpfL0Jiy4UKNKQS7Y1352qqfIFJXg06+38wV5Vcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:42:34:a7:b8:73:de:08:3c:8c:e7:ef:70:4f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
        Validity
            Not Before: Jul 27 01:00:29 2025 GMT
            Not After : Jul 28 01:00:29 2025 GMT
        Subject: CN=fd7e26e8e57a860151da2d0539d709e8f2dbb17d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d0:bd:0d:4a:29:b6:74:02:1a:37:a8:56:cd:
                    6b:fa:98:5e:df:b0:7b:d5:4f:20:8b:92:39:0f:83:
                    37:99:ee:24:58:44:bd:fc:a5:dc:bb:04:45:73:61:
                    28:b7:83:3b:72:69:13:10:9b:d1:6d:6d:d5:ea:f5:
                    a9:cd:e2:73:c3:0a:27:31:95:4c:1f:a3:06:9b:8b:
                    2b:e1:18:e2:39:60:35:e1:db:b4:aa:69:36:d0:4f:
                    85:2c:c4:82:4d:c5:c7:d0:2f:6c:f1:4d:ad:e4:61:
                    6c:65:84:41:24:59:2a:c6:27:56:75:c4:38:4d:b9:
                    91:c6:24:ca:5c:15:ab:c8:6b:32:b0:29:d6:cf:18:
                    b8:88:7a:88:24:47:fd:b2:36:24:b5:a8:40:3f:fd:
                    3b:d1:ad:b8:a2:ca:59:ce:fc:4c:60:79:9a:d6:1c:
                    62:71:a5:9d:5e:b4:43:19:7f:f7:1a:7a:f0:07:72:
                    39:af:a4:16:4a:78:16:3e:e3:3e:0a:7c:64:7e:4f:
                    97:e2:e2:1d:ec:1c:6b:6b:20:fc:5f:c3:97:c0:5b:
                    65:48:35:bf:fb:0a:51:c6:3f:ab:8f:2e:d4:96:34:
                    6e:4e:b0:67:47:6e:cd:20:c2:53:ef:59:a1:ab:6c:
                    52:23:07:4c:b1:48:db:12:dc:e7:d6:aa:71:eb:cc:
                    5c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:7E:26:E8:E5:7A:86:01:51:DA:2D:05:39:D7:09:E8:F2:DB:B1:7D
            X509v3 Authority Key Identifier:
                keyid:95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:97:1e:6a:22:29:36:12:9f:8f:83:b5:02:95:3d:f8:d1:a4:
         a8:2b:3d:c4:f0:7e:08:1c:d0:9f:84:0a:48:a2:29:c7:d8:77:
         e4:a9:b7:82:38:3e:21:9f:7f:4d:58:b4:93:01:f0:12:c8:bf:
         19:e1:9d:0c:e5:d5:39:bf:f4:63:f5:df:11:4d:38:da:c8:fc:
         82:6f:64:d9:95:20:1f:e0:39:da:c1:b0:b2:20:73:d8:35:6a:
         56:f3:b3:1e:6d:c3:af:ab:de:31:94:46:e4:40:c5:b7:8a:30:
         60:39:c4:0b:50:f5:e1:6e:6b:8d:73:8c:81:d7:76:4c:5d:4d:
         68:56:76:ea:79:64:6f:cf:f7:6f:3d:db:41:f4:b9:3b:19:57:
         c2:76:0a:96:77:48:6c:61:50:24:11:c8:72:63:67:3c:00:8b:
         9f:ad:3d:7b:f7:f3:17:14:85:29:db:60:4f:10:a4:2c:c3:85:
         ff:fd:89:1c:c2:16:bc:a9:d2:2d:23:aa:2f:40:0b:75:f2:1d:
         78:17:b2:00:dc:b1:61:bf:d5:a3:1b:0d:af:ee:f9:0f:98:80:
         76:8c:05:86:74:9b:7c:ec:2b:06:b2:74:5c:56:a9:f0:98:bf:
         c7:85:96:84:12:1a:b5:a3:e9:5e:2a:85:c3:54:16:2c:fc:4f:
         9a:18:d3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:55:44 2025 by rpki-client