Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
File:                     lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft (raw, json)
Hash identifier:          IQJT2D0WfGQoKIKNJCV6yehgP86fsvk8R7lIy2dc9Ko=
Subject key identifier:   62:D5:FD:DF:4D:9F:E9:35:9F:99:C1:C5:79:0A:3A:E1:06:AE:D1:06
Authority key identifier: 95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7
Certificate issuer:       /CN=954b071a03db5d233d05ab0394548007767f83e7
Certificate serial:       0198530DB3753522A5BBA40E748A4842034E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
Manifest number:          067D
Signing time:             Mon 28 Jul 2025 22:01:03 +0000
Manifest this update:     Mon 28 Jul 2025 22:01:03 +0000
Manifest next update:     Tue 29 Jul 2025 22:01:03 +0000
Files and hashes:         1: MeHcHEJLI5aJxpbL08K_nBsRPYY.roa (hash: N7FogbwCwinhT6HlieiaEOy7N6CNclRf7G6B1lRFJU0=)
                          2: lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl (hash: sUaw1l9WAZe5S1BDf3nKI2llJTb1MtbtJaRifO8nOU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0d:b3:75:35:22:a5:bb:a4:0e:74:8a:48:42:03:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=954b071a03db5d233d05ab0394548007767f83e7
        Validity
            Not Before: Jul 28 22:01:03 2025 GMT
            Not After : Jul 29 22:01:03 2025 GMT
        Subject: CN=62d5fddf4d9fe9359f99c1c5790a3ae106aed106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:89:7c:0d:af:bd:7e:6e:46:8d:16:c4:7d:1a:
                    6d:d3:28:30:bb:68:2f:e4:03:99:90:41:7e:e8:d3:
                    42:30:b4:90:5e:39:cd:db:f1:8e:b6:22:1a:a0:ce:
                    7a:dc:37:ba:26:91:f4:e4:92:3c:93:71:1c:2c:72:
                    47:24:96:f2:01:5c:cf:ce:43:1c:f4:8e:07:c1:5b:
                    d0:59:04:52:50:8e:1b:ca:8d:51:6c:bf:91:c5:c0:
                    60:6b:a8:a1:4c:1b:3f:a6:4f:2c:67:70:dc:14:63:
                    8e:0e:4d:2f:e8:62:a1:d6:17:c3:d5:a5:01:1d:b7:
                    a1:26:62:ab:c6:4c:f9:da:34:fb:90:7a:92:74:e5:
                    2f:77:88:a6:7a:fe:6f:25:ff:8a:ec:d8:f1:2d:89:
                    c3:79:b8:ac:25:9f:a4:19:e3:34:9b:ef:88:c7:27:
                    57:56:62:7f:82:5b:8e:44:83:97:3c:98:32:c6:7a:
                    c0:32:db:3f:78:6f:5b:63:dd:2f:cf:0e:93:59:e5:
                    ec:6f:dd:24:84:4d:b7:68:28:03:f4:74:27:3f:72:
                    38:cb:be:6d:14:94:4d:3a:19:31:84:ec:7d:8d:cf:
                    a2:da:68:86:b2:81:0c:05:28:4a:df:10:6a:e2:b5:
                    b6:8e:cc:7f:d2:b8:48:b3:91:06:7f:54:34:4b:7e:
                    0a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D5:FD:DF:4D:9F:E9:35:9F:99:C1:C5:79:0A:3A:E1:06:AE:D1:06
            X509v3 Authority Key Identifier:
                keyid:95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:9e:be:ce:4a:60:3d:4e:ad:92:7f:33:7f:dc:28:2a:4d:3f:
         91:2b:69:8e:2a:d4:e8:9c:6a:39:16:91:fc:92:bf:0e:60:3c:
         11:18:4a:d3:bb:28:81:bc:09:9c:41:e1:ca:8d:86:d0:00:bc:
         d3:04:84:79:67:4e:8f:04:fb:4f:6d:b2:01:5d:2d:b1:5b:61:
         9a:a3:d5:83:13:e7:7a:19:17:b3:2a:38:83:95:7d:e5:90:ad:
         0b:14:ab:d2:05:7c:87:2b:d1:12:a6:20:b9:69:4a:d1:cd:c4:
         3a:c8:cc:8d:4c:05:01:ab:b9:00:a3:40:ae:11:bf:b5:07:81:
         94:ea:73:8a:8e:fd:bd:61:87:7c:18:1d:b5:27:90:a2:ed:a7:
         a8:6a:49:71:ac:46:83:d4:21:9e:ed:08:be:90:c8:76:84:e5:
         0a:61:7d:5b:5d:62:a1:01:d3:8b:c3:ea:4a:b4:f8:24:60:45:
         24:5a:2c:39:42:8f:c2:7e:ff:ca:02:98:da:99:69:d5:09:75:
         16:c2:12:28:96:a0:ba:40:b6:7b:45:69:97:32:4f:cf:00:73:
         20:62:23:ec:15:1b:71:ae:81:d8:ea:06:67:23:3f:36:64:87:
         4b:c5:c5:3a:f0:d9:4b:22:b7:e0:31:43:07:bd:96:89:14:fa:
         b2:04:fd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:39:34 2025 by rpki-client