Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
File:                     LsEh4VRd8-W7hukYjygl-tdHf3U.mft (raw, json)
Hash identifier:          FDJjOugIwT4QbgUwZxqXz/qE3e6hSb6b5PnpE+GFjDM=
Subject key identifier:   57:47:18:C8:0B:12:0B:B7:6F:D2:CA:03:F6:AF:CD:91:BC:3A:B8:23
Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
Certificate issuer:       /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Certificate serial:       01984407A51CC85D165A3B31F88902880023
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
Manifest number:          1600
Signing time:             Sat 26 Jul 2025 00:00:08 +0000
Manifest this update:     Sat 26 Jul 2025 00:00:08 +0000
Manifest next update:     Sun 27 Jul 2025 00:00:08 +0000
Files and hashes:         1: 0IG7CMPC-7SDKCTiz8anhD3c0zs.roa (hash: fOnGjT4Xyjjotwa9/pecYw3cI1uzEt3+li8tB/lSTXY=)
                          2: BU0Pzn4hZS4sQu5v8Q1Qbbhp9vM.roa (hash: 9kbaESAN0/YNybQyxy7LooDJN3A5I92At9aUcKOvy/s=)
                          3: IwlbmFExD2G5c49HgZqQSHA1wZk.roa (hash: 45pPUt5QNz8dN0ylQGV0BCVZpBwOOv2uaieuY/tEzHc=)
                          4: JH5Q15rYm3yauoa5O0AtnaEF5T8.roa (hash: P8bh12UacYgaXKXWnxHFtSknccP/NWYvpFtt4o+MFnQ=)
                          5: L1Jr9Ntwc8rL0VyBMGBPBeMOSbU.roa (hash: 2Po6H5pjnfZQ8LGkU3TaUi4GHx7DH6w6vtm+1KWoyVI=)
                          6: LsEh4VRd8-W7hukYjygl-tdHf3U.crl (hash: P+QCoMmqmm8A2+ScLUwxijAGDU4SvQYv6tlGEspLmI0=)
                          7: X1X4I6xtC4Tyzz9jxci5NVZVFuk.roa (hash: Y7rSJ5Le7s/lA/Q7YQ3ZJcSkf2udL6S8lMTSgJ0RabQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:07:a5:1c:c8:5d:16:5a:3b:31:f8:89:02:88:00:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
        Validity
            Not Before: Jul 26 00:00:08 2025 GMT
            Not After : Jul 27 00:00:08 2025 GMT
        Subject: CN=574718c80b120bb76fd2ca03f6afcd91bc3ab823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2b:e4:95:5d:92:d5:5a:5a:51:c7:18:68:23:
                    1f:09:eb:49:15:ed:f9:8e:b3:2f:8b:10:7d:3b:5c:
                    a0:58:d8:a8:f1:f8:ec:6a:be:76:5b:11:6d:df:5d:
                    b1:5a:df:fa:7c:0f:a6:20:db:10:54:96:92:fd:97:
                    66:47:e4:1b:cc:d2:20:85:06:60:30:ef:2f:0d:83:
                    c4:3d:d1:c1:73:25:28:97:db:e9:97:36:61:8e:be:
                    b5:5d:8a:de:28:a0:ca:e0:63:c4:a8:da:38:dc:36:
                    d8:de:b1:48:14:94:27:45:28:56:62:32:9e:37:57:
                    a2:4a:9b:d1:d8:2d:9e:b6:75:47:24:3c:e9:d4:93:
                    d1:4d:18:07:cf:5c:e4:b6:0f:a3:a3:c5:05:b7:12:
                    f2:0d:79:c4:64:61:a8:d8:b1:d2:ba:2a:71:5a:2a:
                    f4:eb:6b:f3:d5:19:a9:9e:5d:23:5d:c3:ba:c8:7d:
                    2e:7b:68:21:9f:49:60:5f:31:9a:de:66:55:5a:bd:
                    ad:f3:5c:c4:72:f5:44:18:4f:13:bf:fc:c6:3a:3e:
                    5a:6f:bc:1b:76:bb:92:9d:95:10:42:c9:75:ab:5d:
                    fc:b6:9f:c7:c5:53:3d:3a:b5:06:f4:6a:59:95:58:
                    f0:95:75:7e:4b:77:fc:6a:3b:65:6f:64:dd:65:fc:
                    71:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:47:18:C8:0B:12:0B:B7:6F:D2:CA:03:F6:AF:CD:91:BC:3A:B8:23
            X509v3 Authority Key Identifier:
                keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c7:7e:03:64:27:f7:e4:4b:b5:2d:a8:dc:15:87:67:77:61:
         49:8c:49:03:27:19:5b:b4:95:9b:08:c4:83:49:a4:32:ea:23:
         98:19:4e:18:29:02:1b:59:41:0b:a4:c5:1f:bf:00:53:2d:a7:
         c9:4b:0d:46:ae:48:b5:81:d5:42:e9:92:09:35:d7:a6:c6:5a:
         b7:35:c2:49:dd:bb:af:fd:2d:9b:a9:f5:21:b6:d9:32:21:9f:
         0b:0c:bc:1c:a7:55:b0:d1:f9:f4:c3:8a:46:7b:bf:1f:69:2e:
         85:1d:26:df:8d:da:46:14:5e:14:1c:a3:7f:e3:7d:6a:33:3c:
         47:a6:a8:4a:15:b5:aa:a3:07:f4:e6:9c:0d:b6:5e:cf:c1:8c:
         c1:7b:7e:35:ff:23:ca:1e:31:07:9b:c7:0d:7b:6b:30:e9:76:
         e0:da:25:3a:d1:fc:2a:52:a2:ca:25:bb:3e:19:dc:11:82:a6:
         e6:fe:2d:da:89:24:4d:fe:98:18:df:dc:de:c2:9e:b0:19:5f:
         97:ab:de:f5:62:8a:a9:1b:46:5c:9a:05:86:88:82:72:8b:0b:
         84:73:2e:24:c7:4f:c2:83:0e:4f:52:fe:36:2e:2d:3c:02:ef:
         06:fb:a4:99:b9:1f:f3:eb:c0:2b:8a:3d:36:53:55:85:42:dd:
         b0:c0:cf:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----