Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
File:                     lNmOj-xoB3WhVyZuDGt4sUGjT14.mft (raw, json)
Hash identifier:          G1slsk9eBTsVCnO62Vf0/HJuE2H6MZckNP8b/9AqFTI=
Subject key identifier:   C6:4A:99:26:A5:2B:CA:1C:81:86:36:B2:29:B3:03:06:CB:02:F8:95
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Certificate issuer:       /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial:       01983804B87E42D361FFC9A3E5E0D87D6AE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
Manifest number:          0EDA
Signing time:             Wed 23 Jul 2025 16:01:30 +0000
Manifest this update:     Wed 23 Jul 2025 16:01:30 +0000
Manifest next update:     Thu 24 Jul 2025 16:01:30 +0000
Files and hashes:         1: 0YppZtvRSXBHB8NFrLn_rzdM4Wg.roa (hash: AIX2Owt5viXo6Wp2eQTWR2x2rHaX/2g8xn17pbf1zi4=)
                          2: EKnIHBjVrQVGKttI-rFo2gf2VFc.roa (hash: J3kh1NFjTixOap26aJDcz17JVV8gbZy6u7PZjGr/JnE=)
                          3: H0U-Km3rz_YtidSX7xAdJ-A_RzA.roa (hash: L4ck5kUvwk5NkXR5fk3e/8692feGx3cZZTXMDkDHo6o=)
                          4: LaP9yZWFLbz-vA6yy7WQjmvmnXk.roa (hash: dSsBDcLcDlWyNXwHKuTffodeoLPC9SNQ0Byy4wB2Z1w=)
                          5: j0eQCpRbkkshg2cOl2P0JLeBDDw.roa (hash: sMtFOxKW/3UNJ7k3m/3q4HKIZXU/80JJ7tR1eHGV0HE=)
                          6: lNmOj-xoB3WhVyZuDGt4sUGjT14.crl (hash: jT7wRqdQVVWZ9yXzkD+eaPUhWWKNOv4YkEQM9cJflfA=)
                          7: rJVC54KMnjCB_OVNXkR7wbY_pqY.roa (hash: XBqW9LJVjSv4j8aKjrCl3Ou7nqLb3Clpr0sfUy3Uq/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 14:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:38:04:b8:7e:42:d3:61:ff:c9:a3:e5:e0:d8:7d:6a:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
        Validity
            Not Before: Jul 23 16:01:30 2025 GMT
            Not After : Jul 24 16:01:30 2025 GMT
        Subject: CN=c64a9926a52bca1c818636b229b30306cb02f895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7a:b2:46:bb:2e:46:4a:38:13:57:e9:e2:7b:
                    a7:ec:90:e6:31:8a:0b:0c:1c:29:98:4f:5e:e6:96:
                    19:b9:ea:0c:a3:5d:d6:db:f6:d2:99:a6:bb:f7:48:
                    83:20:61:53:0c:42:bf:db:5a:a0:d8:12:77:fb:61:
                    53:b4:71:56:d5:80:c3:0c:48:27:46:90:0d:6a:a2:
                    1f:26:33:a7:1c:da:38:08:c8:8e:44:1d:6c:cb:c9:
                    00:fa:84:c8:eb:9a:52:51:5d:14:cf:75:b2:b1:f4:
                    83:04:05:56:13:dd:40:be:6b:22:a2:d7:6d:d8:7b:
                    fd:27:25:c7:fa:32:2b:4d:f5:b2:2c:33:e0:37:0d:
                    2a:ab:01:5b:fe:44:40:c9:3b:6a:0e:32:a6:b2:23:
                    99:f1:52:30:bc:4d:27:06:75:27:87:9a:5a:9c:a7:
                    3b:cf:f2:71:ff:93:c3:51:89:83:70:f1:21:8d:12:
                    81:dd:3e:36:a8:ea:80:22:71:6b:b5:ff:bc:9f:e2:
                    bf:78:fc:c3:0c:2f:8f:f9:d4:35:00:81:62:5e:01:
                    18:10:35:ca:5d:6a:52:d7:90:d7:20:c3:33:e3:e3:
                    67:25:2b:98:2d:bb:92:a4:94:9f:8c:a1:a1:73:76:
                    99:f6:58:56:fd:79:eb:2d:cf:6e:d9:34:37:4c:6f:
                    ec:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:4A:99:26:A5:2B:CA:1C:81:86:36:B2:29:B3:03:06:CB:02:F8:95
            X509v3 Authority Key Identifier:
                keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:4f:a7:20:db:6f:0f:da:33:9d:62:52:74:28:25:ce:13:02:
         8e:cb:f2:ec:3b:b3:47:5a:a7:f3:48:4d:b0:87:18:03:71:0d:
         8b:d9:30:82:16:97:34:f3:44:88:36:ef:f4:43:fb:c6:d1:8a:
         4b:e6:f7:70:38:4d:02:74:f2:88:07:87:60:da:f4:6f:0a:ad:
         30:56:ce:bd:27:bb:4b:09:42:13:7b:ae:cc:15:0d:73:5f:bb:
         00:8a:ed:a6:8a:24:b7:86:b4:38:c8:15:a3:85:34:8f:57:de:
         07:8d:7d:e0:67:13:81:b4:15:65:17:47:84:68:52:69:e7:4c:
         84:b0:a6:08:38:71:38:7d:6c:a9:7d:f2:75:3e:81:84:50:d7:
         55:e6:33:62:03:0d:2d:f9:6f:dc:4e:66:fe:a1:92:56:1b:f1:
         db:d1:df:35:b8:55:c8:73:1b:7b:26:0e:07:70:75:41:d5:f5:
         46:b7:1f:7e:77:71:29:71:01:a2:95:62:6e:1d:32:ca:c6:b9:
         e0:3a:34:39:3f:56:3f:15:f8:01:d7:8d:e4:80:3a:74:4b:be:
         22:94:1e:21:23:fa:9e:a5:74:23:1c:f2:5a:e0:17:75:c9:0c:
         be:79:9f:4c:b9:d2:5b:09:c7:b3:6c:94:48:c0:2d:f5:2e:cd:
         ff:6f:3e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:27:48 2025 by rpki-client