Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
File:                     ldn8gV6QyoeSeQfF6rP-ecohXqo.mft (raw, json)
Hash identifier:          P9lCDdWowuSQov/E70af1kY8ZqXuafHk4ivhFkmDcJI=
Subject key identifier:   56:AF:FD:1E:21:28:61:A0:08:25:0A:CF:3C:54:90:95:59:4C:F7:09
Authority key identifier: 95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
Certificate issuer:       /CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Certificate serial:       01983871749110A28BF9B23E707BE4EA59F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
Manifest number:          02FA
Signing time:             Wed 23 Jul 2025 18:00:16 +0000
Manifest this update:     Wed 23 Jul 2025 18:00:16 +0000
Manifest next update:     Thu 24 Jul 2025 18:00:16 +0000
Files and hashes:         1: A4UfYrXsQ6iSsiav-YeuLfimOTs.roa (hash: cPKqM44Z83MlRMbviQtgWddEZ3JyHZfP+3cvsuoyczI=)
                          2: WqCM--ZSqxtcqHxil1wItYtEpEM.roa (hash: CPcHuYLnfs1zjrIDaz07dO7we+nME2TOlwKRzyCU7gM=)
                          3: ldn8gV6QyoeSeQfF6rP-ecohXqo.crl (hash: 2htHwbVFnU8/brtexYI9cR/IA9LrOmMMzC0AH52PDYU=)
                          4: wkbm61J6JI58DzdO7MCd9o4dj-o.roa (hash: hSaua0y3ny5hOslQkyLJESOAWMtyf0RUHAd8EHcHySo=)
                          5: xhhJQqhM5sB1fU9J0vxm3RoZWw0.roa (hash: +YOuzWIZ++rhf1ENTPtE45w85KCzRIvAgoMtfwrZcLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 18:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:38:71:74:91:10:a2:8b:f9:b2:3e:70:7b:e4:ea:59:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
        Validity
            Not Before: Jul 23 18:00:16 2025 GMT
            Not After : Jul 24 18:00:16 2025 GMT
        Subject: CN=56affd1e212861a008250acf3c549095594cf709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:20:32:0a:15:d1:ff:97:b8:8f:82:75:ec:c3:
                    08:2e:a7:b4:96:7b:22:6d:7e:ae:f5:90:d9:7a:90:
                    60:c5:a7:50:63:ee:6b:25:9f:b1:12:d1:e2:70:b1:
                    20:3d:7f:cc:4c:fc:0c:6b:7f:b6:d1:c2:fd:1e:6d:
                    95:20:45:97:e6:8c:c7:32:21:27:6f:93:8a:d5:b0:
                    8d:38:7d:f4:41:73:cc:15:f9:4b:6c:81:9b:01:fb:
                    3e:a3:33:c9:ff:74:64:30:ec:95:a0:ae:c3:c6:b2:
                    9b:fc:d5:41:e9:a9:86:9f:0e:76:ad:b5:a2:d9:fb:
                    ff:80:d7:89:99:0b:1d:2f:2a:6d:49:af:09:57:00:
                    80:76:11:88:af:fc:94:ea:a1:a3:1f:77:3d:53:0b:
                    09:df:fa:39:fc:ac:99:9f:3f:2e:3d:71:4e:67:44:
                    b9:ae:87:1f:75:d4:a9:05:76:1b:f2:a3:db:26:10:
                    e4:17:38:af:87:fc:c7:93:f4:0b:80:85:ad:9e:91:
                    b6:9e:53:48:1a:a2:96:7e:c3:e5:f9:8b:a6:ee:6d:
                    b1:60:a2:98:ee:16:d3:24:a0:85:55:7a:79:a6:60:
                    d9:d9:2e:1d:77:d4:00:4f:b7:b6:0c:4c:c3:15:1a:
                    ab:87:3e:5c:ae:9f:82:c5:a2:4d:e2:79:f8:f4:ac:
                    db:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AF:FD:1E:21:28:61:A0:08:25:0A:CF:3C:54:90:95:59:4C:F7:09
            X509v3 Authority Key Identifier:
                keyid:95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:72:97:2c:ec:a3:9c:5e:6c:2f:a2:a0:0f:e3:b5:f5:13:3f:
         47:d6:17:93:5a:a2:68:d5:eb:84:b9:54:42:ae:50:00:92:74:
         52:c0:62:9c:a5:56:13:4c:57:b1:49:fc:ec:ba:0b:4a:ec:ef:
         c1:25:4c:57:54:05:ba:2a:90:6f:bd:b0:c4:34:4e:7b:cc:03:
         93:34:8a:12:10:22:0d:20:1c:69:33:2a:23:5b:e8:a8:57:29:
         66:76:89:c4:be:45:85:be:51:ae:74:8d:b8:ff:74:a9:ba:99:
         ba:99:ae:1f:ac:b1:70:03:32:f1:47:b6:78:d0:52:7e:5b:cf:
         d0:41:9a:9f:3d:96:1a:4d:d5:f0:70:20:fd:77:30:db:33:7b:
         ad:f9:9b:61:0d:1c:5b:37:53:e1:3d:06:6c:0a:e7:ef:38:08:
         ff:ca:85:31:2b:a5:d1:95:27:f0:eb:c2:46:84:cf:e3:a1:f5:
         b6:d7:bf:e3:c1:07:ab:e1:81:1c:31:08:b4:0a:ab:4e:a7:7d:
         10:00:d4:f0:16:22:6a:c5:5d:7d:e0:0c:77:09:63:b8:4d:cf:
         37:d1:e6:65:20:bf:18:44:a5:aa:0f:a9:51:9d:1a:9d:60:7a:
         e7:db:62:bc:91:e5:33:dd:54:a8:ce:0e:4b:d9:ff:23:60:6a:
         a5:e9:c4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 00:25:42 2025 by rpki-client