Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft
File:                     lwJP_Eknv-NSiUNdnQKAQguOzcs.mft (raw, json)
Hash identifier:          dYzBQwnTHJdGgY1KHls42Bu6eFLdFCC9+D7fpNMEyM0=
Subject key identifier:   7A:95:80:12:A9:5A:CC:C7:AA:19:CA:4C:18:2C:2E:94:00:4E:04:B7
Authority key identifier: 97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB
Certificate issuer:       /CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
Certificate serial:       0198481B8728056EEF770A64E68654BDD747
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft
Manifest number:          02E5
Signing time:             Sat 26 Jul 2025 19:00:20 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:20 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:20 +0000
Files and hashes:         1: 2SkENpXb0el73BG8YEd0qffOYtk.roa (hash: 0jaoPpV/MX/H1rwXTjmAcjuo/4JCznBTWQGqCB7AVKs=)
                          2: JZvyn9etRbXjoocBllh7CNIOWtQ.roa (hash: mGlCIUXbc6xwaltgbnFxc0QkfIrllonR1TRT5DAGlfo=)
                          3: TPKP9_vIv3ZwN8x82Si3hqn8TqY.roa (hash: yYiZ6dC2HXsnlhNc9UgTQuWOe3jZHK4v0roNCv1tWq8=)
                          4: UQTJpCv9bdrUfH2Saww4hxPMkG8.roa (hash: SUoc+09CYtApBYMdnWncVZH3VjgdKoqVPXysENVRzSs=)
                          5: V4OKC9u84ToAwKHP8ipFnECEUSc.roa (hash: 63X029Xmtv3CuXa3LW6ITuuCc8ehUl7D3xtwLtBbGKw=)
                          6: gLbYx573_mCaGUlXxiWajg-EMEY.roa (hash: XXunEzXS739jLBVukfokQ5juDd54e+4tF/UDVJT6Zy4=)
                          7: lwJP_Eknv-NSiUNdnQKAQguOzcs.crl (hash: pz5YEPicUSl5CLIX96gMv0xWzLkkFJWh/IpwEBSgt4U=)
                          8: nMgeDSRn1palbG1YFRplQLiBJ88.roa (hash: qMMTHgMyiQ7I7jN7xNsRXFOKbCMbPEhnaDyD9fJClec=)
                          9: r8pB6OBljZlMvGeFwUgatLrYkjM.roa (hash: W/h+mxaAQgY0+amEPgG34hfdTN3S90SZFDGD/ImhAMQ=)
                          10: uYRmq9riIpnSj-dt063FdDttSMY.roa (hash: eVkY1lCFSypqnoFYGs3dDTWcHF3+cepLJEQKRr/0kno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 19:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1b:87:28:05:6e:ef:77:0a:64:e6:86:54:bd:d7:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
        Validity
            Not Before: Jul 26 19:00:20 2025 GMT
            Not After : Jul 27 19:00:20 2025 GMT
        Subject: CN=7a958012a95accc7aa19ca4c182c2e94004e04b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:92:55:bc:86:b9:15:8c:59:df:f1:0d:5d:e1:
                    a1:77:bc:2a:b8:7c:90:25:91:8d:8c:92:f1:fc:43:
                    fb:aa:b2:d1:d8:f5:87:e3:2e:52:e4:83:0d:5c:c7:
                    9b:ec:42:1e:cc:68:95:c1:c0:71:54:70:34:8e:09:
                    7d:02:3b:98:b0:58:47:9b:9b:3f:02:b0:07:d8:d0:
                    86:33:55:de:38:4c:2c:54:c7:9f:6b:7d:ea:5d:49:
                    33:df:93:2e:8e:cb:ed:18:68:3f:f5:a0:57:3f:38:
                    60:28:b4:25:8c:1b:ab:ba:9b:8f:b4:98:ab:0a:a4:
                    12:64:b5:8e:e1:c8:58:e9:f1:9a:31:97:b6:de:50:
                    be:60:4f:d6:b0:67:6e:3a:9e:89:1c:10:2a:a2:ef:
                    07:ec:37:b1:9c:49:d2:94:dc:a5:bc:88:91:ae:c2:
                    df:3f:10:66:ba:c8:b8:c8:71:ce:cf:9e:ef:13:25:
                    b6:ec:08:56:74:96:65:e1:3a:de:5c:63:27:7d:f7:
                    37:2d:02:2a:2c:9f:73:c8:7a:b6:cd:8a:2c:ce:8e:
                    f4:e4:de:da:f5:83:5d:97:39:09:c9:8e:ac:51:56:
                    a8:ed:74:5c:a1:e4:62:f1:e0:fc:29:1e:81:60:7f:
                    e1:1c:ec:8f:62:63:6b:70:29:25:bf:22:88:6c:24:
                    34:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:95:80:12:A9:5A:CC:C7:AA:19:CA:4C:18:2C:2E:94:00:4E:04:B7
            X509v3 Authority Key Identifier:
                keyid:97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:8d:62:96:eb:73:01:bd:6b:d4:ba:30:73:1f:3d:43:81:d6:
         e5:d6:ba:d2:a0:35:18:e2:f8:e8:a7:db:52:f9:6e:b2:9c:e1:
         6d:20:fb:c3:c2:c4:90:08:b2:da:21:b2:26:e6:6d:20:6f:28:
         f8:39:f5:fe:69:db:fc:d0:de:47:50:e1:eb:5b:0d:38:dd:d8:
         4d:96:74:d3:92:33:6b:d0:6f:50:30:ca:61:20:3e:0b:15:00:
         c4:b8:d9:e6:f9:07:a3:69:e5:8d:b7:a7:4d:b3:1b:a0:7e:b6:
         66:26:d0:3e:56:a7:54:65:ce:a2:41:15:5c:13:9b:68:75:4d:
         bd:24:ba:33:36:36:d4:9b:cf:5e:fa:20:04:26:23:ad:ad:6a:
         f5:8d:3d:1e:2b:ed:b3:61:f9:dd:c7:b1:79:dd:83:94:bf:73:
         5a:c6:39:aa:88:5b:fd:b9:1c:6d:24:18:a5:b2:91:d9:8c:ef:
         07:8f:d4:1e:53:e3:32:47:03:0e:4e:8e:28:01:a3:ed:a6:bb:
         be:59:5f:9b:2e:23:09:9a:e3:e7:9c:99:7a:a7:d2:fd:d4:a5:
         0b:d1:21:be:d0:84:07:8d:03:2b:43:eb:d6:ce:76:33:fe:79:
         3c:7c:97:10:2c:86:6c:a7:97:80:cd:af:f5:ec:a9:06:7d:2d:
         de:2b:f9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:50:16 2025 by rpki-client