Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft
File:                     lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft (raw, json)
Hash identifier:          TtgVjRqsjmyXExoV5Yts5rhF4cqY6+aODDjoIwLuYwU=
Subject key identifier:   28:9E:0C:4C:60:D4:AE:A2:2E:6C:9F:AE:F4:AF:A4:E4:AB:32:1E:C2
Authority key identifier: 96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
Certificate issuer:       /CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Certificate serial:       01984AE5C14FB2A9EC8D05CA839C3EA948CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft
Manifest number:          088D
Signing time:             Sun 27 Jul 2025 08:00:27 +0000
Manifest this update:     Sun 27 Jul 2025 08:00:27 +0000
Manifest next update:     Mon 28 Jul 2025 08:00:27 +0000
Files and hashes:         1: 3wIhCEw3GWmZT7mdirKx25Pph28.roa (hash: r+Bw53VwkmYw54+5M14miJP/kk33s3+eanOkc4CeEtQ=)
                          2: E4m1CzQ-EuF3Hc5mHM5f6mPC5eQ.roa (hash: gowTRbLyNdf/42ayzy0sQQZU9KBkEVzXjFvCn/3IDtc=)
                          3: lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl (hash: gVgmQHNSdJIHndC1P/eo2uh0iZYFyMjkjFZf81DM8mA=)
                          4: rjR8lGZevB88cWBoZrBIto3MeHA.roa (hash: rMHaEQRl7caXSgxty5dwGL/wlOcGLl25XAlQeBFASec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:e5:c1:4f:b2:a9:ec:8d:05:ca:83:9c:3e:a9:48:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
        Validity
            Not Before: Jul 27 08:00:27 2025 GMT
            Not After : Jul 28 08:00:27 2025 GMT
        Subject: CN=289e0c4c60d4aea22e6c9faef4afa4e4ab321ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:73:b6:9a:fc:80:0c:3b:e8:48:d4:0f:c9:75:
                    96:3d:45:59:b1:c9:24:7e:e6:2e:51:34:42:0d:be:
                    77:1a:00:24:0b:c7:d2:43:10:0f:24:40:e4:3f:22:
                    58:d4:e1:bd:f7:c3:52:40:89:f1:25:59:ef:bd:ad:
                    14:d9:8c:1a:a5:fc:b0:a1:70:84:34:49:f3:40:e0:
                    95:a8:5d:31:62:a1:04:04:6e:db:e1:18:9f:94:6a:
                    a9:99:46:04:fb:1e:a0:e8:91:52:25:61:0a:de:52:
                    0b:fe:97:ed:7c:f9:92:d7:2a:70:03:c7:31:6d:6d:
                    cf:0c:aa:46:3a:6e:8d:3b:98:25:3c:28:e2:8e:28:
                    c5:e6:15:e5:97:f2:01:c0:c7:af:3f:78:37:f2:fa:
                    86:35:43:36:c5:47:b0:a0:d7:7a:06:e0:54:8a:e8:
                    71:1a:4c:53:b2:15:18:9c:2f:36:c9:0e:ba:ff:94:
                    19:41:ff:3e:16:23:09:38:3e:cb:fb:dc:ed:04:8f:
                    53:cf:3d:a8:7b:43:b7:ed:ca:76:25:bf:4c:98:c0:
                    7b:24:7c:a1:44:7e:dd:eb:30:76:4e:f1:0a:02:82:
                    77:2d:e6:f9:12:d4:08:eb:b3:9c:fb:fb:03:5e:6c:
                    ca:13:6f:ba:83:33:50:3c:50:8f:70:e4:ab:f9:be:
                    15:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9E:0C:4C:60:D4:AE:A2:2E:6C:9F:AE:F4:AF:A4:E4:AB:32:1E:C2
            X509v3 Authority Key Identifier:
                keyid:96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:aa:96:92:42:d7:8a:52:bb:82:ab:22:b2:76:4b:3d:d6:a0:
         cb:ed:12:a7:3e:3e:01:b2:6f:e2:27:dd:4b:09:41:c4:74:af:
         64:03:6d:8e:82:95:a1:5f:04:e0:1c:0d:5b:16:d9:44:81:69:
         95:4d:8e:14:00:55:a0:d1:58:71:3c:49:33:28:35:99:ef:59:
         23:3a:63:5e:57:d2:0e:61:31:e0:4b:66:92:56:79:01:7e:ce:
         07:7a:29:0d:cb:80:50:a4:3d:2d:3b:30:33:d7:8b:cc:b0:93:
         f7:fd:37:77:89:fc:a6:3a:bd:76:05:e0:15:c1:bb:83:d0:9e:
         c9:f2:33:80:39:e4:bf:ea:1a:90:4f:7a:93:f7:31:f6:94:bf:
         fd:93:f8:36:6e:cd:42:06:b5:67:d6:3e:8f:3c:e1:2a:93:c7:
         76:72:88:75:61:02:2b:f8:60:75:fa:df:45:f9:29:e2:5d:b2:
         e0:47:55:fc:ab:b0:2d:b8:4a:f7:75:82:87:b9:67:ba:4b:5e:
         b5:67:0c:6a:bf:33:b4:06:26:b5:95:64:f0:22:7a:04:8f:7f:
         24:7f:d7:5d:b3:65:59:bd:52:00:7f:68:2e:1d:cf:df:09:0b:
         6c:06:38:ac:de:83:14:3d:68:63:e4:14:1d:d7:b9:35:69:ea:
         a3:fc:ce:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:26:49 2025 by rpki-client