Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
File:                     LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft (raw, json)
Hash identifier:          fCYGquKKq8hDarynlNbtFqW9TLuS3MT3AG7HR5PqqZg=
Subject key identifier:   0A:6B:99:BE:0F:D6:87:67:49:D3:C5:4B:AE:85:D4:79:53:D2:72:4F
Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
Certificate issuer:       /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Certificate serial:       01984A0A0F5BAC40937C3CC3DDBAC98BD450
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
Manifest number:          1603
Signing time:             Sun 27 Jul 2025 04:00:29 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:29 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:29 +0000
Files and hashes:         1: LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl (hash: lAz6vQJaASQ4X0eoLmIn2E6Z1nqZKpje7A8lLaR06C0=)
                          2: TZLeuUkI4CjEnpLLtWGzEA-joRI.roa (hash: YPtfqltU/oN+o/HH/QLZS2oxA/bwOyzCiodegvrQed4=)
                          3: ai_A7AG70LoK-2voHZXOhAOVMf0.roa (hash: hn2u5HU4dhrWeJ6INpgfQ8ZAf8MY3atf6SETHEmPiMU=)
                          4: c_zOfM7vLQJCIH9ZtTubpG60GUI.roa (hash: PR+2Ofr0AqtJDndUiUP4vY2xuU8uzBfHcV/JcyjNBZU=)
                          5: vMV24DhvZ51gpTgovgA0DHavZ5Y.roa (hash: pvB3MpylBNAYQdSCjBtx8G9c34zYXq6BUWOPnr06JNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:0f:5b:ac:40:93:7c:3c:c3:dd:ba:c9:8b:d4:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
        Validity
            Not Before: Jul 27 04:00:29 2025 GMT
            Not After : Jul 28 04:00:29 2025 GMT
        Subject: CN=0a6b99be0fd6876749d3c54bae85d47953d2724f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:50:68:43:5f:04:91:3b:fb:69:c1:0d:48:0b:
                    8c:4c:af:64:1b:d4:fa:9a:3a:70:28:b5:36:b2:ce:
                    ad:52:e1:05:00:14:b2:c6:7c:ba:26:31:94:61:41:
                    5a:d2:75:a1:b2:5d:6d:4a:56:19:47:05:8f:1e:18:
                    ca:4b:34:49:7c:81:7f:34:be:85:f6:fd:3e:4a:11:
                    33:62:64:f4:6f:f8:12:97:b1:e2:e6:50:76:41:cb:
                    11:3f:77:5b:f1:d5:26:de:43:01:52:24:1a:af:a5:
                    27:50:f1:4c:60:2b:02:01:f8:66:fe:47:7a:fb:9c:
                    3a:ed:72:1f:97:08:e9:e5:1a:8d:17:05:9e:6e:41:
                    db:d2:f3:f8:14:1a:2a:6c:3d:64:25:98:f0:a8:d7:
                    c6:69:3a:ec:d5:40:33:95:e4:da:95:73:44:b4:26:
                    2d:68:aa:64:d3:4d:e2:09:9f:29:52:8d:08:fd:8c:
                    d6:d9:a1:5b:ed:83:41:0c:25:f5:30:6a:32:e6:46:
                    04:48:c5:3b:a1:18:1c:c4:b3:61:7c:2d:3f:f3:a3:
                    79:c3:7d:af:8d:1e:91:5c:ca:05:9c:f3:bd:56:c9:
                    ec:6b:7e:4e:af:6b:b2:d5:0f:b1:ec:5b:fe:56:6d:
                    20:b2:29:d2:e2:4f:b4:12:17:0b:4f:bc:45:d6:5f:
                    1b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6B:99:BE:0F:D6:87:67:49:D3:C5:4B:AE:85:D4:79:53:D2:72:4F
            X509v3 Authority Key Identifier:
                keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:67:25:e6:fd:63:d6:42:b8:8f:b1:04:74:77:10:2f:e9:8b:
         64:ae:9f:8e:f2:2c:bf:11:b0:51:ec:16:dc:88:3f:5a:c5:d6:
         69:d8:17:dd:3d:42:03:6a:67:f3:cc:d4:a0:b0:8c:90:18:14:
         50:f3:38:4b:bd:bd:85:05:58:54:e6:6e:a1:0e:be:ad:f1:63:
         da:d2:93:05:ff:75:7f:52:a7:d0:63:01:35:c1:49:ea:99:1c:
         c0:73:79:73:3e:f5:fa:ab:66:1b:74:25:fd:05:ea:64:3f:33:
         8c:05:28:9e:2d:9e:05:c3:a1:07:4b:c9:6c:b5:31:ed:96:9f:
         23:aa:cc:37:1a:7a:c0:33:81:23:ea:6c:34:37:cd:68:f7:4a:
         3f:06:77:b8:5a:f3:1a:c4:f2:e2:f7:e9:58:ee:63:f7:c1:17:
         e4:9b:66:4a:35:55:d2:fc:ba:c5:f9:ae:88:e7:26:90:d8:40:
         7b:69:6e:0e:bb:6a:4a:e8:4e:21:8f:5c:03:30:a1:82:24:70:
         c5:e0:1b:19:f8:88:a6:72:4d:5e:36:3a:da:6b:60:c0:13:d5:
         f8:d9:86:10:fa:f6:48:19:8b:72:68:bb:89:2d:3d:64:6d:5f:
         a1:4e:88:c2:70:95:ff:e3:0b:4f:93:57:56:6d:d6:67:0f:91:
         e6:6a:1b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:37:19 2025 by rpki-client