Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
File:                     lsVsXqVHj003sw82guQ7fi75DZg.mft (raw, json)
Hash identifier:          t9xs/TN/HhbrJA+pWJ7eYrmMcLOWQyKFwPpxCRMI6uA=
Subject key identifier:   4B:1F:7A:7B:DC:E3:21:7D:8D:40:F1:13:2B:DD:19:3E:F9:77:98:C8
Authority key identifier: 96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98
Certificate issuer:       /CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98
Certificate serial:       019848F742C12B8667EC9F9FC1EAE6661260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
Manifest number:          0A6D
Signing time:             Sat 26 Jul 2025 23:00:20 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:20 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:20 +0000
Files and hashes:         1: Jfp2BkUryUy6473OSd5t9xfZXek.roa (hash: /yj9OMbKiB1Ji+Udov4fFjS1PqdNa09sKJHlaeP3Vq8=)
                          2: lsVsXqVHj003sw82guQ7fi75DZg.crl (hash: 9JyY7wM1ruu51VO+d2mMEeGQ1uVm3Z5yyTlweb/eF30=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 23:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:42:c1:2b:86:67:ec:9f:9f:c1:ea:e6:66:12:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98
        Validity
            Not Before: Jul 26 23:00:20 2025 GMT
            Not After : Jul 27 23:00:20 2025 GMT
        Subject: CN=4b1f7a7bdce3217d8d40f1132bdd193ef97798c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d7:a4:86:06:f4:5e:86:5d:55:8a:f6:e9:46:
                    b7:3a:9c:33:5b:84:5e:34:46:53:dc:b2:82:88:af:
                    46:c1:15:ca:0d:bd:ba:17:27:2b:9d:ca:bb:3f:39:
                    49:e9:31:24:b1:28:e1:fe:83:e4:fe:be:74:c4:2a:
                    b3:96:95:7c:d6:14:ae:cc:fb:a4:63:eb:73:5b:84:
                    d9:dc:c0:19:69:e4:60:23:b4:64:69:40:76:b5:94:
                    bb:b1:7a:bc:c1:24:3f:21:fe:bf:10:91:06:b7:8a:
                    96:f4:d2:05:2c:02:d0:e9:f9:4e:7d:5f:cc:c0:aa:
                    37:bb:47:b4:ab:27:db:8b:aa:f4:5c:77:6f:02:a3:
                    3e:80:02:2b:55:de:34:fd:64:2f:19:a8:b4:5c:3d:
                    8e:63:96:98:32:72:e9:81:67:a6:51:80:52:b5:d8:
                    3b:6d:52:eb:75:1e:15:16:cc:c1:c5:d2:4b:74:06:
                    4c:fc:60:61:8c:30:be:b1:c0:55:82:62:bd:bf:14:
                    68:77:ff:7b:b8:54:f9:b0:7d:7a:11:fd:72:b0:d4:
                    65:7c:1b:dd:3b:2d:05:a9:bb:8d:73:e4:e8:d9:51:
                    1e:9b:15:63:1e:77:52:5a:af:25:12:a6:91:3c:f5:
                    18:8c:1b:07:d3:39:c4:d8:57:0d:c4:c8:0d:9e:47:
                    f8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1F:7A:7B:DC:E3:21:7D:8D:40:F1:13:2B:DD:19:3E:F9:77:98:C8
            X509v3 Authority Key Identifier:
                keyid:96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:bd:b1:84:d0:2a:a7:2f:06:88:6e:76:38:e8:26:b8:97:3f:
         d0:b4:d0:6c:0b:2e:65:29:b6:86:a7:15:10:59:0c:9c:ec:40:
         fe:cc:9a:17:ee:da:4e:53:31:8f:aa:92:c4:d5:db:3b:db:b7:
         98:b2:a9:55:1f:25:ff:d7:24:5c:d9:33:ba:bb:08:bd:a1:4d:
         ae:af:50:03:15:c4:db:24:7d:0b:2d:20:a9:69:38:ab:27:66:
         1e:03:11:f7:87:35:7b:05:7d:ac:3b:cc:06:b9:9c:67:98:e6:
         37:c0:97:7d:5b:0e:de:1a:88:d8:ac:a1:f7:37:32:4d:4a:da:
         46:68:ec:b5:aa:21:9d:a0:a5:cd:e9:15:5e:db:8d:7e:38:1b:
         f5:97:f0:75:6e:55:d5:55:63:32:c4:3b:6a:7e:3d:db:b1:a0:
         ab:fd:5f:4b:3f:94:d3:2c:e7:d6:a4:eb:83:62:d0:a2:28:61:
         de:3c:de:1f:bc:fe:50:ce:88:5e:4f:ff:8f:f1:8c:f7:9b:5a:
         36:fa:98:ea:b3:4f:8e:0a:19:27:8c:07:aa:23:12:2b:ce:9d:
         2b:9e:21:85:d1:93:12:96:9f:15:c0:16:90:c8:4b:0d:f6:24:
         a5:24:cb:67:c2:d7:55:6a:02:20:96:18:07:f6:e5:36:18:2a:
         85:c8:fa:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:40:27 2025 by rpki-client