Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
File:                     LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft (raw, json)
Hash identifier:          Mh1/NNoNgkSLZwnUTz8XMRmXEKiWoEOH4Ug1k78zxQs=
Subject key identifier:   93:A8:1B:21:93:0C:94:42:43:30:B6:47:8C:D5:32:6D:5B:6B:5D:5A
Authority key identifier: 2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F
Certificate issuer:       /CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
Certificate serial:       0198CA5B36BD121F7FCCD762C07F585364C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
Manifest number:          024A
Signing time:             Thu 21 Aug 2025 02:00:32 +0000
Manifest this update:     Thu 21 Aug 2025 02:00:32 +0000
Manifest next update:     Fri 22 Aug 2025 02:00:32 +0000
Files and hashes:         1: 0XZQM4HI3XhlmYvdoGd0b4phC5w.roa (hash: U0I63h+zWa/76rG6uJx/JmYr6Xgzo7IgH0GTSgv+Tfg=)
                          2: LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl (hash: 6ebiHT2sluyiF5fwB/j8u8MYulsdROGusMy9gFjy7iM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 23:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:ca:5b:36:bd:12:1f:7f:cc:d7:62:c0:7f:58:53:64:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
        Validity
            Not Before: Aug 21 02:00:32 2025 GMT
            Not After : Aug 22 02:00:32 2025 GMT
        Subject: CN=93a81b21930c94424330b6478cd5326d5b6b5d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f5:9b:19:e2:97:3b:59:e1:9e:d0:e8:7c:df:
                    4f:36:fd:9d:76:af:be:fa:68:f9:96:d1:54:76:7f:
                    1b:c3:44:a8:f4:5d:f8:46:e9:49:4d:0f:ae:aa:17:
                    bf:59:95:5e:07:ea:2f:74:d8:e3:a7:8f:4b:25:a7:
                    ad:80:c1:a0:a4:39:2b:de:86:6a:a5:85:83:35:07:
                    ea:fa:6e:a4:d3:f6:a4:90:c2:a7:c5:e5:3f:8d:ea:
                    e8:55:fa:04:c1:35:7e:bd:30:02:5a:75:b6:80:43:
                    6b:fc:b1:06:37:34:74:c5:ee:31:5e:94:43:51:99:
                    2c:c8:ef:1d:ab:0d:89:c5:fe:e4:56:7a:1c:80:6a:
                    16:c2:ed:d5:33:31:63:c9:e0:9d:b8:cb:a0:36:13:
                    da:93:28:78:85:37:27:6e:f5:18:1f:27:d3:5b:fb:
                    c6:59:16:ca:72:c9:63:53:a6:23:7c:77:aa:a2:48:
                    33:c6:73:bf:b1:d8:e6:d6:6b:ce:1d:ba:97:e5:61:
                    03:08:a0:68:86:87:25:d8:f9:0e:21:d5:cb:a9:f0:
                    0e:13:0a:a2:17:12:1f:bc:d4:26:bb:d1:66:90:91:
                    6d:70:54:14:fb:51:20:98:1e:7a:9d:0e:59:e5:9d:
                    7f:dc:ac:ef:0a:80:83:21:f9:e6:af:e4:95:bb:26:
                    97:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A8:1B:21:93:0C:94:42:43:30:B6:47:8C:D5:32:6D:5B:6B:5D:5A
            X509v3 Authority Key Identifier:
                keyid:2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:e7:b3:00:dd:83:3d:11:4f:cd:05:3f:5d:c8:b9:aa:45:bb:
         2c:64:00:b7:9b:53:44:73:c6:04:35:fe:aa:1e:ec:53:c3:35:
         ea:ee:ad:7d:e9:94:a3:48:ad:6a:46:7f:ab:9b:fd:2f:a8:5a:
         d4:3f:6d:92:48:4e:b6:1c:d2:74:bb:8d:36:b0:26:d1:b5:1d:
         ea:5f:b8:85:19:31:a6:43:ab:5d:24:49:13:b1:4b:3e:0b:e2:
         86:bb:4f:de:98:4b:d1:12:8b:ee:c6:38:8c:8a:ea:49:15:bd:
         cc:7c:fe:4e:2d:fe:07:f0:fb:ef:5f:03:03:10:4a:71:78:78:
         70:0f:7b:b5:a6:13:89:cd:d8:9a:32:1a:5e:52:e0:48:24:37:
         05:f4:0f:42:bc:46:89:2b:6f:e7:6d:e2:bb:9b:c0:31:1d:81:
         ac:9d:01:e2:84:aa:eb:67:02:09:34:8e:b4:51:2d:20:58:cf:
         dc:3a:da:80:b5:e0:4a:ad:e5:51:ec:6b:a5:02:6a:f1:1c:9f:
         89:a4:f5:31:27:25:0d:fe:7c:40:f0:0b:51:80:58:aa:3e:8f:
         87:a8:9c:66:96:34:74:85:47:3e:4a:ca:bf:d9:ec:45:6f:6c:
         a1:57:e5:f4:f2:3e:20:4b:16:67:da:b3:f0:08:3a:32:f9:bd:
         ba:c7:9c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:15:20 2025 by rpki-client