Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
File:                     LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft (raw, json)
Hash identifier:          4+pe5XZ8Tj197CpO6L6UaJTuk/IEUSGiNoSsc3d2dH8=
Subject key identifier:   8E:39:C6:C9:BF:DE:F1:CB:28:F4:C5:D7:68:AD:C9:CA:7E:ED:15:DF
Authority key identifier: 2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F
Certificate issuer:       /CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
Certificate serial:       0197C9828D0401B496E7AC495A58EBC7D605
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
Manifest number:          01C5
Signing time:             Wed 02 Jul 2025 05:01:05 +0000
Manifest this update:     Wed 02 Jul 2025 05:01:05 +0000
Manifest next update:     Thu 03 Jul 2025 05:01:05 +0000
Files and hashes:         1: 0XZQM4HI3XhlmYvdoGd0b4phC5w.roa (hash: U0I63h+zWa/76rG6uJx/JmYr6Xgzo7IgH0GTSgv+Tfg=)
                          2: LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl (hash: 8opfC7aCwXkuugDF/Pep3qf0Kv+fWxoNsDzgqIRLUOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 05:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c9:82:8d:04:01:b4:96:e7:ac:49:5a:58:eb:c7:d6:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
        Validity
            Not Before: Jul  2 05:01:05 2025 GMT
            Not After : Jul  3 05:01:05 2025 GMT
        Subject: CN=8e39c6c9bfdef1cb28f4c5d768adc9ca7eed15df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0c:9f:a3:9c:5e:dd:5f:ae:02:cb:5a:a1:30:
                    bb:6e:38:17:67:75:fa:50:c1:53:ca:8a:ac:1b:ab:
                    ee:55:bd:06:98:bd:14:77:c3:ef:2c:43:b6:44:1f:
                    71:7a:f9:f2:4f:f3:5e:99:a6:64:cd:24:cd:7c:8e:
                    8e:0b:d0:38:00:09:a5:13:9d:41:37:f1:38:d8:49:
                    80:d4:9e:26:aa:eb:27:4a:35:9d:73:66:a8:f0:46:
                    9b:d1:9c:91:df:5d:8a:fc:bb:62:52:f1:32:88:23:
                    5c:7a:42:4f:11:22:60:14:48:72:fb:40:0a:3a:ae:
                    51:ee:26:29:d3:00:cd:83:a9:d3:62:a3:56:bc:40:
                    99:10:7b:db:46:ec:7b:25:59:f2:4d:a1:9c:6c:d2:
                    e9:bc:91:00:24:04:1e:b8:c1:7c:fa:ae:28:1b:56:
                    75:51:73:45:3d:d6:3d:f9:46:7f:18:29:ac:ab:bf:
                    92:19:ea:91:b8:1f:30:88:71:7c:08:78:c6:93:62:
                    9b:8b:5c:11:d4:ed:a5:24:63:cc:85:2c:d7:61:36:
                    ac:6c:18:86:c6:17:86:60:73:d1:ce:b0:47:bd:78:
                    5d:08:ad:f1:1b:d4:5b:13:8d:4d:9f:ca:e9:42:03:
                    ae:51:96:fc:fa:b8:8e:32:7a:ee:ad:43:06:bd:5d:
                    18:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:39:C6:C9:BF:DE:F1:CB:28:F4:C5:D7:68:AD:C9:CA:7E:ED:15:DF
            X509v3 Authority Key Identifier:
                keyid:2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:01:37:38:34:e0:a2:e9:7d:de:04:f8:00:47:c2:ef:8d:a7:
         0e:22:e9:b6:75:7d:d4:ac:2a:95:1a:33:98:52:92:f0:2e:a9:
         ff:5a:c2:f9:58:93:73:7a:7b:e2:49:b5:e7:79:03:59:39:12:
         f9:03:80:06:16:82:02:fd:44:59:37:8c:e6:9a:c1:a7:6d:3e:
         aa:3a:81:cb:23:da:8a:ee:0f:02:10:f4:d7:c6:46:67:91:79:
         e0:56:57:f7:72:20:35:3c:ef:7e:ae:d8:59:81:1a:5d:7c:63:
         6d:3c:8c:97:4a:79:8a:ca:44:ad:4d:ca:30:73:41:b4:aa:53:
         9e:fd:e2:60:8b:40:8a:78:7b:3c:8f:e9:4c:4b:66:88:d8:14:
         89:09:a5:ed:44:17:a2:b6:8d:85:0c:20:73:b5:5c:fd:90:68:
         0f:32:8f:76:81:84:62:34:7c:54:ae:c4:ec:b0:de:7d:02:a7:
         f0:01:fb:b4:69:44:e0:ac:5e:2c:d7:34:02:72:30:ef:b1:a9:
         86:e1:fc:5b:ee:33:12:b2:45:d1:61:fd:dd:a2:1c:83:c4:f2:
         bf:10:1b:c3:a2:6d:06:46:5d:15:b4:73:9e:bd:00:0b:2a:59:
         47:33:71:8f:72:f6:b6:87:15:23:6f:e7:fb:11:36:0c:ba:23:
         51:9d:ea:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:35:28 2025 by rpki-client