Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
File:                     LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft (raw, json)
Hash identifier:          Z8wNN4pnTa/bd41lPuJkOH3oe+hbYkLQHCUBNMk5Ygk=
Subject key identifier:   21:77:82:33:F7:D1:E0:AD:90:C1:91:1D:68:A5:50:DF:86:68:95:21
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Certificate issuer:       /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial:       01991FC2A0F898BBA07FA49E0D8A77D0722F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
Manifest number:          0711
Signing time:             Sat 06 Sep 2025 16:01:12 +0000
Manifest this update:     Sat 06 Sep 2025 16:01:12 +0000
Manifest next update:     Sun 07 Sep 2025 16:01:12 +0000
Files and hashes:         1: 86xyLg9Vhu1lk5RReT6Rdf_tmoI.roa (hash: j1UEYdI/3BGkPHWxLGmlianOUX6y8XMwomdD1NaeQqE=)
                          2: DNGDsibsMhX2Jm35ON8Z46A3KTk.roa (hash: IiQeZ36+XfzMEhi+j/AEKPMJtu/iUB+BlQw1Cz0Efws=)
                          3: ISe6Pp3VA_kxRdnQPPWGbrrMrrw.roa (hash: jRDpIWsPHeWViUOgK2ZXMO2/p/iubNFjVCoGO2Bmfv0=)
                          4: JHvjruZud8UPbDjx1Bd9LjVOBzk.roa (hash: vjoEoMaWJ1MAMYUlr7M3XUcS+6k16egCExbMn9yAMb4=)
                          5: LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl (hash: Vp3u8hjXC0m2+wUc5TEvbYcUD66Jt4Crz40GeFZO8C0=)
                          6: jjSMkguCrtN8dke8B6BypY8W9bE.roa (hash: FKDJSDKH8RGck3prDQ6XfAn1r+nBQFd0Ov1wTU/64lk=)
                          7: jvqaPKegN_TBTkX1iGxxtfLozMg.roa (hash: XuER/cHOoxfeKVPHA4CmD36sE1MXBYBHja2ydtJkaoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 16:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1f:c2:a0:f8:98:bb:a0:7f:a4:9e:0d:8a:77:d0:72:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
        Validity
            Not Before: Sep  6 16:01:12 2025 GMT
            Not After : Sep  7 16:01:12 2025 GMT
        Subject: CN=21778233f7d1e0ad90c1911d68a550df86689521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:48:e7:0b:93:5f:96:ff:09:78:6a:dc:77:31:
                    f9:cc:34:e9:95:9a:22:06:4d:cf:c9:b3:7a:87:e0:
                    3d:84:66:ce:8a:b2:52:46:fb:32:1b:95:06:72:0c:
                    68:cf:32:d0:b1:80:e2:ca:75:a1:65:a1:1f:d2:4c:
                    eb:fb:61:5c:90:a1:6d:aa:6e:17:5d:e1:b2:46:8b:
                    c4:60:63:df:40:3e:67:04:ab:92:b1:b0:12:95:e1:
                    f3:e0:de:2f:6b:1b:44:10:fc:e6:64:34:c8:c6:9a:
                    e9:c3:0d:45:8e:50:2d:46:3f:32:8d:35:ef:8f:19:
                    9b:61:8f:2e:da:a9:43:af:89:ec:f6:78:1a:8c:fa:
                    2a:a6:c1:d2:d9:08:6d:9b:9b:11:f4:55:0c:df:b3:
                    e3:43:5e:98:e1:64:18:69:3d:22:8f:93:48:71:83:
                    0e:88:b7:d2:6e:f0:04:93:df:b3:df:57:02:33:74:
                    c6:bc:1f:3a:57:27:66:d7:fa:13:9a:e1:66:53:94:
                    98:d1:d9:c1:38:1e:2c:88:66:be:a5:1c:c6:b1:3b:
                    c1:26:41:09:9e:85:47:e5:9d:56:92:32:6b:50:f8:
                    de:ec:a6:5d:9c:67:7c:d8:17:32:0c:cf:f6:c6:7a:
                    bf:1c:72:17:31:ff:fc:1a:ae:d8:02:bb:db:90:98:
                    8b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:77:82:33:F7:D1:E0:AD:90:C1:91:1D:68:A5:50:DF:86:68:95:21
            X509v3 Authority Key Identifier:
                keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:51:09:85:b6:11:55:f5:09:73:90:77:af:e4:65:ca:f9:51:
         36:cd:96:d9:3e:b0:2f:de:7e:a7:89:88:53:8b:36:8e:16:ff:
         3a:cb:a4:d5:bf:75:81:a1:dd:c2:11:5b:7f:24:ad:b8:f1:46:
         4b:9a:e5:fa:e0:63:c4:ad:26:a5:ae:7f:99:ec:ba:fa:36:fd:
         19:20:3a:f5:60:e3:7e:72:ea:f5:79:ee:66:b8:6f:88:4f:be:
         e5:c5:50:02:9c:f6:b0:fe:5e:59:d0:84:47:7a:5f:f8:6f:17:
         99:6a:9a:1f:b1:33:e1:fc:08:e3:fc:d2:38:98:88:37:93:bf:
         d9:08:c1:7f:1f:ba:a8:66:8a:40:d0:58:44:a6:d7:a8:ad:07:
         cc:b8:09:40:73:2d:07:d2:e2:bd:3a:13:d2:fd:08:36:54:5e:
         d4:e9:bb:fa:80:77:6a:1a:4b:e8:c9:e1:47:92:9c:dc:0d:1c:
         4f:7b:91:a4:f4:4c:32:7d:52:37:b5:a8:42:c2:bd:e4:a7:f7:
         0a:1f:eb:1b:d3:1b:d6:0f:03:7a:e1:20:d0:5d:68:91:75:70:
         bd:1f:26:f9:44:08:17:a2:2a:6b:21:85:b5:9c:4e:7a:e0:b6:
         5d:47:d1:56:d1:26:dd:4b:72:e3:04:5e:dd:0b:1f:23:e5:9b:
         07:46:19:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 01:44:46 2025 by rpki-client