Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
File:                     LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft (raw, json)
Hash identifier:          vQbBo5yRZKKpD0sAmKApqNL/swIMln/cthsBwxQkp5w=
Subject key identifier:   F3:F3:82:4B:42:8F:C4:A8:34:DF:E9:88:95:3B:99:C1:74:EC:18:48
Authority key identifier: 2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
Certificate issuer:       /CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Certificate serial:       0199168847331154D8E339DE0B0C92722AD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
Manifest number:          166B
Signing time:             Thu 04 Sep 2025 21:00:53 +0000
Manifest this update:     Thu 04 Sep 2025 21:00:53 +0000
Manifest next update:     Fri 05 Sep 2025 21:00:53 +0000
Files and hashes:         1: 9phsu2p4WF8NqnfUkSWWdnt6zzA.roa (hash: f41MILFdl6rcNDj7+ORCxwVOJlnjfxd2bAX97uHKrtw=)
                          2: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl (hash: CtTtrDMlsNakFmLKeW8CzfkByVzXeBrS0mSw0UzNjr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 19:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:88:47:33:11:54:d8:e3:39:de:0b:0c:92:72:2a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
        Validity
            Not Before: Sep  4 21:00:53 2025 GMT
            Not After : Sep  5 21:00:53 2025 GMT
        Subject: CN=f3f3824b428fc4a834dfe988953b99c174ec1848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e7:fb:10:c8:4f:b8:c7:5c:d6:9c:c6:61:0f:
                    b2:57:2e:16:72:df:68:dd:20:4e:29:d0:e3:ff:72:
                    1d:2c:92:e7:6a:6b:ed:00:ee:b7:5d:92:55:86:a9:
                    5d:fd:a9:2d:31:d3:27:85:13:81:34:b7:f8:58:76:
                    bc:f9:e8:bf:96:c0:bc:9e:de:6f:cf:aa:62:6b:51:
                    a4:4f:75:fb:0f:d5:70:79:19:47:28:49:b3:eb:10:
                    84:47:98:0c:29:be:6f:76:f9:d8:60:75:8c:ad:89:
                    34:2c:ff:5c:08:fa:81:20:f7:96:fd:fb:6c:ee:c8:
                    39:e0:9f:dc:50:dd:a8:57:80:f8:93:3d:ac:4c:ab:
                    99:a4:b9:ac:57:9d:69:13:ed:bc:24:5b:08:ad:a1:
                    f9:55:7a:9f:a9:ce:27:57:dd:22:97:84:eb:94:a0:
                    de:4a:60:30:95:6e:5e:c5:2a:52:80:2c:aa:9b:35:
                    3a:af:27:a9:e5:ca:57:20:29:a5:cb:bc:b9:89:a7:
                    b8:62:29:02:e7:9d:32:b1:41:54:fd:fa:46:17:fa:
                    f8:e7:dd:59:66:f3:0c:93:c7:dd:b0:56:fd:73:f9:
                    f5:fa:a0:63:c8:59:0b:e0:13:aa:5f:88:57:05:d3:
                    f4:35:63:a3:2f:ed:c5:e6:77:bb:2a:8b:f5:39:96:
                    3d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F3:82:4B:42:8F:C4:A8:34:DF:E9:88:95:3B:99:C1:74:EC:18:48
            X509v3 Authority Key Identifier:
                keyid:2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:73:e9:9a:5a:d1:be:41:b5:dd:22:70:99:04:d8:2c:d5:ca:
         30:b6:ab:b6:99:c4:1b:8f:a4:95:01:6a:0b:19:55:83:43:cc:
         2a:8f:81:5e:e3:1b:f8:2e:a5:a2:5b:20:d4:5b:8f:8a:27:cd:
         d4:5a:00:c3:fd:ad:92:99:57:6c:a8:d9:90:af:60:54:0a:81:
         f2:2a:eb:1f:ca:35:3d:49:48:b9:43:bb:9a:c7:07:fe:41:bf:
         7e:1f:5e:be:4f:f7:ac:cf:c8:47:48:f2:8c:3d:79:5d:22:c7:
         61:45:05:f3:52:1a:36:04:09:7f:2e:b0:ad:35:05:02:bf:d5:
         b2:30:2a:2e:a1:41:ba:ef:df:1a:45:06:2c:b3:3a:1b:cb:d2:
         04:a6:c8:5b:ed:3a:b3:96:1f:24:5f:cf:50:fa:58:b3:c7:ab:
         1e:c2:74:76:1d:32:07:42:86:c8:85:34:67:9d:50:f5:83:ca:
         98:62:e4:28:b2:32:1b:f0:ae:2e:59:88:d4:1f:7f:46:11:bb:
         1b:ab:de:86:b9:8d:5e:bc:a0:d0:bc:db:ef:3f:32:45:e1:ac:
         59:19:40:8d:29:b9:10:9a:0c:fe:38:92:56:7d:ab:c6:d8:3c:
         66:77:f4:e6:e4:aa:d4:6e:8f:96:5a:94:9c:3a:78:71:4b:f1:
         f9:5d:2a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:23 2025 by rpki-client