Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
File:                     LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft (raw, json)
Hash identifier:          MCFaJJ97j0AKfYW22bnN/1NWBqmZtydBYsP0r7zdYZY=
Subject key identifier:   F7:5E:02:C7:04:AF:80:2C:01:74:30:C5:C6:68:56:4F:8F:88:D2:11
Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
Certificate issuer:       /CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Certificate serial:       01993500C469BD53DE36EE8F5938984E38BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
Manifest number:          1256
Signing time:             Wed 10 Sep 2025 19:01:06 +0000
Manifest this update:     Wed 10 Sep 2025 19:01:06 +0000
Manifest next update:     Thu 11 Sep 2025 19:01:06 +0000
Files and hashes:         1: InAYg7kchm6hoE6SFVJqN5VO9jI.roa (hash: QxF7Lo3czD2q4Tr7NHUd/cpUnQ6rJyTxBt1Fv/I4tgU=)
                          2: LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl (hash: OnMFjsAxcwymUreIhpyBWdR1EJQ1P9QhaAheP+Pj9/8=)
                          3: k4qXOW_NpDOIOHCLgRTHFZfFt5A.roa (hash: ch7ij5E9LUdhi3/tkx9pvbq8WxL6Rn0r2P+Vs1PthF0=)
                          4: lFwxYJ9NT0Uy9IOwwYFb_vwGrhw.roa (hash: z+R9el6Zb5OurCcNqlSTJDxPuVgrOIIhwKwpE5Vc65M=)
                          5: p4gLr8QizpVSiuP1_Kkcfly1rjA.roa (hash: Wzj0j9gfoenaBy8qXe/RI5cOEUtdX9DRCtW7mRo3wd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 19:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:00:c4:69:bd:53:de:36:ee:8f:59:38:98:4e:38:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8
        Validity
            Not Before: Sep 10 19:01:06 2025 GMT
            Not After : Sep 11 19:01:06 2025 GMT
        Subject: CN=f75e02c704af802c017430c5c668564f8f88d211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:18:8a:11:27:f9:1f:a6:c9:2a:dc:bd:a9:27:
                    10:ca:f6:17:16:a0:26:b3:3d:df:47:00:71:7a:64:
                    f9:53:13:23:db:98:59:6a:d1:65:23:dc:92:0a:d3:
                    cd:43:80:06:bd:fb:22:42:6a:9e:5e:7b:ae:8f:17:
                    e0:ef:2d:80:3c:71:1a:3f:cc:55:5a:92:ff:65:e8:
                    2b:7f:7c:bc:a9:dc:86:a3:60:a7:5a:04:f6:b3:13:
                    08:36:68:04:3f:b8:d1:cc:41:3e:cd:2e:7d:3c:20:
                    49:60:d4:f2:eb:0e:d1:9a:d7:e7:f0:97:85:15:91:
                    23:f9:e2:39:0b:55:fa:9e:89:71:0d:f2:11:82:36:
                    6e:cb:be:31:22:c8:68:72:44:b1:4b:ff:e2:10:de:
                    57:40:80:23:5b:8f:a1:94:46:98:b6:32:9d:1d:e6:
                    42:54:ba:d8:ec:93:66:c1:a5:6f:93:11:9b:52:49:
                    8c:d5:60:cb:6a:f0:eb:31:18:e4:96:c3:60:85:ac:
                    19:5a:46:00:f0:99:33:19:5f:29:dd:05:62:66:65:
                    d0:ad:a6:71:ea:5f:2d:55:cf:d6:c1:30:8f:ea:1e:
                    0f:65:ff:25:95:13:af:a3:64:be:fb:6b:dc:8e:a5:
                    73:46:20:07:8c:14:e7:18:52:75:55:a7:59:6a:d7:
                    1e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5E:02:C7:04:AF:80:2C:01:74:30:C5:C6:68:56:4F:8F:88:D2:11
            X509v3 Authority Key Identifier:
                keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:05:ab:0c:cd:c2:a3:0e:29:b2:7b:f7:b5:4f:12:8f:a3:c7:
         c1:cd:94:29:9a:77:13:5d:61:25:27:d3:be:4b:5f:39:0e:67:
         b5:fc:3f:a3:c5:dd:1a:4f:c2:84:30:65:98:07:62:0a:13:1b:
         aa:dd:09:77:9a:4b:bb:c0:03:5b:a9:65:d3:fe:89:b4:e2:19:
         68:50:8c:0b:cf:3f:5e:05:a7:2c:79:6e:ec:9b:09:5e:d0:5e:
         32:3d:de:b1:ed:46:0b:25:c6:50:52:b6:4a:d0:3f:db:f5:b4:
         63:42:07:c8:56:b9:78:e4:89:ef:43:8a:7c:df:f0:1d:13:44:
         4b:e0:ec:50:f8:99:06:e5:0d:e0:a6:81:bd:74:05:5e:2f:f7:
         c7:1e:eb:ad:db:84:64:7f:12:a4:88:02:93:d9:90:51:a2:c7:
         fa:c0:67:c2:3c:01:5a:e6:df:4e:bd:19:62:18:71:42:7a:5d:
         db:5d:92:a6:ff:b6:00:ac:cf:ed:f7:8d:78:a5:0b:81:2c:25:
         1f:42:79:bc:ec:8e:f7:0c:8e:95:f4:4e:4e:52:8f:3e:33:cc:
         90:14:9a:0d:21:92:00:96:8d:3f:f1:e6:64:cc:25:1a:af:a2:
         be:ee:f8:63:7d:d7:29:1b:a6:af:8f:b8:eb:55:8d:9a:60:37:
         62:53:ac:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 00:26:19 2025 by rpki-client