Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
File:                     LS19l0PeLvovYzN4omj1jyqhYFA.mft (raw, json)
Hash identifier:          Wm6Xd+gx93o4CNkd9xByLcYyCzbaodSyirxWtxpG9vo=
Subject key identifier:   DA:0C:16:5D:89:4E:CF:43:15:2B:C5:8D:12:C6:93:33:3C:8C:38:43
Authority key identifier: 2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50
Certificate issuer:       /CN=2d2d7d9743de2efa2f633378a268f58f2aa16050
Certificate serial:       019933128FC74E0121562A6553E4C29FB365
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
Manifest number:          1529
Signing time:             Wed 10 Sep 2025 10:01:18 +0000
Manifest this update:     Wed 10 Sep 2025 10:01:18 +0000
Manifest next update:     Thu 11 Sep 2025 10:01:18 +0000
Files and hashes:         1: 1-buam4cvzrUESLjjB1PACZifMOE.roa (hash: +T6bdmpI7/RrpdxHnXaaldhbLqtyNHZghNENwZHAAMA=)
                          2: 1Xxzpu5NB_tAOFF7vKFky5CdRts.roa (hash: n+JshJ/fSDMDcSDZOom+oloo+zJzlcN/7rhG+Doia9U=)
                          3: LS19l0PeLvovYzN4omj1jyqhYFA.crl (hash: +elwMQsOQPkpbnVSvmrYdivu4CiJfJtQzM5YMxDOhRM=)
                          4: fKVvugVq57Vok-HeOBFsVeEq_KY.roa (hash: F7Yehco5YSDWcARYN+I7zPfrg1uSQ0Y+IfgsllPqsIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 10:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:12:8f:c7:4e:01:21:56:2a:65:53:e4:c2:9f:b3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2d7d9743de2efa2f633378a268f58f2aa16050
        Validity
            Not Before: Sep 10 10:01:18 2025 GMT
            Not After : Sep 11 10:01:18 2025 GMT
        Subject: CN=da0c165d894ecf43152bc58d12c693333c8c3843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ea:66:77:40:56:c4:69:8f:a9:11:5e:6e:f2:
                    05:ba:92:0c:42:74:be:eb:2c:da:30:12:c6:ff:e0:
                    08:52:a5:48:94:20:ba:83:e9:fb:e8:15:f2:05:da:
                    b2:27:7a:08:63:9a:af:8c:97:57:65:e8:50:8f:fc:
                    cd:d2:63:71:a5:2e:10:5d:01:7c:4f:15:e0:f4:e7:
                    4b:5d:ef:1a:45:56:28:1a:42:72:de:41:de:c9:ca:
                    e3:7f:8e:60:ca:7d:d0:16:a8:c5:92:5d:49:5d:63:
                    10:8c:48:24:89:d7:bc:88:65:e2:54:72:d2:74:02:
                    a8:a4:e5:40:06:6a:d9:6e:6e:b4:51:8a:ec:fa:ab:
                    a8:68:09:8b:c6:a8:41:0d:42:d2:97:25:2d:84:eb:
                    8d:92:e8:fd:c8:aa:82:2b:f0:b1:b2:02:86:7f:15:
                    d3:8e:b0:f3:51:3b:07:33:0e:23:83:6a:d3:09:f3:
                    5e:11:83:88:6b:34:15:20:2e:e7:74:9c:ad:0c:ee:
                    ee:51:b3:89:ae:ad:e7:73:01:15:54:2a:e0:ee:f9:
                    59:2d:b4:65:c4:87:71:d9:31:95:ac:d7:58:47:05:
                    ad:46:d7:20:98:2a:17:ea:9e:c4:c7:91:16:5a:7b:
                    9f:d1:c0:79:cf:f6:ae:73:80:42:c8:68:fd:17:e3:
                    9f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0C:16:5D:89:4E:CF:43:15:2B:C5:8D:12:C6:93:33:3C:8C:38:43
            X509v3 Authority Key Identifier:
                keyid:2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:44:51:12:87:ee:3d:69:a9:71:6f:4c:7d:30:46:7a:9e:24:
         5b:a0:1e:7c:89:b7:c9:86:32:3d:00:33:9e:38:30:c9:e4:8e:
         97:1e:39:c0:28:36:33:92:83:9d:7e:13:e6:2b:6f:bb:35:28:
         24:01:e8:cf:b6:23:37:c9:97:e5:ee:24:98:8f:61:a7:3b:cb:
         b5:49:b7:04:8b:e2:18:ad:31:b0:c6:fe:05:96:1e:e0:fa:11:
         c0:6e:e2:9f:e2:5f:d8:4d:41:16:85:5f:ea:a6:04:e5:83:48:
         c8:0a:a9:1c:fb:32:fa:00:dd:3a:0a:40:95:e0:b4:0c:8a:0f:
         13:d2:99:28:02:c0:e4:9c:93:46:9f:a2:4f:8f:70:f5:88:9c:
         ce:59:94:37:5c:c6:d4:da:9b:c6:c6:7d:c9:fb:f7:e3:ee:cb:
         b2:fc:fb:ee:04:49:ae:58:fa:05:7d:0a:5d:0c:c9:07:62:23:
         90:59:93:55:ed:8a:8c:14:2c:6f:9e:51:58:41:c4:f7:1c:19:
         aa:50:54:12:82:79:0f:2f:9d:d8:78:63:58:a5:95:2e:d8:fe:
         af:e8:b9:25:12:0d:14:83:9a:51:ce:5d:5f:1c:b2:85:d6:a1:
         52:f5:60:cf:bf:b9:73:85:1a:7d:e1:74:67:18:c8:20:ea:c2:
         61:3b:99:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:11:07 2025 by rpki-client