Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
File:                     LgojFvTptYqlLe7lx9H0uER27IY.mft (raw, json)
Hash identifier:          MzE85sjsYLjz2szS11kpKX23VLeZmsoJSMkyKA7oIlI=
Subject key identifier:   47:48:AA:40:86:07:53:6C:D6:0C:E3:CE:3A:47:90:C4:34:8B:2C:36
Authority key identifier: 2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86
Certificate issuer:       /CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
Certificate serial:       019918090FE7C7A45384930C28C271C18ED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
Manifest number:          054D
Signing time:             Fri 05 Sep 2025 04:01:10 +0000
Manifest this update:     Fri 05 Sep 2025 04:01:10 +0000
Manifest next update:     Sat 06 Sep 2025 04:01:10 +0000
Files and hashes:         1: LgojFvTptYqlLe7lx9H0uER27IY.crl (hash: NUeOmhLGN91xT2mf+SskjX1T9RqemmOm2p58M7WL8S0=)
                          2: vD_wlkgUOjWQBEijGo7zeI_oZVI.roa (hash: IGyJ6LlIsYwYqLNNokHWFdPflPgBGjUNsyBItLlUI9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:18:09:0f:e7:c7:a4:53:84:93:0c:28:c2:71:c1:8e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
        Validity
            Not Before: Sep  5 04:01:10 2025 GMT
            Not After : Sep  6 04:01:10 2025 GMT
        Subject: CN=4748aa408607536cd60ce3ce3a4790c4348b2c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7e:bd:84:96:67:8b:5e:f5:31:30:f2:ee:05:
                    ba:af:06:9a:18:31:d7:ec:21:1c:98:d7:ba:b3:98:
                    b8:21:27:42:fd:f2:fb:f3:3b:d8:08:46:d3:a0:b7:
                    31:7b:10:fa:ce:26:1e:17:f5:c4:fc:5e:b9:7b:7d:
                    4d:b6:76:4a:7e:46:2e:af:1c:da:38:1d:f8:0d:c3:
                    49:2a:15:4a:35:e2:36:34:75:b0:98:97:89:56:9d:
                    60:41:c5:cd:f3:1c:3c:71:d4:ef:bd:10:81:0d:bb:
                    2c:23:0e:a8:88:a6:b5:27:5c:d5:ec:cd:59:bd:10:
                    e5:da:ac:d6:ca:e0:f7:43:0b:3e:58:03:0d:79:8d:
                    18:3c:80:ab:bf:5a:09:a9:2e:9b:ea:0f:03:8c:e2:
                    a8:b3:73:12:e7:87:8e:a2:d6:6d:1f:a8:ff:ce:1b:
                    8a:69:77:f5:ae:57:cc:dd:43:82:1c:72:1a:44:2d:
                    e3:94:70:95:98:1b:f3:d9:17:d6:a7:a7:32:ec:59:
                    81:36:54:8d:cb:74:53:66:37:9f:a3:59:50:98:b2:
                    eb:ad:9b:5c:54:61:65:17:07:34:4a:0e:b6:83:7d:
                    5e:e3:0d:9c:fe:0c:dc:a0:f0:a4:b6:f4:ef:bc:86:
                    13:e6:28:e1:6f:69:a4:7e:fc:6d:b5:74:8c:8d:a1:
                    ac:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:48:AA:40:86:07:53:6C:D6:0C:E3:CE:3A:47:90:C4:34:8B:2C:36
            X509v3 Authority Key Identifier:
                keyid:2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:77:f5:fd:89:c6:4a:76:c6:9e:cc:b6:89:09:61:7a:e9:6f:
         5f:74:13:37:ae:57:89:82:38:9b:5a:3c:90:13:58:fc:f4:3b:
         c9:3f:5b:da:48:9c:8f:8e:e5:fd:8f:e7:5d:f8:43:bf:db:64:
         c0:f2:29:49:85:70:3f:c9:16:82:8b:36:8e:1f:94:18:30:f2:
         51:1f:c3:35:62:06:66:cb:32:01:3b:52:6f:4e:3b:1a:fb:bf:
         c6:4c:87:c5:50:8e:f3:0f:67:f4:7b:eb:fd:8e:dc:d7:c2:de:
         84:0f:f8:10:84:19:91:c7:e2:d8:d6:a9:b6:cf:31:e0:c3:39:
         3b:c6:10:25:66:25:0d:d3:7b:fb:d5:23:f2:a0:0b:a9:f9:49:
         ed:da:db:43:3d:e0:3a:9f:1a:c7:df:0c:9a:cc:a0:80:0d:82:
         6a:ef:76:b3:1c:5c:57:33:84:f5:a9:b9:68:24:e8:e2:85:43:
         67:62:69:1f:9e:37:34:93:bf:4c:b7:04:2c:3e:ca:2c:73:b2:
         ee:fc:ba:08:96:a4:14:26:fc:99:c3:1d:03:3a:5f:19:3a:61:
         d1:11:8d:4d:c1:26:ad:6a:f7:5a:b1:ed:2a:82:2b:16:09:72:
         04:d3:ee:2c:49:85:c0:10:61:9c:b7:6d:6f:e6:35:12:d7:88:
         57:86:7a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:33:08 2025 by rpki-client