Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
File:                     lSGiYvUHXiSys8m2nIr0DimIoeQ.mft (raw, json)
Hash identifier:          +zlrk57hX0KFOgVVjl1v55BL4dBBni7LPqQGAbLD11Q=
Subject key identifier:   E2:1F:E9:26:3D:0E:9A:41:E5:85:9F:6C:BF:E6:16:FA:22:D7:D4:6F
Authority key identifier: 95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
Certificate issuer:       /CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Certificate serial:       0198D5F15107D3B322AACBF9E80A125D745E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
Manifest number:          036A
Signing time:             Sat 23 Aug 2025 08:00:18 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:18 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:18 +0000
Files and hashes:         1: Lpcsk8pQMiEPT6ApZhOXx9JAafQ.roa (hash: UQY6sisXum2gKK35fkWx14SykCBKN5d6dEz3tT5FKwk=)
                          2: lSGiYvUHXiSys8m2nIr0DimIoeQ.crl (hash: iozzuGU7UJLYql3uxIk7IRjCE0ARqPGYL120H8oDTdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 08:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:51:07:d3:b3:22:aa:cb:f9:e8:0a:12:5d:74:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
        Validity
            Not Before: Aug 23 08:00:18 2025 GMT
            Not After : Aug 24 08:00:18 2025 GMT
        Subject: CN=e21fe9263d0e9a41e5859f6cbfe616fa22d7d46f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e3:15:b8:2f:97:bf:df:ac:0b:e7:47:70:69:
                    92:e3:e6:4f:b5:4a:57:6a:1e:09:cb:32:e1:99:34:
                    32:57:30:4d:c3:2d:97:f9:12:9f:fb:0c:e7:9a:5f:
                    61:2c:09:c8:28:9c:be:e1:78:62:5a:f0:4f:9e:71:
                    63:d8:5f:40:14:d1:8e:48:97:10:3a:11:15:73:c5:
                    33:2b:82:d0:2f:34:45:14:9b:b2:92:a3:d9:7c:65:
                    52:64:4e:93:8c:c9:17:4d:d8:51:68:86:ad:b1:3d:
                    4a:3f:8b:3f:9b:ab:a1:09:9a:a9:94:5e:85:dd:91:
                    a4:81:79:ff:f0:5c:8c:fe:bc:cb:7f:f8:70:29:1f:
                    fd:ea:33:29:45:d2:51:ab:b8:c3:d9:07:60:93:43:
                    dc:01:6a:dd:21:55:5f:94:c2:6f:0a:f3:1e:8a:80:
                    3d:a5:e4:3a:54:c6:34:07:f9:5b:06:49:57:f9:b6:
                    d6:ed:49:8c:50:dd:24:49:10:e1:83:b2:28:e6:ec:
                    6d:0f:ef:0e:cf:67:29:00:5d:31:97:78:d5:ff:20:
                    7d:44:e7:ae:dc:57:45:08:40:6c:ba:c1:94:4e:98:
                    9c:d2:fa:52:56:ba:46:e4:fc:39:7c:f9:20:c5:a1:
                    8d:c1:b0:b7:31:02:7b:ec:95:06:7f:65:90:ce:f3:
                    35:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1F:E9:26:3D:0E:9A:41:E5:85:9F:6C:BF:E6:16:FA:22:D7:D4:6F
            X509v3 Authority Key Identifier:
                keyid:95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:9b:5b:a8:b1:c6:35:ab:6a:fa:5b:fb:be:e3:2c:8d:19:c9:
         eb:cc:e8:f2:52:ee:aa:56:16:4d:e5:fb:45:3b:9e:91:90:6e:
         a7:18:52:04:b3:dd:c3:c6:47:ce:3e:fe:9b:51:e0:38:13:0a:
         ce:59:d3:f9:f9:5b:eb:0b:7d:a2:a1:ed:3b:a2:32:5e:37:95:
         e2:58:56:ee:4e:74:b2:04:df:44:5d:69:63:5f:df:c9:d2:53:
         8d:8d:d6:a1:33:8f:38:e3:0d:68:e8:dd:f1:df:db:1e:a1:3e:
         12:b8:71:3d:75:79:4a:7b:e9:a5:fb:d0:a2:1f:ae:21:8f:07:
         a8:92:06:5b:e1:8f:20:c7:e4:25:96:46:b5:66:5e:59:37:9a:
         7f:8c:b3:9b:34:d9:0d:63:c3:ae:c6:45:76:09:27:94:51:9b:
         73:f3:3e:7f:06:54:fa:58:cd:14:37:3a:d9:35:d5:50:4d:7e:
         89:5b:d3:b5:e1:d8:1b:a7:3b:35:80:04:81:84:1b:a7:77:35:
         49:5b:ef:23:9d:50:58:08:81:95:de:86:41:80:b3:85:ec:e9:
         0b:0e:5f:e0:37:db:ec:b2:24:73:b7:74:1d:12:6e:b9:6f:fd:
         7a:e3:6e:45:71:d5:66:22:3a:b1:be:6f:ef:80:65:a8:c6:cd:
         6c:e1:9e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:31:37 2025 by rpki-client