Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
File:                     LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft (raw, json)
Hash identifier:          ndZ56diLgWy8nmJyTAYt7va9IIpOccqJtEPIqRDgT4w=
Subject key identifier:   E6:0F:8D:77:8A:F6:4F:83:B8:41:9B:5B:A8:F4:4E:D4:98:36:9C:1E
Authority key identifier: 2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F
Certificate issuer:       /CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
Certificate serial:       0198D7E12BA95DA71EFA238598ABB0A30214
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
Manifest number:          0251
Signing time:             Sat 23 Aug 2025 17:01:54 +0000
Manifest this update:     Sat 23 Aug 2025 17:01:54 +0000
Manifest next update:     Sun 24 Aug 2025 17:01:54 +0000
Files and hashes:         1: 0XZQM4HI3XhlmYvdoGd0b4phC5w.roa (hash: U0I63h+zWa/76rG6uJx/JmYr6Xgzo7IgH0GTSgv+Tfg=)
                          2: LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl (hash: NER3ybI+e1tPKGYtOEjM88h1rFPlIjmWxPePkRgks5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:e1:2b:a9:5d:a7:1e:fa:23:85:98:ab:b0:a3:02:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
        Validity
            Not Before: Aug 23 17:01:54 2025 GMT
            Not After : Aug 24 17:01:54 2025 GMT
        Subject: CN=e60f8d778af64f83b8419b5ba8f44ed498369c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:73:da:a4:87:34:6a:3b:fe:35:22:0e:a7:2c:
                    c4:17:66:00:45:88:9f:57:f5:85:01:7a:66:30:33:
                    a5:14:73:bb:94:fb:d7:1d:40:91:15:a2:d4:f9:3a:
                    d4:0c:28:c3:34:8e:4c:66:84:6c:e3:89:ca:fe:49:
                    3c:9e:20:e3:4b:7c:f0:5e:d0:42:5e:0c:bc:89:bc:
                    d4:91:eb:d5:ae:30:89:fb:a2:b6:d0:19:3b:73:3a:
                    f5:dd:b2:f9:cd:85:c6:87:e7:33:58:f4:cd:9b:45:
                    31:14:fa:30:fe:f9:2f:fb:75:49:27:96:d2:ef:9e:
                    1c:02:df:88:46:ee:42:bb:ee:81:49:a5:dd:da:ad:
                    ee:c0:f2:4b:3f:f2:bf:1f:0b:e4:c4:da:e9:5f:ab:
                    9f:99:34:fe:5f:00:81:b9:79:89:a0:e1:9e:7c:fe:
                    35:2c:5f:4b:ff:4f:63:11:a8:2d:6c:a9:a6:c9:86:
                    aa:f5:86:6d:bb:68:2e:3c:86:07:65:f0:19:7b:9d:
                    ca:8f:86:72:74:b6:e0:55:88:8a:28:0b:fe:a4:ee:
                    17:52:af:ce:45:cb:36:ef:b3:c3:ae:5a:f8:fb:48:
                    5c:0a:c2:9b:37:ef:23:92:7c:26:67:ba:dd:9c:30:
                    52:6e:86:35:8a:16:5c:16:13:f4:c1:06:ae:5f:eb:
                    c4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0F:8D:77:8A:F6:4F:83:B8:41:9B:5B:A8:F4:4E:D4:98:36:9C:1E
            X509v3 Authority Key Identifier:
                keyid:2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:79:fd:cd:63:1a:b2:d9:11:de:cf:84:54:e3:eb:0e:e8:21:
         ed:14:79:5d:73:87:f8:40:ef:62:d3:29:0d:46:1b:39:a5:26:
         9d:fe:9f:70:50:0f:18:9f:a5:22:cf:1f:c7:1d:22:0c:20:03:
         07:58:2f:8b:b2:7f:3e:f7:62:95:8a:c6:3b:c5:85:e5:f7:05:
         1d:fc:64:a3:5e:6f:9c:90:62:d0:df:e1:47:7f:bc:63:f5:e7:
         d5:ca:fc:20:4d:5f:ba:e2:59:e2:66:53:63:e3:3d:0e:00:ce:
         4f:df:58:00:87:bb:0d:29:0b:76:d7:09:b4:9c:a6:95:6e:92:
         a1:81:a2:76:a5:5c:9f:04:f8:bd:fa:92:27:28:4b:8e:bf:09:
         17:ef:33:d8:1f:9a:50:15:81:4f:9c:2c:54:58:50:f1:73:95:
         20:a4:49:8b:0d:cf:9b:70:fe:d7:29:cb:56:e5:09:12:c6:9a:
         0c:3f:44:47:e9:45:4b:3c:f1:f2:a8:4e:92:27:c6:eb:c0:83:
         27:67:a4:2c:a0:7f:d5:c7:ab:c0:11:ef:b1:89:53:89:a3:be:
         af:b5:e5:3f:e2:90:a8:0a:12:06:dc:18:2d:14:97:a5:32:5e:
         7c:ee:57:ac:c8:eb:1a:a6:f2:8f:7d:91:21:57:9f:f9:0d:a0:
         c8:d4:11:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:38:43 2025 by rpki-client