Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
File:                     lsvPLpV8qNlCRyp7AEQoWybbayI.mft (raw, json)
Hash identifier:          SXlwFlv7hbRQZ72EF5D/rKMV006NFwGO7lphiZfZIsI=
Subject key identifier:   AA:A7:E2:4D:B7:87:BB:28:31:F8:35:74:67:E1:A2:B6:E9:92:D9:C8
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Certificate issuer:       /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial:       0198D4A7C26D962B3B7ABD97A2A1E8A69C86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
Manifest number:          164F
Signing time:             Sat 23 Aug 2025 02:00:20 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:20 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:20 +0000
Files and hashes:         1: 7BXKsUOjuOFRoB_xLtuTj8xgpGk.roa (hash: 0Td1GKV7n2fB74CJpRTzoYkEjcKI38lQAiwf9tEVnfs=)
                          2: Ylocyo8IuYXL1jFDJemfcOF7HII.roa (hash: kWYwKTsoMIuvF5bk7I/FFQ+w4HxrfN+6bwhubAtqknA=)
                          3: lsvPLpV8qNlCRyp7AEQoWybbayI.crl (hash: AT/q7R7mfgnsVoZsgGXQHjXnnI/XzMj7RsVNQcucr90=)
                          4: xQ5C-mq8-mHSyfrn5JtEpDjdplw.roa (hash: wJd8QphcgtBxMu9MMqDp1Ofvwa30TStFcRoo1rd2+MA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:c2:6d:96:2b:3b:7a:bd:97:a2:a1:e8:a6:9c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
        Validity
            Not Before: Aug 23 02:00:20 2025 GMT
            Not After : Aug 24 02:00:20 2025 GMT
        Subject: CN=aaa7e24db787bb2831f8357467e1a2b6e992d9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:79:7a:00:d4:37:a3:29:95:be:10:25:b9:a3:
                    56:be:67:e6:c4:dc:ba:e3:7a:c5:da:92:4c:72:2a:
                    6a:fa:b6:c9:fb:e0:9e:2d:c0:2c:03:21:34:a0:02:
                    10:85:0c:93:d6:b6:34:23:2d:b0:07:7a:1d:11:58:
                    5d:9f:9b:11:5e:c5:0e:ce:cd:b7:aa:dc:3b:3c:cf:
                    f5:03:8b:3b:1a:ca:98:04:01:df:35:15:f3:1f:c1:
                    16:ee:c3:02:69:1c:66:f2:60:c9:79:4c:6b:92:08:
                    0e:e4:58:4a:03:ca:e3:9c:8a:39:ae:dd:d0:8c:8e:
                    e2:42:39:fb:ec:78:ef:42:7a:4d:21:9c:6d:d8:7e:
                    b9:c9:65:86:c1:c3:da:86:5a:87:f1:2a:09:ad:ea:
                    bc:d1:d5:67:e5:af:ef:4e:73:ac:35:73:9a:38:41:
                    d9:f2:e1:03:aa:62:67:5c:43:97:72:dd:38:48:8e:
                    48:ca:f6:43:2b:c2:75:98:a1:ad:ab:2f:c2:07:90:
                    56:ae:71:8a:17:53:30:61:68:14:a2:38:00:2d:80:
                    c6:5d:ae:ff:6e:91:38:d1:3f:c1:fc:a0:78:02:2f:
                    ab:71:0c:f2:96:c6:be:fd:7f:fd:d6:04:52:de:a0:
                    92:16:94:04:b7:9e:d1:06:1f:61:d1:de:b3:b6:2e:
                    ec:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A7:E2:4D:B7:87:BB:28:31:F8:35:74:67:E1:A2:B6:E9:92:D9:C8
            X509v3 Authority Key Identifier:
                keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:8e:26:21:75:01:ba:79:da:2d:86:51:73:9d:3d:8f:99:3c:
         41:52:6c:eb:58:10:27:9a:2a:a5:7e:c8:ad:32:f2:32:21:d3:
         5f:06:67:77:44:f5:93:3e:fe:04:b3:14:a7:fe:2b:b0:ac:55:
         c4:4f:c0:14:2d:cf:e3:41:e9:28:12:02:7f:e9:66:db:1d:b2:
         26:6c:3b:85:c0:bd:a8:ec:01:93:d4:53:94:33:a0:1c:70:52:
         c0:d1:9e:86:a2:65:26:eb:df:c0:67:ea:85:f1:46:42:9d:63:
         07:19:9b:c2:c9:89:32:ef:37:82:05:5c:a3:f3:b8:df:93:04:
         db:b4:06:62:61:6f:f7:1c:c9:b6:3a:13:77:c0:54:0c:fe:ce:
         63:c3:0e:cc:70:a3:bc:d7:59:16:b0:32:08:83:9a:53:90:9b:
         46:7f:93:16:27:e6:a5:e6:40:97:2c:d8:84:b5:f8:67:66:df:
         be:67:20:cf:04:1b:15:35:59:31:0b:4e:44:31:3d:33:45:b5:
         a9:9e:47:6b:30:53:b5:46:8a:4c:3d:8c:11:e7:30:ff:a5:c4:
         48:7c:3c:ad:b6:63:87:47:33:d1:31:39:c2:87:ce:bd:78:b1:
         58:59:43:d4:c0:c5:cd:5b:22:ff:38:13:c0:a3:43:ba:38:87:
         d3:56:25:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:48 2025 by rpki-client