Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft
File:                     leoFUUagE2cFy2ptrk1CScUUxpM.mft (raw, json)
Hash identifier:          AgJJhyjlFqYlNS6bdppZaDjjIZ2Re38yHC8aYT7ZTrQ=
Subject key identifier:   6D:0D:5C:EA:86:53:A1:6F:50:E5:B6:78:3D:E3:C2:0D:72:02:94:BE
Authority key identifier: 95:EA:05:51:46:A0:13:67:05:CB:6A:6D:AE:4D:42:49:C5:14:C6:93
Certificate issuer:       /CN=95ea055146a0136705cb6a6dae4d4249c514c693
Certificate serial:       0198D4740EBA956D7232252D731D79D2BD38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/leoFUUagE2cFy2ptrk1CScUUxpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft
Manifest number:          013F
Signing time:             Sat 23 Aug 2025 01:03:52 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:52 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:52 +0000
Files and hashes:         1: eh7QIOULTkuPd8hZfeCt1Dcp9Wg.roa (hash: pySOsCgZVAtRnTClT396cb7iWVIwE3V7HZRoqKyCYOE=)
                          2: leoFUUagE2cFy2ptrk1CScUUxpM.crl (hash: cQe8eluHgH1W2XBzVVs+IeeCyWHYyfBbJX3VSB172u8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/leoFUUagE2cFy2ptrk1CScUUxpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:0e:ba:95:6d:72:32:25:2d:73:1d:79:d2:bd:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ea055146a0136705cb6a6dae4d4249c514c693
        Validity
            Not Before: Aug 23 01:03:52 2025 GMT
            Not After : Aug 24 01:03:52 2025 GMT
        Subject: CN=6d0d5cea8653a16f50e5b6783de3c20d720294be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:25:12:ec:7b:f7:a1:22:90:a2:7f:a5:59:b9:
                    93:ee:ef:09:92:7c:17:0b:62:9b:5a:77:c2:34:59:
                    10:fb:5d:b5:0a:94:2b:f3:09:c1:20:51:f3:98:d2:
                    ba:22:13:f3:c8:4f:de:74:07:ea:07:fa:22:8b:60:
                    84:18:8a:64:11:c3:47:92:01:7b:36:02:5f:21:b4:
                    e4:69:00:c3:6f:f9:b8:e0:3b:07:9a:3a:db:76:d2:
                    78:43:d8:b7:8c:66:e8:62:94:b4:a0:8b:22:33:e3:
                    ff:76:a9:b3:b0:36:80:d4:bf:26:79:5e:fc:9c:c1:
                    81:01:68:92:e8:57:e7:8f:7d:ab:29:56:10:08:19:
                    86:73:2b:24:c9:7c:ec:73:bb:26:51:f5:45:52:f4:
                    c0:f3:50:cc:9b:e2:a0:f9:1d:a9:16:47:0e:0d:ba:
                    da:f9:3d:0d:5b:9c:31:6a:07:95:54:28:1e:a5:2d:
                    fd:f9:44:1e:3c:cc:cc:72:fa:a3:fb:e9:eb:69:77:
                    55:48:67:6e:b4:15:74:f5:7d:54:62:fb:b7:7b:62:
                    6f:ce:6f:3f:0b:67:2d:71:06:d7:22:a8:59:9c:55:
                    92:c3:41:21:54:8d:b0:54:1e:b8:8c:dc:24:e9:ce:
                    e0:e8:6d:e5:5f:b9:e9:34:83:db:88:37:61:2d:3c:
                    5d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0D:5C:EA:86:53:A1:6F:50:E5:B6:78:3D:E3:C2:0D:72:02:94:BE
            X509v3 Authority Key Identifier:
                keyid:95:EA:05:51:46:A0:13:67:05:CB:6A:6D:AE:4D:42:49:C5:14:C6:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leoFUUagE2cFy2ptrk1CScUUxpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:a0:42:1e:2d:68:7d:53:1a:c4:f4:a4:82:fb:80:ef:6e:b0:
         0c:83:ed:14:66:e2:7a:e5:9d:6c:df:1d:4f:64:c8:49:6e:95:
         1c:62:5f:72:bf:85:09:32:90:4a:9c:ab:db:90:1d:e6:51:f0:
         7a:c6:54:49:d9:0f:a3:9a:f6:c7:d9:f0:cc:47:7a:31:24:4c:
         21:f6:43:c4:7a:6d:bb:03:d5:5e:45:df:36:dc:4f:2e:45:91:
         5c:7c:d6:b1:fb:91:6f:aa:3d:30:22:fb:43:d8:46:0c:8e:63:
         59:21:b8:ef:a5:3f:14:c7:00:f6:9b:7c:e0:73:6e:6d:d4:26:
         52:5d:ce:64:51:53:c7:63:1c:49:92:4c:5c:cc:e4:07:e7:67:
         1c:f2:8e:cd:ab:f2:3a:a8:19:f4:d6:92:7f:86:9c:d6:d2:1a:
         5f:01:45:c3:e4:58:b7:5a:ef:c5:f9:c3:5b:5a:3d:61:52:2b:
         db:0a:96:22:f6:ea:94:a9:a4:79:2d:f5:d0:83:a8:7b:34:bb:
         cf:24:4d:ae:a3:62:8f:56:1a:c7:05:86:0a:6e:80:24:7d:ae:
         01:56:7c:80:9b:27:80:e7:d3:b7:5f:75:51:86:36:d0:4c:f7:
         b0:8e:ff:35:fa:7f:02:b3:15:cd:b1:31:fb:90:88:32:06:fb:
         fb:0a:99:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:48:04 2025 by rpki-client