Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
File:                     LsEh4VRd8-W7hukYjygl-tdHf3U.mft (raw, json)
Hash identifier:          6zPdXH4jtun4M3e0Jtbpu31EzdwmFqux8rFTmJ2UDFE=
Subject key identifier:   62:5E:B8:EB:A1:52:7C:17:EE:FF:CB:B0:E3:B8:DB:77:CD:E0:F5:5E
Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
Certificate issuer:       /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Certificate serial:       0198D4E01C1FABE8A952B75D265BF468E1B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 03:01:53 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:53 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:53 +0000
Files and hashes:         1: 0IG7CMPC-7SDKCTiz8anhD3c0zs.roa (hash: fOnGjT4Xyjjotwa9/pecYw3cI1uzEt3+li8tB/lSTXY=)
                          2: BU0Pzn4hZS4sQu5v8Q1Qbbhp9vM.roa (hash: 9kbaESAN0/YNybQyxy7LooDJN3A5I92At9aUcKOvy/s=)
                          3: IwlbmFExD2G5c49HgZqQSHA1wZk.roa (hash: 45pPUt5QNz8dN0ylQGV0BCVZpBwOOv2uaieuY/tEzHc=)
                          4: JH5Q15rYm3yauoa5O0AtnaEF5T8.roa (hash: P8bh12UacYgaXKXWnxHFtSknccP/NWYvpFtt4o+MFnQ=)
                          5: L1Jr9Ntwc8rL0VyBMGBPBeMOSbU.roa (hash: 2Po6H5pjnfZQ8LGkU3TaUi4GHx7DH6w6vtm+1KWoyVI=)
                          6: LsEh4VRd8-W7hukYjygl-tdHf3U.crl (hash: ytaS9keYff9p5uYN62834eFYx4+z85oJOUEeD8Pns+U=)
                          7: X1X4I6xtC4Tyzz9jxci5NVZVFuk.roa (hash: Y7rSJ5Le7s/lA/Q7YQ3ZJcSkf2udL6S8lMTSgJ0RabQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:1c:1f:ab:e8:a9:52:b7:5d:26:5b:f4:68:e1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
        Validity
            Not Before: Aug 23 03:01:53 2025 GMT
            Not After : Aug 24 03:01:53 2025 GMT
        Subject: CN=625eb8eba1527c17eeffcbb0e3b8db77cde0f55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5e:91:e2:c9:8a:d1:ec:fc:da:34:d6:9f:57:
                    0b:ce:ef:a5:b7:34:e6:52:35:dc:06:3c:86:a2:b7:
                    42:6e:09:12:02:db:a6:f9:6c:48:4f:c5:dd:3f:25:
                    58:71:8a:14:94:ef:18:86:12:00:8c:c4:62:b1:4c:
                    06:e7:f4:a8:43:f2:73:8d:64:ad:cb:3c:58:7d:c5:
                    9f:37:85:40:22:71:79:62:9f:9f:ae:20:fd:7e:4e:
                    ab:d8:30:27:c7:34:e6:64:16:2b:3b:04:4f:f0:fd:
                    10:5c:d1:ae:aa:f7:ae:e5:32:f2:16:0a:8b:aa:33:
                    0d:87:68:42:d5:45:8b:9e:c5:6d:c4:e7:0c:bf:18:
                    c8:6a:55:39:cd:db:ee:d3:6e:fe:28:43:d7:9a:af:
                    bf:34:1e:34:71:9f:52:cb:22:00:73:ff:0d:6f:85:
                    5f:db:cc:65:9b:37:d1:34:5a:46:82:02:46:cc:96:
                    62:f4:f4:fe:12:37:13:f7:f1:8e:7c:76:73:06:c0:
                    db:c7:e9:0b:03:51:f6:c7:8b:50:09:63:bd:8a:b1:
                    f4:22:7e:40:cf:8a:7e:17:4a:e7:28:fd:85:02:4c:
                    62:8f:83:78:1f:0d:f7:40:2c:7e:b5:da:36:53:97:
                    95:21:ce:6f:bc:77:ab:4c:2f:49:96:b0:ec:69:e3:
                    3d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5E:B8:EB:A1:52:7C:17:EE:FF:CB:B0:E3:B8:DB:77:CD:E0:F5:5E
            X509v3 Authority Key Identifier:
                keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:17:32:81:70:b6:63:77:df:97:1e:84:57:00:31:3f:45:75:
         d7:9e:28:91:da:1f:eb:d1:78:11:3c:2f:4d:e9:5c:5a:90:62:
         c4:d0:d3:e5:7a:6e:13:2e:82:49:2a:fe:f3:68:3f:17:4b:45:
         ce:74:5e:25:3d:8d:17:07:ee:ee:f4:e0:b6:5f:9a:e7:f6:9c:
         96:d8:d0:c1:30:e9:6f:eb:0d:aa:98:d3:f2:2a:26:b1:df:63:
         55:4e:b8:1e:8e:87:0b:36:01:93:95:ad:24:50:ba:42:1e:f9:
         7d:7f:c4:d7:d8:c8:44:70:f0:75:6a:bc:9a:57:9b:d8:77:7f:
         b7:f0:1a:df:d6:38:08:b0:73:72:32:54:d9:ad:68:6a:76:2c:
         a9:ab:a5:29:72:bf:86:f9:be:b2:52:f6:32:69:22:27:77:e5:
         2a:58:9b:1d:f9:da:60:44:08:83:61:08:3c:87:86:33:1b:c0:
         a6:1f:87:45:c1:be:ea:a0:75:b9:f7:e0:3f:94:60:6e:9f:68:
         7d:4b:7f:a8:67:ab:bd:ec:ec:95:da:55:7d:c9:c3:92:b3:25:
         de:d9:9b:a9:99:e8:d6:28:e0:4f:35:51:f4:e1:05:44:50:7f:
         a4:24:f0:2d:e9:b0:1c:a3:ad:20:6c:f1:fc:fb:4a:ea:32:4c:
         70:fe:8e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----