Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
File:                     lNmOj-xoB3WhVyZuDGt4sUGjT14.mft (raw, json)
Hash identifier:          PElPL5wX2iCS7AkNx+2NtIOWcnTE8sAE8cX0xyoX2tk=
Subject key identifier:   B9:17:A8:B0:D9:B9:11:70:43:3D:94:CE:F8:1B:BD:9A:1E:D2:49:57
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Certificate issuer:       /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial:       0198D54E9737657DFB788D1D49EE56867ECD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
Manifest number:          0F2D
Signing time:             Sat 23 Aug 2025 05:02:34 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:34 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:34 +0000
Files and hashes:         1: 0YppZtvRSXBHB8NFrLn_rzdM4Wg.roa (hash: AIX2Owt5viXo6Wp2eQTWR2x2rHaX/2g8xn17pbf1zi4=)
                          2: H0U-Km3rz_YtidSX7xAdJ-A_RzA.roa (hash: L4ck5kUvwk5NkXR5fk3e/8692feGx3cZZTXMDkDHo6o=)
                          3: JcpkDEw0JBmGAZTOYP-EZkG7h4Q.roa (hash: jiM13rTCKDGbOFYZdyZ0lzDL0Z/zn/1jyUcNFr7C9ic=)
                          4: j0eQCpRbkkshg2cOl2P0JLeBDDw.roa (hash: sMtFOxKW/3UNJ7k3m/3q4HKIZXU/80JJ7tR1eHGV0HE=)
                          5: jk5DLmbJDPFvDX_KRrXRzuIQONk.roa (hash: QsbO4bJZnkw7RxYXi6mJ0xpqtRhxRs42uhmxBRFdmEI=)
                          6: lNmOj-xoB3WhVyZuDGt4sUGjT14.crl (hash: aTObRdlRE4y8wpcqQUAG1CeC8a1QD0F0OzWZUYTcrmE=)
                          7: rJVC54KMnjCB_OVNXkR7wbY_pqY.roa (hash: XBqW9LJVjSv4j8aKjrCl3Ou7nqLb3Clpr0sfUy3Uq/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:97:37:65:7d:fb:78:8d:1d:49:ee:56:86:7e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
        Validity
            Not Before: Aug 23 05:02:34 2025 GMT
            Not After : Aug 24 05:02:34 2025 GMT
        Subject: CN=b917a8b0d9b91170433d94cef81bbd9a1ed24957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:78:d6:a1:7d:0c:ed:49:24:13:9e:83:05:1e:
                    79:f5:84:ac:98:3a:e0:f5:0c:3e:c3:14:f0:42:91:
                    a0:56:0b:c0:82:89:b5:b3:ae:55:6c:ba:de:cc:ef:
                    f7:f3:b5:11:cf:70:46:d6:2d:f4:43:27:c3:3c:87:
                    65:a9:3d:bd:3e:1d:e9:be:33:a1:6d:05:9a:9b:66:
                    e0:b8:ad:6e:f4:8e:58:cc:03:0f:a5:d6:f0:fb:02:
                    ae:c8:46:6c:c2:10:38:08:e0:74:a1:a6:44:3c:1a:
                    74:a5:df:a8:f2:9f:e1:c7:0f:af:a6:59:4d:77:04:
                    68:c0:4f:1c:2a:4f:09:25:68:dd:80:f8:a4:bf:ef:
                    95:e8:7b:47:45:b8:7a:ad:60:3b:dc:b9:6b:11:18:
                    c0:42:9f:cf:1c:8a:5a:44:6b:5b:33:63:8a:e2:c8:
                    ee:49:33:6b:c6:e0:fe:55:8f:fe:1f:49:83:54:5c:
                    24:23:6f:60:66:30:ca:1a:41:f1:b5:cc:0a:35:18:
                    7f:79:44:34:62:f9:82:8e:bf:de:61:cc:8e:06:f5:
                    07:7f:76:65:c4:ac:26:8b:5e:73:fa:28:c4:31:c0:
                    cb:d4:08:a6:88:6d:82:e6:eb:8c:29:61:ea:a7:f2:
                    2b:6d:24:48:52:51:9c:a3:bd:4b:8c:b9:e3:ac:25:
                    52:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:17:A8:B0:D9:B9:11:70:43:3D:94:CE:F8:1B:BD:9A:1E:D2:49:57
            X509v3 Authority Key Identifier:
                keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a4:15:66:5e:f3:d5:80:3f:6b:04:1b:d7:23:20:1d:4c:62:
         37:66:d6:c1:0a:9b:72:3b:c6:25:ef:c4:46:e2:5e:e9:df:56:
         42:87:84:3f:0d:14:6b:9f:55:27:78:a7:c8:48:dd:34:4b:a4:
         2e:a6:a9:d9:08:32:8c:2a:5e:ef:cf:67:06:eb:bb:d9:da:df:
         a3:88:af:22:01:a5:f3:b4:cb:6b:ce:88:eb:1d:5a:46:f6:ee:
         18:43:af:87:e8:18:da:ad:dc:58:84:cb:c8:00:e8:0c:35:40:
         48:c1:b9:64:ab:3e:00:58:3b:29:2f:1e:cf:4f:70:4e:7e:de:
         4d:a6:df:01:57:fd:19:f9:72:b3:a5:6f:1d:95:13:64:7f:34:
         d1:8d:c3:1e:e5:5f:34:a5:f2:a4:ff:4f:52:94:c1:a8:01:50:
         10:69:c2:a5:e3:f0:af:44:cf:11:6c:98:ca:6d:21:3e:70:b7:
         2d:86:08:78:84:22:27:79:05:fc:9d:c5:b9:52:a2:e5:45:50:
         cc:3e:1c:77:d0:6c:fe:41:37:0d:dd:97:c6:33:2f:f3:7e:b4:
         83:e1:18:f8:97:89:5a:01:b2:c4:3f:b6:30:7f:c5:26:40:99:
         5c:55:d7:f8:a3:61:05:aa:22:9b:39:06:c0:1e:ca:37:80:87:
         c1:3e:58:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:33 2025 by rpki-client