Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
File:                     LHwKdxsw0nQoUIDdxC42eYOW8iw.mft (raw, json)
Hash identifier:          Esu66xYOanevEGqkS5Qyh0BASW1rVcXoNpTbehAbO+M=
Subject key identifier:   2A:C4:1E:D4:57:BF:13:8F:32:5E:04:75:42:57:2B:1A:01:9D:31:D9
Authority key identifier: 2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
Certificate issuer:       /CN=2c7c0a771b30d274285080ddc42e36798396f22c
Certificate serial:       0198D583DDB42AEFC1542038415B879D4F39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
Manifest number:          136C
Signing time:             Sat 23 Aug 2025 06:00:45 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:45 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:45 +0000
Files and hashes:         1: LHwKdxsw0nQoUIDdxC42eYOW8iw.crl (hash: kYze33qUbyt9G1HW90i3ToZl0rRQI85n6YPvWnRTJDI=)
                          2: _wYBYYAWsBdIPcz67gJjf_cpxBc.roa (hash: WT5EAFrH+ID6hV4wr/zaJ0InnDxoXdrcj+f2kf7QcuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:dd:b4:2a:ef:c1:54:20:38:41:5b:87:9d:4f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c7c0a771b30d274285080ddc42e36798396f22c
        Validity
            Not Before: Aug 23 06:00:45 2025 GMT
            Not After : Aug 24 06:00:45 2025 GMT
        Subject: CN=2ac41ed457bf138f325e047542572b1a019d31d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:70:73:fe:72:ea:46:9e:3f:7e:90:30:e1:c0:
                    21:d3:aa:90:df:25:f2:c9:95:2e:e5:42:df:43:b8:
                    bd:bc:c0:b3:b1:3e:5b:78:18:31:1b:7d:fa:8c:d3:
                    72:d6:61:3b:e9:33:5a:67:19:53:57:a9:0d:88:68:
                    35:22:a3:9d:eb:f6:62:0a:14:db:ac:e3:3a:17:ea:
                    74:74:9b:a3:b7:8f:1e:9f:88:c4:5d:0f:11:2d:81:
                    1f:7a:6b:21:8e:70:ce:fe:da:d7:78:5f:ea:00:28:
                    61:58:68:be:80:b0:53:6a:0d:d6:24:dd:41:e8:f3:
                    c1:a7:ad:a1:2f:fa:46:d9:9a:97:ee:7a:b7:7c:d9:
                    c1:97:39:ba:9b:a1:9c:c8:27:4c:18:47:53:3a:ea:
                    b5:70:a4:ed:d7:d7:b5:dc:a7:92:84:91:59:f5:a5:
                    ab:47:06:b2:ea:48:37:ad:0e:40:e6:16:4d:97:7a:
                    56:56:00:4b:97:3d:d5:87:99:a7:ca:65:64:4d:9e:
                    81:f9:63:ee:6a:41:07:27:98:0e:1f:10:f6:0c:c2:
                    75:b5:aa:01:8e:4b:5b:e1:76:2f:84:e6:9b:a1:00:
                    75:37:42:c8:37:14:c0:e3:e4:71:65:4c:2a:b8:80:
                    f8:08:1e:f2:c7:a7:37:65:db:9a:05:3d:19:bf:a6:
                    68:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C4:1E:D4:57:BF:13:8F:32:5E:04:75:42:57:2B:1A:01:9D:31:D9
            X509v3 Authority Key Identifier:
                keyid:2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:69:1d:d1:e6:d7:38:88:9d:67:06:09:14:92:3d:b9:5f:7f:
         11:9a:b2:44:90:51:ee:83:31:33:28:01:80:95:d6:af:35:53:
         65:cc:7f:ea:97:69:7f:89:04:11:b4:70:ad:5a:19:a5:a1:84:
         29:b6:94:37:cb:14:c1:c6:45:44:6c:91:70:72:d6:69:c2:87:
         19:7a:99:3e:42:f8:de:51:5a:3b:a4:3c:d1:a8:d6:93:35:f5:
         60:0f:c2:64:6e:7d:54:32:c9:2d:58:53:89:45:38:2b:f2:6e:
         4e:7a:89:35:b1:f9:4f:3a:74:af:ac:dd:db:d8:5b:70:63:f2:
         ae:d6:ba:a7:7e:e8:23:47:d5:d8:2d:1c:3f:58:ae:16:31:0a:
         a9:68:40:87:05:b2:98:46:68:eb:d0:4a:d0:2f:6c:1d:f5:8d:
         01:32:d0:c4:ad:79:65:f1:16:ac:3e:08:a5:b1:52:97:fc:8f:
         bf:fe:d0:43:9f:b5:a8:4a:d3:8b:f3:50:ee:39:76:a9:91:98:
         cd:14:01:ef:54:7e:bd:2a:0b:d6:56:4f:90:cd:a3:74:5b:4e:
         2e:60:04:40:eb:94:ce:2d:3f:e6:9c:c2:86:99:5c:bd:68:c7:
         c0:3d:0d:76:51:f3:f2:25:a0:c0:27:48:1b:82:49:b4:73:e5:
         67:f3:cc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:48 2025 by rpki-client