Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
File:                     lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft (raw, json)
Hash identifier:          4ipGGRC6J/5Y9XqplhjxFD2rr2BqQIovSo+qUJPNUsY=
Subject key identifier:   9D:51:88:34:12:9E:E8:EF:56:B5:CB:4D:3B:04:BD:CD:2A:7F:E3:69
Authority key identifier: 95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84
Certificate issuer:       /CN=955246b1b65c95046259c2248c1d306ff135b984
Certificate serial:       0198D6CD54CA6E6B1EBB922206D6D417AA75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
Manifest number:          118E
Signing time:             Sat 23 Aug 2025 12:00:37 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:37 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:37 +0000
Files and hashes:         1: d62eL6CZy4sqfG2HJBBtw2_a_Xo.roa (hash: VQJVLEqVpBvW0EhwHp75V7iW+dHN3GO38t078QYSo/g=)
                          2: lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl (hash: aJMxkQKgH3cGYF3dsfw0FUFFHWdfRnPilb8/UR5aLRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:54:ca:6e:6b:1e:bb:92:22:06:d6:d4:17:aa:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955246b1b65c95046259c2248c1d306ff135b984
        Validity
            Not Before: Aug 23 12:00:37 2025 GMT
            Not After : Aug 24 12:00:37 2025 GMT
        Subject: CN=9d518834129ee8ef56b5cb4d3b04bdcd2a7fe369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:41:ee:f3:21:dd:3b:4f:17:43:98:e4:15:3a:
                    9a:1b:a3:41:c1:a0:8c:50:78:63:6f:4e:79:dd:45:
                    2c:3c:65:73:bb:64:66:17:b5:44:f7:3c:30:51:fa:
                    98:5b:15:bf:10:95:f1:1d:68:47:bc:9b:60:17:9a:
                    c2:ff:8e:d8:fa:8f:17:9b:77:ec:b5:7c:9c:12:33:
                    09:96:da:c7:44:3c:9b:7c:b7:53:aa:87:4a:e7:a4:
                    66:f7:8d:70:89:62:b9:cb:54:bc:c2:a6:15:f3:ce:
                    4f:51:97:7e:13:8e:2a:98:7e:2d:3a:98:74:6c:ee:
                    47:7c:74:f2:ea:7e:66:8d:0f:26:30:dd:3b:eb:4d:
                    0f:8c:25:94:fa:8c:8d:2b:8e:64:80:ed:0d:82:b1:
                    62:36:50:9c:96:bb:9c:38:c0:d3:f9:bf:e5:0c:e9:
                    81:9a:58:d1:f6:cd:c3:8b:e9:0e:ea:fc:f6:b9:2d:
                    7e:45:31:23:96:38:68:8b:8b:98:50:d8:8e:89:5c:
                    6e:c9:24:14:15:26:9d:be:11:8f:aa:23:76:72:64:
                    21:52:9f:b4:2e:e8:d5:8c:b7:94:44:7f:47:e7:e9:
                    0a:f9:69:6a:73:a8:ee:67:09:d4:23:fd:84:d5:f2:
                    35:30:50:1e:dc:eb:e7:fb:44:de:47:6e:2a:0d:2c:
                    77:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:51:88:34:12:9E:E8:EF:56:B5:CB:4D:3B:04:BD:CD:2A:7F:E3:69
            X509v3 Authority Key Identifier:
                keyid:95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:ac:7e:c0:83:4a:30:fa:29:93:62:a3:c2:d5:e3:fe:fd:03:
         28:61:7b:dd:53:85:23:e1:6d:88:ab:ab:5e:90:60:ea:53:3c:
         61:22:4d:6e:2a:b4:6e:8c:83:ae:68:15:60:54:02:95:76:fe:
         3b:1b:85:27:6b:1a:e4:3c:f4:df:88:84:b8:48:ea:97:05:b7:
         b9:0a:5f:1e:d2:a4:5f:9f:4b:43:51:20:46:cd:d7:ec:95:b3:
         02:5a:00:9c:0b:75:92:26:61:1e:85:5b:e2:5d:15:c7:f2:95:
         e0:68:05:40:0b:7a:82:82:ab:7d:1f:6b:d0:8b:06:cd:16:28:
         bb:cf:26:3c:a2:d5:5e:76:8f:f8:96:96:42:91:bb:f2:14:e7:
         f8:c5:52:8c:f8:35:a7:58:37:5c:13:d1:b0:cc:e7:43:71:65:
         24:b3:96:6b:fa:07:58:25:84:69:dc:95:e8:88:89:7d:d7:91:
         08:e0:76:38:55:c1:cb:eb:0b:ac:a3:b4:35:29:fb:cd:ce:b5:
         9c:11:19:9b:9e:e2:61:53:11:35:23:4e:36:01:97:ff:2c:28:
         c0:98:88:cc:75:1e:67:1c:66:3c:a5:dd:40:04:72:ad:39:dd:
         67:dc:31:5e:34:bf:e5:76:a2:35:96:26:40:60:f7:f2:71:06:
         eb:c2:0e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:55:38 2025 by rpki-client