Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
File:                     LcgdJMRd2qNF-QZN4p-8p7EppSw.mft (raw, json)
Hash identifier:          Colcc3Y0F+iq3xamu0HBvOoP8LSqycR11VoifwM5dbw=
Subject key identifier:   D5:D3:68:AF:14:A3:72:69:90:4C:B3:87:94:38:94:FC:D7:79:7B:5F
Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
Certificate issuer:       /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Certificate serial:       0198D77327977167784206ED906D494A7481
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
Manifest number:          1660
Signing time:             Sat 23 Aug 2025 15:01:44 +0000
Manifest this update:     Sat 23 Aug 2025 15:01:44 +0000
Manifest next update:     Sun 24 Aug 2025 15:01:44 +0000
Files and hashes:         1: LcgdJMRd2qNF-QZN4p-8p7EppSw.crl (hash: /EnCQHd5YN1FGqJCDiJos+kZaN/M1yFbXdBm+Zt1E94=)
                          2: Tqry6ntz7b3kTeJ5OCnwPvloJIw.roa (hash: y/Hg2mPZLnUNHUkA7kXq+J0F+bsaFDCzyOC2OJvkyTk=)
                          3: eoBQfc17YMW18lDGLvbcO_mY_AI.roa (hash: RHrko1plBfSTVGvaquUYDvyHrqn6dVrup7a+/ecj8TU=)
                          4: fd3RJJ6-t5MPxFMjaOieMyrNj1Q.roa (hash: Gp0oxYbqR8uF0JIVNiZGflyEv6T2n/2lVC4AqntijqM=)
                          5: iCEtvdo35QYS0XZzbCSkUBvLIzs.roa (hash: zyoo6UPzEwr9Wic7Dppcx0mzsl7aajEnMpuXSdefYMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:73:27:97:71:67:78:42:06:ed:90:6d:49:4a:74:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
        Validity
            Not Before: Aug 23 15:01:44 2025 GMT
            Not After : Aug 24 15:01:44 2025 GMT
        Subject: CN=d5d368af14a37269904cb387943894fcd7797b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cd:74:e4:14:12:88:90:11:0d:64:c8:28:b8:
                    79:6d:41:1e:de:92:f7:ef:5e:a1:aa:f4:71:ca:67:
                    0a:ce:71:5d:e7:2e:3b:e0:84:4e:21:ff:94:4e:5b:
                    19:98:15:11:03:75:11:80:c7:99:35:97:35:62:25:
                    71:c4:4d:d6:69:a9:90:b3:42:64:00:e7:7d:1f:3b:
                    cb:e0:b3:22:e3:e1:dd:72:45:c3:29:b5:66:a1:56:
                    9e:cd:ee:e9:91:a5:d0:f9:4b:50:06:d2:29:18:7e:
                    50:7c:f7:9a:0c:1d:46:c3:e4:3b:ae:40:cb:bc:4d:
                    f2:6f:ca:71:e1:0a:30:86:7e:b6:a0:0a:a2:2b:7c:
                    7b:52:2a:91:9d:28:d4:63:ca:58:83:1e:dc:5e:47:
                    d6:69:d0:ea:c6:06:db:fd:89:6e:6a:25:92:8c:81:
                    00:40:e5:09:44:67:e2:71:ed:54:2f:a9:9c:e2:8f:
                    75:99:4a:28:9f:f4:50:91:ac:17:b7:fc:8f:64:66:
                    7d:01:1c:1f:49:e2:ae:87:29:62:87:5a:72:79:e3:
                    04:f9:7b:d9:08:08:d5:07:48:3a:72:57:de:fb:b1:
                    4d:8f:29:39:ce:b5:12:31:f3:7d:f4:3c:db:f5:3d:
                    ad:8a:5e:dc:51:04:d5:cd:cd:fb:e4:93:52:8d:6e:
                    75:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D3:68:AF:14:A3:72:69:90:4C:B3:87:94:38:94:FC:D7:79:7B:5F
            X509v3 Authority Key Identifier:
                keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:2b:b3:ec:23:a1:42:9e:2c:38:14:db:03:d8:78:22:36:83:
         28:8c:6d:38:53:3e:55:c5:6e:a9:f7:b1:01:e7:10:31:ce:55:
         45:9a:40:34:a4:5f:3c:15:fa:5b:3c:5f:fe:87:62:01:1c:12:
         9e:19:5e:16:49:99:8a:6d:90:57:e1:4b:9a:a7:a6:f8:28:ac:
         eb:2e:6e:76:5b:d5:42:6d:a4:eb:58:93:e4:37:cb:92:f1:a0:
         4a:8f:4a:c0:8d:64:02:2b:59:f9:91:16:cf:4f:05:3e:73:c0:
         f6:d0:32:60:49:03:d7:4f:80:4f:d6:38:26:89:05:2c:83:bf:
         de:34:c1:08:93:f1:8b:c6:d1:e5:e1:a8:98:9d:c2:a8:4b:19:
         c2:f1:39:4b:2e:f9:74:f9:98:a9:c1:63:c0:ea:a4:34:4e:60:
         66:79:a8:de:4c:7f:d2:cd:41:cc:3a:84:1b:16:a1:18:be:a5:
         79:0d:b7:10:9a:e0:05:7a:98:84:e6:e1:da:5e:57:d8:9a:1a:
         39:dd:f2:35:6e:8d:61:92:da:ee:54:37:6b:4c:c6:c4:a6:c4:
         c7:5b:00:18:a3:b0:39:42:99:da:cf:2e:10:00:cc:87:7e:5e:
         9c:36:aa:5e:44:31:a5:39:c0:c1:66:6b:f8:4a:1a:d7:1f:41:
         b1:3a:12:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:46:10 2025 by rpki-client