Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
File:                     1-LPVjZk_lghA9-8v4gwAityXH5c.mft (raw, json)
Hash identifier:          Hz9uvcni5KcgGbfNkTZ0RPzk9Ql2bG3qlXsdYFs8v5s=
Subject key identifier:   ED:1D:6B:65:48:B3:F5:E3:62:3A:4A:0F:13:B6:02:CF:1C:0D:BA:DD
Authority key identifier: F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
Certificate issuer:       /CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
Certificate serial:       0198D6CD1F7C8561E16D0B64D83C2906599E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 12:00:23 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:23 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:23 +0000
Files and hashes:         1: 1-LPVjZk_lghA9-8v4gwAityXH5c.crl (hash: 4/8FE7IEG3RsJPQn3tWeOuJe3rbX8YxcExR2cv7bfbI=)
                          2: G_1BjHa-Ii2Y9oecPQ2LQCQwR58.roa (hash: 8hKbU4VqspkNDKDSQPFelJhuWZ21X39DPqFIjGUgHFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:1f:7c:85:61:e1:6d:0b:64:d8:3c:29:06:59:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
        Validity
            Not Before: Aug 23 12:00:23 2025 GMT
            Not After : Aug 24 12:00:23 2025 GMT
        Subject: CN=ed1d6b6548b3f5e3623a4a0f13b602cf1c0dbadd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:88:49:8c:c3:b6:ac:37:1f:bd:2b:a2:6e:d4:
                    3c:40:c7:95:3d:d4:b5:52:c8:ca:b3:fd:9b:e8:a8:
                    6b:a5:36:60:aa:7d:6c:94:d7:a3:f9:45:33:20:12:
                    e2:c1:5a:45:ff:de:e4:3f:67:2e:96:a4:ba:c5:86:
                    cf:d2:c7:29:f4:ea:26:64:65:46:9c:19:f1:a1:0b:
                    7c:5b:e2:c2:e6:38:7d:71:81:49:12:90:b3:19:dc:
                    f4:48:70:38:40:c5:2e:69:8f:4e:b3:dc:69:87:64:
                    82:cd:0c:6b:8d:0c:2e:a1:20:31:d0:d6:96:e4:64:
                    69:c5:ad:bf:fd:fd:6e:cc:7d:51:0f:22:b5:ec:43:
                    55:62:fe:49:73:c2:6a:08:9b:63:f9:b9:d4:fc:7d:
                    37:38:2c:3f:7f:f0:3a:6e:c9:36:12:79:7c:25:c6:
                    e8:b3:32:d7:d4:9e:81:16:d3:9c:ae:e9:4e:b9:3f:
                    8b:23:11:d4:3d:b1:0f:9a:02:cf:68:d6:30:98:fe:
                    e7:ca:2e:c7:12:0b:9c:34:bc:b4:bb:14:df:de:1f:
                    65:b8:d1:a1:03:e5:cf:b4:b8:7a:7d:e8:89:f2:ef:
                    28:15:88:93:61:31:e0:34:5b:00:9d:6e:82:47:53:
                    fa:19:d1:e5:7a:65:ba:4d:98:7c:37:0e:53:63:6c:
                    48:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1D:6B:65:48:B3:F5:E3:62:3A:4A:0F:13:B6:02:CF:1C:0D:BA:DD
            X509v3 Authority Key Identifier:
                keyid:F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b8:f1:e6:fd:9c:96:43:4c:a1:d4:fb:34:ce:36:d1:ca:77:
         40:0c:5b:3c:4f:9d:f4:f7:5e:39:e5:91:b9:4b:2e:e5:86:cf:
         8b:cd:0e:0c:cf:f7:81:b2:b5:20:1e:7f:39:c1:eb:46:cd:19:
         0e:05:d5:06:2e:92:84:5b:cf:a2:ed:62:ee:7f:db:07:a6:cc:
         09:1c:80:35:c6:6d:ca:46:86:d2:e2:c4:88:27:97:4a:14:f3:
         5f:de:da:cc:36:79:1d:27:9d:3f:dd:f8:b9:f2:29:ce:c0:3e:
         68:2f:f3:0e:2d:dc:04:de:ee:5c:bb:8d:49:54:21:7b:21:22:
         fa:86:df:a2:90:38:fc:3a:6b:93:30:73:94:bd:3d:51:7a:00:
         d5:63:ce:67:c2:78:cc:82:66:99:a4:44:10:82:d0:d8:6f:82:
         80:e8:e7:e6:9b:df:11:5f:e3:f0:2f:97:da:14:3a:26:f2:5f:
         c7:2c:21:44:f5:41:33:30:93:2c:1e:9d:b0:e2:ff:fb:1a:ea:
         5f:11:2e:7c:aa:b9:62:b8:9f:96:af:1c:b1:93:40:fa:7e:24:
         40:d6:bd:c6:cb:10:5b:c7:d8:b7:bc:fb:a1:96:55:53:3e:44:
         2e:8a:99:65:4a:8f:21:a0:60:8a:bb:56:eb:16:38:11:99:5c:
         6c:5d:5a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:11:28 2025 by rpki-client