Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
File:                     LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft (raw, json)
Hash identifier:          qVd0XoVXJuiMTreQ7Hcu34l2UrUKdqK+Ort8fijJfHQ=
Subject key identifier:   44:AE:74:2A:11:E4:44:B4:1E:0E:2C:DC:62:7E:EB:07:9C:88:A3:9C
Authority key identifier: 2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF
Certificate issuer:       /CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
Certificate serial:       0198D5BBD65CE1FA1785EB98DAE99ABC48CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 07:01:53 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:53 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:53 +0000
Files and hashes:         1: 1-rQwqNKly6aenIYeWSDOecvE9Dg.roa (hash: xyKaPv0UlzvDAkK4ZPQkPqyXzd2d32Ec3cQVPGFT2Lk=)
                          2: 53x_LlMR9wDfhoH_h-dm_2o9cfc.roa (hash: hpGqRuP4r/d0ndxhvimQvb9wKXUShtDAOOkpu0Or3Uk=)
                          3: LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl (hash: kY45b0fbqgygbkKqtx2VeAJMPDfUlXeldFsV2u9GxTQ=)
                          4: sCdHa8GDoglI_mdXJ5Cs8c0F3ts.roa (hash: MzLxzWRZS24YmZa+mNMBCsFOGmjiB2b/WusU+bbqWL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:d6:5c:e1:fa:17:85:eb:98:da:e9:9a:bc:48:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
        Validity
            Not Before: Aug 23 07:01:53 2025 GMT
            Not After : Aug 24 07:01:53 2025 GMT
        Subject: CN=44ae742a11e444b41e0e2cdc627eeb079c88a39c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:03:02:cf:da:47:3d:ea:10:0b:f2:b1:a6:17:
                    4d:a5:96:1b:c1:cb:08:cf:56:20:ed:3b:32:50:79:
                    bb:d4:aa:31:84:45:b8:ea:7e:35:8e:0e:9d:d6:e0:
                    e1:78:46:8a:45:98:f2:63:17:48:e6:59:79:b3:f3:
                    9b:bc:4a:d6:07:0b:5a:3e:32:71:1f:ca:af:95:8b:
                    6c:09:88:71:50:5f:2c:72:be:a0:46:f5:4f:03:dd:
                    4b:c3:a1:a4:73:e6:92:80:1a:bc:9b:ae:77:a4:a7:
                    f3:06:e3:33:5e:80:9b:cf:00:6c:54:9d:2e:23:67:
                    d7:38:3e:e2:f1:29:13:76:93:a2:6b:9b:ef:23:a2:
                    be:59:29:bb:52:88:e2:17:4c:5c:4e:be:e0:68:89:
                    02:9f:82:81:c7:21:68:62:39:d8:34:5c:32:cd:9d:
                    ad:7f:2e:c1:fa:46:e2:fe:31:91:89:11:11:72:9e:
                    b9:6b:55:1a:dd:6a:0b:30:0d:21:ef:43:81:63:08:
                    6a:dc:2b:19:17:fe:86:88:a1:38:32:55:15:69:99:
                    8c:69:4e:83:b4:1a:56:d3:67:37:2f:8b:8b:a1:61:
                    bb:c9:d5:e1:ed:d9:b2:a2:1e:e9:1d:85:8b:7e:e2:
                    4b:3f:92:96:92:cc:a9:60:5b:7f:2c:6d:94:af:bb:
                    5c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AE:74:2A:11:E4:44:B4:1E:0E:2C:DC:62:7E:EB:07:9C:88:A3:9C
            X509v3 Authority Key Identifier:
                keyid:2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:a8:df:78:f8:3a:3d:b1:19:e6:29:1f:64:de:25:39:b5:e2:
         77:b2:6d:69:2d:5a:24:d9:ad:b6:34:f8:30:77:44:29:3f:e1:
         68:3b:cf:03:40:3e:c7:56:ca:9a:10:58:75:8a:92:18:b1:b8:
         30:10:e6:ef:4d:d2:d4:15:57:c0:b4:81:70:73:15:51:06:dd:
         44:95:6a:a4:29:25:81:77:ed:0b:5c:c5:f5:95:51:b3:23:91:
         f0:6a:a5:16:a9:7c:51:75:75:4f:3e:b4:c8:91:86:c0:72:e4:
         0c:d1:2f:55:ad:b2:ad:e7:9b:d2:9c:ca:36:36:22:68:1b:1a:
         4f:4e:63:fd:bc:b3:ad:35:c9:5e:f2:21:62:98:bb:4d:df:1e:
         cb:9e:73:af:30:36:47:68:41:80:c4:90:eb:07:9b:18:51:a7:
         5d:40:ec:ef:8b:b9:c5:d5:9c:02:2a:9e:01:04:b9:c8:03:6f:
         b5:fb:1a:4d:25:63:48:56:89:87:4a:5b:fa:f6:72:46:1e:23:
         c9:56:91:fd:69:2f:d8:3f:20:ab:a6:5e:2e:7f:7a:62:cb:4a:
         09:28:a7:bf:30:df:ca:01:a4:cf:ac:1c:07:c1:1d:95:28:99:
         05:11:24:84:ab:e5:a2:9e:e0:3f:d0:21:a1:c9:cb:d0:b7:48:
         41:2e:8a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:08 2025 by rpki-client