Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
File:                     LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft (raw, json)
Hash identifier:          pDCMRSU5pKCHQN2ih8/IQyv2tdLMCScg2Q1qYP0Uz34=
Subject key identifier:   29:DE:82:8B:42:E3:8D:77:1B:DF:41:DA:DF:03:1D:4A:B9:34:F6:CB
Authority key identifier: 2E:18:10:D5:C9:11:B4:A8:10:73:FA:E6:38:97:1B:57:7D:D7:A6:42
Certificate issuer:       /CN=2e1810d5c911b4a81073fae638971b577dd7a642
Certificate serial:       0199FBEAE6598EA78C6E1785DB068C26C210
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
Manifest number:          11AE
Signing time:             Sun 19 Oct 2025 10:01:39 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:39 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:39 +0000
Files and hashes:         1: LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl (hash: A6xaadgMsX+xXWYRBbXGwK/7J3u4BxJXZqkV2VE3dgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:e6:59:8e:a7:8c:6e:17:85:db:06:8c:26:c2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e1810d5c911b4a81073fae638971b577dd7a642
        Validity
            Not Before: Oct 19 10:01:39 2025 GMT
            Not After : Oct 20 10:01:39 2025 GMT
        Subject: CN=29de828b42e38d771bdf41dadf031d4ab934f6cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6a:b1:ed:42:07:44:1e:03:01:26:82:78:6f:
                    24:11:f2:1b:00:2b:f5:53:1b:bf:3f:07:89:f8:70:
                    91:dc:86:79:fa:64:ac:e4:05:a7:09:41:45:fa:c1:
                    3f:24:70:fa:c5:e4:3d:6d:fa:07:7f:e0:78:d4:3c:
                    e6:ca:e8:27:89:d3:80:1c:79:74:20:63:a1:8f:89:
                    89:16:ec:a1:d4:ad:bd:37:a3:9a:b6:71:bd:a0:1a:
                    55:3b:e7:50:ca:6a:b9:a2:4c:85:7f:74:d9:34:54:
                    d5:67:13:57:53:ee:88:e0:22:d0:22:87:a5:75:20:
                    d6:9e:4e:07:6c:7f:3e:fe:db:8e:09:54:09:6e:55:
                    1a:17:df:11:d6:98:61:8c:75:82:ac:b7:b7:9e:0b:
                    9c:ef:e8:95:16:ec:5e:95:18:e6:56:e3:ab:db:5f:
                    dd:27:fc:25:52:fe:c6:f0:de:f5:6f:66:14:cb:fb:
                    d6:dd:b4:12:42:d0:61:95:7b:d3:ca:05:1c:d6:8e:
                    a0:fa:38:97:96:8e:94:0a:93:7e:47:4e:6c:88:46:
                    d7:56:10:60:46:a7:2e:3c:d3:30:d6:af:04:24:13:
                    bf:5e:7a:8f:62:b9:4b:6b:b0:f9:80:31:43:30:33:
                    90:2e:24:6c:88:e8:ea:d4:ed:7e:0f:4e:0b:9e:01:
                    d3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DE:82:8B:42:E3:8D:77:1B:DF:41:DA:DF:03:1D:4A:B9:34:F6:CB
            X509v3 Authority Key Identifier:
                keyid:2E:18:10:D5:C9:11:B4:A8:10:73:FA:E6:38:97:1B:57:7D:D7:A6:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:60:d3:a5:ef:b9:15:82:e8:06:50:25:6f:66:9b:da:8b:16:
         1e:f2:6f:f9:41:54:aa:29:66:f3:4b:4a:b2:ed:cb:94:ed:b8:
         0a:ac:bd:7c:9e:13:dc:d3:a9:30:d1:94:4c:30:98:52:95:ba:
         71:76:85:cd:00:a8:48:6f:6a:f8:da:74:02:83:70:c4:ec:52:
         a9:bb:fd:c1:9e:dc:df:37:63:5d:a9:b5:aa:f1:c6:0b:cc:4b:
         ae:99:4d:f6:e8:0f:be:72:f8:6e:42:9e:15:9b:4b:e4:25:09:
         a6:94:62:8c:fb:4a:6b:a5:d4:d8:6c:f6:1d:b4:84:ac:e8:7e:
         9d:9f:94:c5:8b:a2:a5:41:2a:6a:f8:4c:e5:12:c5:54:2b:09:
         f9:9a:10:93:a8:08:71:a7:13:b6:d4:5b:35:82:71:2a:16:75:
         75:20:a0:11:c4:87:c3:d0:ab:6d:bd:64:c4:0c:e1:06:13:76:
         20:dc:c9:19:38:35:47:f1:d8:e8:a7:4b:f5:2c:29:de:ab:84:
         08:cd:fc:7a:b9:e7:65:db:35:6f:da:17:24:f3:42:bf:b9:9f:
         78:83:06:8a:32:da:82:f0:e0:e6:2a:eb:1d:04:f8:60:d5:9d:
         b8:20:24:0c:24:50:05:5b:f4:58:fe:c8:a2:e2:d8:a3:95:cc:
         ca:4b:a0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:35 2025 by rpki-client