Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
File:                     LENEciZF2iXs47F8eoN2LtQt2lI.mft (raw, json)
Hash identifier:          YJ2ivKy6a+kqLOAHoPt8k73YXCOSGeHM2wsJM5GIa2s=
Subject key identifier:   24:7B:40:EA:23:53:47:64:FD:09:AB:EA:3A:DA:A4:54:4B:F2:EF:EF
Authority key identifier: 2C:43:44:72:26:45:DA:25:EC:E3:B1:7C:7A:83:76:2E:D4:2D:DA:52
Certificate issuer:       /CN=2c4344722645da25ece3b17c7a83762ed42dda52
Certificate serial:       0198D515F92C67F8C15A33E32493F94B75F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 04:00:43 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:43 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:43 +0000
Files and hashes:         1: DNca1fRckrUMFldSKB-cqGf1TK0.roa (hash: kIv065JqVrTE0ajJFMvarA4KoH/TSNsdKoOgfZZUL90=)
                          2: LENEciZF2iXs47F8eoN2LtQt2lI.crl (hash: 1251qi3L3MP84L1wWt8bY+sHGNXt3iTnN6/gYYUL5zA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:f9:2c:67:f8:c1:5a:33:e3:24:93:f9:4b:75:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c4344722645da25ece3b17c7a83762ed42dda52
        Validity
            Not Before: Aug 23 04:00:43 2025 GMT
            Not After : Aug 24 04:00:43 2025 GMT
        Subject: CN=247b40ea23534764fd09abea3adaa4544bf2efef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1c:d6:40:69:2e:78:6c:87:e4:2c:fb:62:31:
                    8d:f7:00:49:86:5b:4e:4b:16:69:a1:87:27:5d:78:
                    7f:be:b4:97:70:db:09:11:bf:cd:d4:81:e8:27:c5:
                    96:2b:ec:c3:b3:b2:5e:55:16:ee:8c:33:1f:8b:86:
                    bd:4e:d3:ff:f7:ac:b3:84:0a:ea:0a:dd:07:80:b2:
                    f4:7c:13:a0:21:36:7a:72:21:34:35:d3:02:87:95:
                    5d:6b:05:26:c7:2f:b2:e9:55:f2:6a:a0:bb:df:2a:
                    c6:1f:1d:44:55:0d:2d:24:dd:6c:14:56:37:5d:e0:
                    e9:e0:c9:7e:4b:a6:09:6e:d7:cd:62:18:33:42:12:
                    53:aa:8e:67:d0:25:10:01:ae:3e:d1:e3:f0:92:03:
                    ec:2b:76:0e:af:81:40:4c:e6:a8:4a:92:e1:a1:15:
                    0d:82:c6:9c:ac:12:58:61:d1:f1:95:9b:dc:61:d7:
                    9c:a0:ca:c0:c9:e4:ce:39:19:c5:06:96:83:c5:b2:
                    c9:a0:42:e6:70:40:9c:da:5b:32:d9:4d:bb:46:88:
                    44:3e:f0:a8:7e:c9:bc:96:28:ee:2c:40:a8:70:5f:
                    a0:75:b8:06:8b:36:53:bd:82:43:67:52:a9:5c:a9:
                    37:ac:e6:2e:80:0a:e9:50:4d:ef:67:b3:05:28:e6:
                    63:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7B:40:EA:23:53:47:64:FD:09:AB:EA:3A:DA:A4:54:4B:F2:EF:EF
            X509v3 Authority Key Identifier:
                keyid:2C:43:44:72:26:45:DA:25:EC:E3:B1:7C:7A:83:76:2E:D4:2D:DA:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:82:1f:c6:c5:1a:76:24:77:86:20:9f:69:ad:b2:d3:7c:44:
         dd:2f:db:47:4b:d1:62:bd:91:f3:95:be:66:59:0d:1b:c0:ea:
         16:ce:cc:b7:f7:ef:b5:b7:1a:ae:ca:76:4c:81:6f:8a:66:f7:
         be:b2:8f:32:76:0f:65:bc:e4:ea:79:c7:99:7e:1a:fb:dc:fd:
         07:bb:40:4f:34:72:e8:23:7d:4d:6d:b9:df:c9:ca:a3:ef:82:
         a9:80:d6:90:ca:96:83:16:c1:ea:48:3e:51:23:b0:7d:d3:85:
         9b:38:86:1f:c2:28:00:d3:cb:27:06:bd:32:3c:52:3f:4e:38:
         48:4f:f4:3e:7d:2b:48:17:62:86:1f:e3:63:04:b1:43:94:c2:
         46:bf:00:5e:df:6b:47:57:b7:02:af:46:e8:ff:54:81:93:17:
         4f:88:bd:21:46:04:5d:e1:ca:aa:33:fd:1e:b0:6e:ee:1f:93:
         5e:d9:72:2d:69:56:96:2b:08:1e:69:de:74:ef:cd:8e:61:b1:
         62:b7:be:a7:7f:c6:fe:49:2f:23:97:dc:87:80:4a:b5:ec:48:
         5e:07:c1:b5:23:34:1b:4b:71:99:22:c3:67:64:4a:68:05:81:
         6f:d2:71:cb:5d:11:c6:a8:da:e8:59:72:b0:8e:42:a3:38:d3:
         d0:09:a4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:17:15 2025 by rpki-client