Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
File:                     LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft (raw, json)
Hash identifier:          91tht61yuKm/CTqHw7/8KXr/4wBT/Vg+wN6pSMBGIw0=
Subject key identifier:   C1:31:F1:B1:29:FD:72:69:85:E4:43:80:AD:51:3E:D3:A9:51:A3:F4
Authority key identifier: 2D:FA:9F:06:8E:DB:9F:C4:36:35:4D:1A:6D:9B:B4:21:BF:F6:30:D5
Certificate issuer:       /CN=2dfa9f068edb9fc436354d1a6d9bb421bff630d5
Certificate serial:       0198D5163B755E77BC5E5A3F82CCE03527C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
Manifest number:          069A
Signing time:             Sat 23 Aug 2025 04:01:00 +0000
Manifest this update:     Sat 23 Aug 2025 04:01:00 +0000
Manifest next update:     Sun 24 Aug 2025 04:01:00 +0000
Files and hashes:         1: HK2Vi8L-VSUrFJS43CFHzQJcbz8.roa (hash: E5YSpnMWbKYKY1PUN7i5gprBfIcHK0dY28fjbucPCYI=)
                          2: LfqfBo7bn8Q2NU0abZu0Ib_2MNU.crl (hash: VQJZ2KXPRIJ3yz2x0J+1A2hDi2YeJBev98GmLn+uTFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:3b:75:5e:77:bc:5e:5a:3f:82:cc:e0:35:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dfa9f068edb9fc436354d1a6d9bb421bff630d5
        Validity
            Not Before: Aug 23 04:01:00 2025 GMT
            Not After : Aug 24 04:01:00 2025 GMT
        Subject: CN=c131f1b129fd726985e44380ad513ed3a951a3f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b3:02:8e:78:9d:9e:37:a2:ef:f2:0c:d0:e2:
                    f3:fc:d1:eb:fc:f5:86:6c:cd:1e:1f:b5:1d:30:a0:
                    7d:9c:e8:38:4b:bc:dc:4f:86:19:6c:09:fb:48:c1:
                    b0:c4:65:2e:46:12:fc:ab:a8:a5:37:be:e8:36:66:
                    98:0e:8f:e2:da:0d:2a:56:0a:bc:02:0b:fb:ea:cd:
                    c2:56:c1:dd:5f:58:c8:b5:d7:ea:c7:7d:a7:38:a4:
                    7a:32:79:9b:e7:0d:7d:5a:bf:6a:dd:56:43:aa:fa:
                    6c:58:bb:03:25:2a:6f:a2:44:25:99:f3:46:46:b2:
                    76:ab:40:d5:6c:44:53:1f:98:57:83:3d:7f:f6:b4:
                    eb:67:b6:1a:9a:fa:91:2b:68:0e:0a:cb:4d:72:a3:
                    79:2a:bf:5d:72:bb:2f:cf:ed:b3:ca:52:3e:ed:38:
                    9f:28:ad:e9:26:2c:08:24:f3:46:99:82:0a:3b:5e:
                    67:ee:15:fc:d5:77:14:b7:60:8a:ed:a6:9a:d4:a8:
                    50:c6:46:f1:54:3d:37:cf:77:6e:28:a0:d6:7b:6a:
                    18:24:7c:0a:be:39:f8:10:ad:f1:03:47:46:7b:b3:
                    d0:44:db:84:92:33:68:6c:9a:ba:18:0c:0a:2a:24:
                    2b:a5:4b:cd:02:38:cb:f3:6c:f8:d7:aa:e4:61:bc:
                    dc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:31:F1:B1:29:FD:72:69:85:E4:43:80:AD:51:3E:D3:A9:51:A3:F4
            X509v3 Authority Key Identifier:
                keyid:2D:FA:9F:06:8E:DB:9F:C4:36:35:4D:1A:6D:9B:B4:21:BF:F6:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:8f:2c:c4:e6:0e:91:7f:2b:26:14:ae:f9:f3:ce:88:5d:4b:
         c5:2a:42:f0:29:8c:c4:65:7e:7d:73:5c:c9:fb:e1:4a:ed:c3:
         25:d3:e2:5e:cb:29:31:e6:f0:bb:14:1c:44:e9:ab:0b:99:6b:
         5f:16:b4:15:70:c0:03:ef:fe:fa:ff:87:a4:c8:c2:1a:85:cc:
         9d:87:51:dc:85:bf:a3:97:8a:50:89:e2:32:a3:37:71:b3:47:
         ea:c3:82:d3:a9:75:95:a4:31:79:28:21:28:bf:d9:8c:d6:54:
         fa:34:24:cf:38:03:0a:9a:e0:ee:42:47:b4:07:2e:a6:63:74:
         8c:84:fd:f9:cb:a3:16:2c:be:29:9a:48:a3:11:fd:f7:3a:76:
         d3:69:3c:bb:64:fc:83:45:28:f6:a7:a0:ae:f7:1a:4f:a2:78:
         fa:dd:6e:63:c9:68:77:8f:d8:cf:b8:93:bd:56:ae:5e:72:a4:
         dd:fd:bc:50:9e:30:69:9f:d7:7a:07:12:f0:5d:2b:2f:f5:9c:
         9e:3f:e9:7a:bd:56:3f:a9:83:37:55:ba:9a:f5:54:2d:34:b0:
         5a:3e:39:46:df:e5:57:4a:d6:10:3b:4e:fb:db:df:ba:50:63:
         2e:d3:d7:b1:e2:68:f9:ff:16:9f:3e:31:13:2b:58:61:3a:b3:
         61:c5:d7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:43 2025 by rpki-client