Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
File:                     lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft (raw, json)
Hash identifier:          9wGlHg+J7ZUz31VJYiYMTahNnkcd73AZlsDhWQTYHOg=
Subject key identifier:   AE:12:A2:20:34:98:37:C6:BF:E3:6E:79:FF:ED:70:12:4F:30:3D:7D
Authority key identifier: 95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
Certificate issuer:       /CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
Certificate serial:       0198D4E059B15D16C6D9F827683F26344739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 03:02:09 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:09 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:09 +0000
Files and hashes:         1: 7akWYjQwsX6a6HhUzkzvmpveN9o.roa (hash: NaXDBHO9cOnr/DrruhF4XLx1P8skQ7ZIYlWJ7+sC7iA=)
                          2: lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl (hash: L6wNuTr9SARQL826ECLDvEH9LgOe7MpXzkaZq3n+TCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:59:b1:5d:16:c6:d9:f8:27:68:3f:26:34:47:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
        Validity
            Not Before: Aug 23 03:02:09 2025 GMT
            Not After : Aug 24 03:02:09 2025 GMT
        Subject: CN=ae12a220349837c6bfe36e79ffed70124f303d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d7:0a:ae:52:b0:2a:35:43:5e:cd:a5:4c:1a:
                    ad:7b:ed:97:2c:0a:6b:d7:8b:7d:95:d9:0a:37:18:
                    60:5b:52:db:56:c5:df:0e:32:f4:da:b0:de:9b:6a:
                    83:6f:55:4d:48:c8:98:9e:f9:32:b3:3d:86:0d:3b:
                    62:dc:ff:80:e3:32:21:87:aa:4b:b0:5c:3e:12:a9:
                    25:18:c6:20:eb:89:c6:40:d7:db:29:5d:e8:15:68:
                    26:4c:18:c2:8f:94:b4:d7:8c:df:9f:95:dc:0a:c7:
                    6e:9f:20:12:4b:88:79:56:81:cb:c2:25:8b:64:15:
                    e0:6f:4b:3b:96:bb:47:8b:57:49:df:88:4b:ee:7b:
                    e7:dd:6a:d3:bf:19:de:1b:2f:25:77:5d:b3:37:61:
                    1b:f4:a9:d2:b7:49:e4:6e:24:67:1d:4e:c8:72:80:
                    39:4f:3c:f8:91:cc:b2:a0:59:53:19:45:18:a7:c4:
                    78:e8:6e:60:8e:57:c8:3a:e9:9a:bc:40:e0:b3:84:
                    41:cd:5f:23:2d:67:28:51:dc:53:6f:56:cb:f4:f4:
                    3f:9b:a5:af:a9:a1:b7:e0:90:4f:14:f7:c7:59:e8:
                    39:27:35:1a:bb:32:43:37:6b:6d:8c:b2:8a:33:1e:
                    bf:95:20:d7:f3:bf:77:98:d6:6c:1a:b6:85:51:ac:
                    4a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:12:A2:20:34:98:37:C6:BF:E3:6E:79:FF:ED:70:12:4F:30:3D:7D
            X509v3 Authority Key Identifier:
                keyid:95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:95:ee:c6:e0:44:94:0a:5e:53:85:87:1f:08:e0:e6:20:fa:
         b3:a9:f0:74:0a:19:21:99:b7:d0:68:01:c6:1f:0e:4d:15:12:
         1c:83:a2:b8:80:06:8c:9f:a4:43:4f:01:87:ec:3c:10:5f:cc:
         6e:09:10:06:6a:ed:c2:7a:aa:e8:83:11:1b:db:24:d6:1e:04:
         86:a2:dc:b7:8c:5b:bb:ab:86:64:21:ff:9d:f2:51:75:84:ff:
         10:e6:7a:e3:2f:1d:81:50:54:c0:17:b5:5a:6a:76:e3:08:6c:
         ee:02:6b:81:82:58:19:28:bc:f0:8c:36:0f:25:7c:69:71:61:
         e1:64:89:77:9f:cc:fb:1b:80:90:61:a4:79:f9:28:b0:a1:8a:
         a0:5d:f3:9c:6f:d4:70:01:c2:45:c8:ea:10:40:d6:d3:70:f1:
         15:da:0a:0c:05:9e:0a:32:60:d2:70:7b:5a:d8:eb:21:d6:cf:
         ac:11:44:82:c5:2b:ab:66:f1:17:29:8b:08:5b:5f:ce:22:79:
         a9:38:44:4a:d0:d9:41:9b:6e:f1:d5:45:28:4b:2e:33:b1:8d:
         ae:00:24:d3:01:cd:da:f8:ca:58:6c:a2:77:10:b0:77:0f:67:
         ea:5d:95:32:64:52:9d:cf:80:47:ba:cf:82:98:05:88:47:63:
         ee:24:48:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4FmxXRbG2fgnaD8mNEc5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YjgxZjRlNDVkNzExZGEwYzE0OGRjMmJhYWQxNTA0ZGRi
YjQyN2IwHhcNMjUwODIzMDMwMjA5WhcNMjUwODI0MDMwMjA5WjAzMTEwLwYDVQQD
EyhhZTEyYTIyMDM0OTgzN2M2YmZlMzZlNzlmZmVkNzAxMjRmMzAzZDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtcKrlKwKjVDXs2lTBqte+2XLApr
14t9ldkKNxhgW1LbVsXfDjL02rDem2qDb1VNSMiYnvkysz2GDTti3P+A4zIhh6pL
sFw+EqklGMYg64nGQNfbKV3oFWgmTBjCj5S014zfn5XcCsdunyASS4h5VoHLwiWL
ZBXgb0s7lrtHi1dJ34hL7nvn3WrTvxneGy8ld12zN2Eb9KnSt0nkbiRnHU7IcoA5
Tzz4kcyyoFlTGUUYp8R46G5gjlfIOumavEDgs4RBzV8jLWcoUdxTb1bL9PQ/m6Wv
qaG34JBPFPfHWeg5JzUauzJDN2ttjLKKMx6/lSDX8793mNZsGraFUaxKywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4SoiA0mDfGv+Nuef/tcBJPMD19MB8GA1UdIwQY
MBaAFJW4H05F1xHaDBSNwrqtFQTdu0J7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJnZlRrWFhFZG9NRkkzQ3VxMFZCTjI3UW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wYWFiNzgtNjZkZS00NDRjLWE4NDMt
MGIzY2I0YzZiNzlhLzEvbGJnZlRrWFhFZG9NRkkzQ3VxMFZCTjI3UW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8wYWFiNzgtNjZkZS00NDRjLWE4NDMtMGIzY2I0YzZiNzlh
LzEvbGJnZlRrWFhFZG9NRkkzQ3VxMFZCTjI3UW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmpXuxuBE
lApeU4WHHwjg5iD6s6nwdAoZIZm30GgBxh8OTRUSHIOiuIAGjJ+kQ08Bh+w8EF/M
bgkQBmrtwnqq6IMRG9sk1h4EhqLct4xbu6uGZCH/nfJRdYT/EOZ64y8dgVBUwBe1
Wmp24whs7gJrgYJYGSi88Iw2DyV8aXFh4WSJd5/M+xuAkGGkefkosKGKoF3znG/U
cAHCRcjqEEDW03DxFdoKDAWeCjJg0nB7WtjrIdbPrBFEgsUrq2bxFymLCFtfziJ5
qThEStDZQZtu8dVFKEsuM7GNrgAk0wHN2vjKWGyidxCwdw9n6l2VMmRSnc+AR7rP
gpgFiEdj7iRIzA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:19 2025 by rpki-client