Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
File:                     LgojFvTptYqlLe7lx9H0uER27IY.mft (raw, json)
Hash identifier:          IFu21AttqfK0fr2XHw1iQPXoxgOZ5OpLOCypua2Xt2c=
Subject key identifier:   C1:57:57:C4:90:47:16:B0:BA:44:E7:56:71:E4:4E:31:6E:8B:65:BA
Authority key identifier: 2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86
Certificate issuer:       /CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
Certificate serial:       0198D472A2E1AC4228C0755873C45D7764E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
Manifest number:          052A
Signing time:             Sat 23 Aug 2025 01:02:19 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:19 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:19 +0000
Files and hashes:         1: LgojFvTptYqlLe7lx9H0uER27IY.crl (hash: p94D46rVYlLvyT+S0+rOP2HDOWLGcfgDGWQwT+Smbko=)
                          2: vD_wlkgUOjWQBEijGo7zeI_oZVI.roa (hash: IGyJ6LlIsYwYqLNNokHWFdPflPgBGjUNsyBItLlUI9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:a2:e1:ac:42:28:c0:75:58:73:c4:5d:77:64:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
        Validity
            Not Before: Aug 23 01:02:19 2025 GMT
            Not After : Aug 24 01:02:19 2025 GMT
        Subject: CN=c15757c4904716b0ba44e75671e44e316e8b65ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:41:ef:97:c2:6f:3d:e2:ee:e3:56:27:76:fd:
                    6a:02:4d:af:a9:7f:17:bc:da:df:54:d3:7c:a8:49:
                    fd:69:fb:47:ee:88:a8:0c:3c:01:bb:b1:3c:04:7f:
                    09:ab:10:4a:05:31:d4:a3:11:72:d8:d1:81:4b:8e:
                    2d:6e:fa:16:02:b7:2a:1d:77:a7:ec:b9:9d:c9:9e:
                    40:84:1a:44:d1:78:f9:9f:71:6a:e9:78:24:e7:f4:
                    e7:67:47:53:fa:1f:f8:d4:02:31:d9:61:81:48:24:
                    8e:ef:5f:3a:1e:12:9e:93:59:c9:77:d7:d1:a0:ef:
                    a8:d7:e9:96:a0:d2:10:af:e9:70:bc:1c:fc:d9:be:
                    f5:25:3d:82:69:3d:14:da:b2:e5:5b:64:03:34:23:
                    ca:6a:d0:62:c8:5b:51:45:f3:b4:15:38:41:d9:09:
                    43:ba:50:7b:4a:a8:33:00:07:41:c0:93:3b:8b:40:
                    0f:dc:d4:1e:15:06:24:95:9e:35:e4:6b:0a:71:e7:
                    91:25:71:85:b6:cd:9e:3c:77:94:60:fe:ac:f7:d7:
                    e3:d6:b9:d3:39:9b:73:09:25:c6:e7:70:5d:73:49:
                    06:ca:5e:e4:d0:97:7a:17:5e:f8:30:34:85:78:99:
                    4c:56:b4:c3:ba:80:73:a4:fb:22:fd:0f:53:35:fd:
                    ad:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:57:57:C4:90:47:16:B0:BA:44:E7:56:71:E4:4E:31:6E:8B:65:BA
            X509v3 Authority Key Identifier:
                keyid:2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:15:a9:f5:83:16:fe:f9:36:d5:a2:fb:16:dc:b2:94:e3:ba:
         aa:51:1a:30:be:59:9b:46:f9:e4:fa:d3:f5:9c:1f:17:bd:8b:
         24:a0:8e:f2:64:c2:ee:3b:5e:ee:bd:b6:41:f8:2d:1d:ab:9d:
         f7:ab:08:25:c6:66:be:06:d4:4c:70:5b:a7:09:57:85:d8:d4:
         b6:88:75:13:fa:4d:7a:07:0f:5f:d6:8c:77:c6:d7:8a:8a:97:
         f1:b2:0e:f9:a9:28:40:79:88:d5:c0:9b:32:d3:d3:24:79:5f:
         86:88:ed:6e:a9:88:51:79:79:5c:3c:77:8b:7c:3d:2e:6c:3f:
         1f:2f:5e:3d:d7:e3:a0:e9:67:51:51:bd:03:58:d1:1d:00:bc:
         16:02:d6:23:6f:72:44:62:4e:c4:d2:96:e5:24:72:4f:70:ef:
         0b:29:51:cf:cf:11:4f:ea:11:e3:88:ca:33:69:63:16:32:8c:
         33:68:17:86:53:44:8e:4e:cf:9d:fb:0a:97:9c:d4:2e:1c:3f:
         65:01:2d:2f:d6:e2:85:44:84:7d:d5:42:a5:f9:89:42:68:9d:
         fc:1d:7c:31:ab:43:42:9c:e0:90:13:4c:44:66:f0:a4:6c:cc:
         73:0e:8a:a5:99:1d:3b:ae:ac:01:5d:8c:f0:a6:bd:1a:c3:50:
         c3:14:80:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:46 2025 by rpki-client