Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
File:                     lugqtki4s_iFdWnDmvlUSt_BfAE.mft (raw, json)
Hash identifier:          CF/HSOe3A9nGQVZI3pi6krXa/tYzy0ozsJ5Pum+Y/PA=
Subject key identifier:   F6:85:4E:77:C1:D7:35:48:F6:FE:90:DB:59:EA:42:02:1A:1F:FB:54
Authority key identifier: 96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
Certificate issuer:       /CN=96e82ab648b8b3f8857569c39af9544adfc17c01
Certificate serial:       0198D54E726EC6334C860A10BB243A383C5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
Manifest number:          0D05
Signing time:             Sat 23 Aug 2025 05:02:24 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:24 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:24 +0000
Files and hashes:         1: 1-Dw1PHMy6IBe_-mHLEz4ebvy2w0.roa (hash: Ah1oxFMhZvVxbnGr/mLU8GHb80xSkSSdAwDT+auz+vQ=)
                          2: 7U5ZnSwYG1otH2rn3lTqbRVE3B0.roa (hash: VzOH1v3ihvshRqLzYlHFbA9ewMu5V3WewaJXm960cgk=)
                          3: lugqtki4s_iFdWnDmvlUSt_BfAE.crl (hash: ZTNLd4sbTmu/IQAlF0aiDCPnfHAKIfqEpJbXkSQeEZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:72:6e:c6:33:4c:86:0a:10:bb:24:3a:38:3c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96e82ab648b8b3f8857569c39af9544adfc17c01
        Validity
            Not Before: Aug 23 05:02:24 2025 GMT
            Not After : Aug 24 05:02:24 2025 GMT
        Subject: CN=f6854e77c1d73548f6fe90db59ea42021a1ffb54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:29:64:51:a6:fa:d4:73:ed:43:95:56:a9:f0:
                    a4:d7:58:24:d4:01:46:b7:cc:d1:4a:6e:8d:d6:c1:
                    32:35:d5:8b:35:40:bd:3c:45:f5:60:e7:07:1f:c8:
                    f0:aa:d3:68:8a:c6:78:2d:06:0b:4a:db:f6:d8:f2:
                    f7:73:27:3b:9e:01:18:8b:78:e6:22:3f:1d:20:ab:
                    e2:fe:65:41:1a:73:4a:6e:17:97:8c:6a:37:32:69:
                    dc:b1:a8:4c:a1:b2:7e:12:e4:69:0b:82:0a:1b:ba:
                    2f:d2:91:17:3e:1f:fe:96:3d:76:22:b0:16:1c:e8:
                    1b:c9:b4:c1:39:52:96:a5:cc:f0:78:79:72:57:4d:
                    37:1f:dd:e5:ae:d0:ea:75:7b:83:59:87:0b:bd:f7:
                    35:f7:9d:6a:42:29:fe:69:00:2c:8c:7a:51:c4:d6:
                    af:ff:85:80:57:1b:65:4b:83:d4:0f:d9:e8:dc:51:
                    73:13:2f:ae:95:93:72:89:be:b0:5f:4f:48:9e:86:
                    67:91:d7:d4:36:9f:6f:e9:bb:4c:0b:fa:79:cd:92:
                    01:c9:4c:f6:a2:24:4b:b9:89:31:34:47:21:2b:3e:
                    e6:27:b6:b7:72:4d:63:23:57:8e:ba:35:9d:4e:e6:
                    60:31:94:f9:f4:b5:d9:0e:99:08:1e:39:7f:72:d7:
                    b7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:85:4E:77:C1:D7:35:48:F6:FE:90:DB:59:EA:42:02:1A:1F:FB:54
            X509v3 Authority Key Identifier:
                keyid:96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:41:03:d0:06:7c:c9:42:12:84:23:e1:a6:62:1f:fd:1d:ec:
         88:c7:60:b6:32:1d:51:df:2a:c3:d8:c5:f7:de:67:91:30:c8:
         8f:b9:e5:69:2e:55:35:7a:5a:1a:76:1f:0d:67:07:74:b1:f1:
         06:7c:18:8c:1f:df:13:46:89:45:53:7a:d8:22:3e:07:57:11:
         6c:39:d0:17:2f:8b:69:8c:0b:13:c3:2a:6b:a2:0d:07:11:b2:
         ce:0b:38:1a:c0:32:b1:a2:59:b0:63:ce:6c:0c:07:c9:e1:f2:
         c0:dd:bd:ca:7f:32:c7:71:00:b9:4c:44:83:b5:98:b4:8e:a2:
         f5:fc:d7:77:08:cc:96:d9:99:0c:67:b9:c7:5e:3a:9c:cd:76:
         c7:21:d5:3a:5d:c0:f6:5b:42:f7:aa:5d:90:99:3a:54:c9:69:
         02:00:a1:3d:af:71:e6:7c:ff:a2:08:3b:a3:2f:2a:1f:fb:3f:
         1e:7d:0e:f5:09:c4:90:b7:e2:48:a0:f1:e8:fa:25:1e:e7:67:
         10:cf:dd:c0:8c:c2:e9:7b:e7:95:92:22:8e:0e:a0:56:52:28:
         84:09:98:7a:96:6b:0c:fa:c7:09:2d:15:71:22:34:61:54:23:
         62:d0:89:d2:e7:13:0d:76:c0:a7:74:d7:2a:b8:89:eb:be:df:
         94:ac:3a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:43 2025 by rpki-client