Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
File:                     LX893KDLOOx7CMaQKeIPUtxAjxc.mft (raw, json)
Hash identifier:          UZYSJ03qbGkoeXNcZfDZG4C3RgKMX5lzPgXTHx4d7zM=
Subject key identifier:   B4:10:90:F7:C4:C4:FA:8F:68:B5:10:F9:82:A7:AE:D0:0D:78:4C:5A
Authority key identifier: 2D:7F:3D:DC:A0:CB:38:EC:7B:08:C6:90:29:E2:0F:52:DC:40:8F:17
Certificate issuer:       /CN=2d7f3ddca0cb38ec7b08c69029e20f52dc408f17
Certificate serial:       0198D5BBB8F5325B9D7F2C9605D56CE7DA01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 07:01:46 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:46 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:46 +0000
Files and hashes:         1: LX893KDLOOx7CMaQKeIPUtxAjxc.crl (hash: UfdyEAbXRWQdE0KzfnbR6LMc+9oprQur4/kbv1PvOAk=)
                          2: NJtD_wJPtwe6yI8QzJv-rd_AAv4.roa (hash: goN8mo/tdm+T4x5aP0V4Y6dre6dhF2ryG392gou/4Qo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:b8:f5:32:5b:9d:7f:2c:96:05:d5:6c:e7:da:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d7f3ddca0cb38ec7b08c69029e20f52dc408f17
        Validity
            Not Before: Aug 23 07:01:46 2025 GMT
            Not After : Aug 24 07:01:46 2025 GMT
        Subject: CN=b41090f7c4c4fa8f68b510f982a7aed00d784c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ad:be:4b:01:2b:03:25:9b:83:0a:58:13:fa:
                    6c:8d:fb:64:bb:2a:d0:24:42:f8:b1:f0:d7:67:1a:
                    2f:21:df:09:e1:4d:81:21:a6:ee:c5:54:29:bf:57:
                    74:bf:74:c2:83:04:d8:85:1f:94:30:7c:af:17:75:
                    48:bd:0e:d4:d6:c1:13:b1:d5:61:55:aa:f3:69:f1:
                    d5:57:de:81:89:fb:c1:77:ed:b6:da:ee:80:0c:3d:
                    2b:de:fc:c1:d3:6b:a7:ae:c9:a4:fe:36:3d:87:4a:
                    ea:4f:9f:81:5c:2e:c3:39:7b:62:76:a2:2b:15:f7:
                    55:de:f7:2e:6f:4e:7b:d2:df:62:f2:d1:f1:8b:7f:
                    d7:8c:7e:0f:88:0e:27:e3:15:c2:ad:5c:ae:38:00:
                    98:ec:4f:a1:54:bd:0d:62:0b:11:bf:b9:c3:74:5c:
                    fe:12:1c:d8:cc:0e:17:fe:83:8f:54:fc:ff:8e:1d:
                    06:f1:b9:63:d8:e7:af:b1:c1:fc:60:c7:0b:e3:a1:
                    20:65:f8:62:08:42:57:55:99:7d:f1:9c:16:68:1f:
                    39:61:c2:91:0c:60:03:17:86:76:76:f4:a5:b6:7b:
                    ca:c7:77:2c:63:cd:20:8d:ad:35:ff:23:3d:99:29:
                    30:6e:24:8e:e0:04:ab:2c:0c:dd:83:70:71:c8:fc:
                    2a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:10:90:F7:C4:C4:FA:8F:68:B5:10:F9:82:A7:AE:D0:0D:78:4C:5A
            X509v3 Authority Key Identifier:
                keyid:2D:7F:3D:DC:A0:CB:38:EC:7B:08:C6:90:29:E2:0F:52:DC:40:8F:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:56:a8:56:ca:70:d0:76:63:ee:e6:09:31:80:e0:af:e0:09:
         40:e5:55:1f:f8:e3:d1:d2:22:b2:75:2b:64:ca:26:df:f2:db:
         3e:01:1c:5a:4c:92:81:b7:07:b1:dd:4f:b8:7d:80:55:4b:0e:
         8b:bb:88:95:21:d8:06:b7:ad:3c:5c:b5:8d:1d:23:3e:12:e4:
         4e:8d:12:70:4f:16:d0:e2:34:83:29:35:94:19:1f:e3:fe:cc:
         96:d2:57:07:b7:da:44:28:cf:ba:fb:c9:a7:a4:1d:57:fb:db:
         24:13:3e:22:80:86:9b:c6:f5:ce:75:c4:d0:97:39:3a:b1:0b:
         ef:05:0b:06:a6:ff:40:cc:1b:9d:16:0c:91:bd:a4:f2:0c:ac:
         a4:94:42:0a:98:75:0c:7d:13:59:6d:2c:84:c2:59:4f:91:44:
         1b:c1:63:b2:b2:47:40:40:46:3f:09:01:90:2b:13:b1:90:cd:
         30:dc:13:d7:b7:65:a3:7a:f2:9b:52:cb:b1:13:3b:2d:9c:c5:
         a4:23:50:ba:36:28:85:b8:c1:d2:5a:0f:0a:c3:7f:98:ae:70:
         ce:57:b2:8f:1a:29:af:40:8b:48:52:3f:d0:33:c7:d9:76:54:
         99:6c:88:c9:d6:91:1d:fa:06:67:74:ca:97:1c:2d:7a:55:41:
         c8:aa:25:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:34 2025 by rpki-client