Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
File:                     LmvtcNteZzyB8S5zZaNsTz2ie3E.mft (raw, json)
Hash identifier:          09r0gs7T/xAqmP0DZthGL58liw4Ffx/Z1jc4vDcVkA4=
Subject key identifier:   8F:E3:58:31:04:F6:0D:67:D2:E3:43:26:2F:16:46:C1:5A:1D:99:7F
Authority key identifier: 2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71
Certificate issuer:       /CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71
Certificate serial:       019889210EAF15788F1100C120E6ABD9D20D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
Manifest number:          1135
Signing time:             Fri 08 Aug 2025 10:01:41 +0000
Manifest this update:     Fri 08 Aug 2025 10:01:41 +0000
Manifest next update:     Sat 09 Aug 2025 10:01:41 +0000
Files and hashes:         1: LmvtcNteZzyB8S5zZaNsTz2ie3E.crl (hash: voope1NSdZ3AQ+ivH4W0/piv10hA5LD9LU7vgo+JEoY=)
                          2: cLEFI3xQS9CocTbeHuHrBA7ho04.roa (hash: Oc8zbYVVumhuzpzB+yVW8PsOP/g+K8DFdyeD3cFkIFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 10:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:21:0e:af:15:78:8f:11:00:c1:20:e6:ab:d9:d2:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71
        Validity
            Not Before: Aug  8 10:01:41 2025 GMT
            Not After : Aug  9 10:01:41 2025 GMT
        Subject: CN=8fe3583104f60d67d2e343262f1646c15a1d997f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b9:3e:06:76:9d:19:18:1a:48:b0:e9:ac:14:
                    a9:11:d0:52:5f:29:0e:49:80:9f:ff:9a:6d:16:60:
                    e4:fe:56:0d:43:84:5c:86:98:dd:20:d6:70:b5:56:
                    28:d9:9c:11:c9:19:64:29:3a:ea:de:ab:68:98:80:
                    65:19:e9:32:23:78:8a:77:4a:c1:25:2b:9c:f1:99:
                    c1:0f:9a:18:dd:c7:12:f9:aa:6e:c6:8d:34:02:bd:
                    0c:83:30:fc:29:3b:af:75:2b:ce:ac:ea:89:ad:9b:
                    3e:89:28:cb:c0:dd:d0:53:aa:52:f7:88:9c:96:1e:
                    2b:52:a8:93:56:fe:24:59:86:43:53:3b:a8:fc:e3:
                    39:3a:27:c4:51:ff:a2:97:c2:9f:40:8e:b3:dd:74:
                    7c:77:b1:7b:de:77:28:07:c2:3c:bc:6d:4a:9f:d1:
                    d8:ee:89:81:46:d0:06:3d:59:42:84:ab:fe:a5:65:
                    80:23:31:f9:6a:eb:26:fd:71:41:02:63:42:dc:28:
                    68:f6:06:0e:fe:31:4e:69:85:dc:12:0e:eb:0c:51:
                    e0:86:a0:34:b0:9f:33:27:b9:7d:f1:1c:37:e4:bc:
                    8e:d8:f8:d5:ee:a2:bf:03:8a:a6:b6:6b:eb:8f:5a:
                    8e:64:bf:bb:75:be:43:63:2d:76:ff:22:22:e0:c5:
                    da:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E3:58:31:04:F6:0D:67:D2:E3:43:26:2F:16:46:C1:5A:1D:99:7F
            X509v3 Authority Key Identifier:
                keyid:2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:a6:47:8d:da:5d:30:fe:eb:00:40:3e:bb:8f:6a:33:f0:f0:
         c0:79:e6:58:97:ac:e6:3b:2b:d1:77:0e:b1:c4:3f:47:74:19:
         7a:86:92:a3:a4:ba:e0:38:0b:ba:ae:97:e2:0b:6f:9f:78:9f:
         64:e5:d4:26:8f:8f:5c:5f:e7:94:92:ff:50:84:9b:1e:18:02:
         d0:92:91:46:88:df:29:33:34:bc:87:d9:1b:12:9e:59:e5:31:
         76:22:ce:c6:1e:7e:7a:b3:fa:5b:81:21:6c:c9:35:a0:91:dc:
         5d:9c:63:7c:75:d2:47:3a:be:df:3d:93:8d:a9:6e:7c:5c:7b:
         17:c9:8b:d2:20:77:a5:73:4c:92:e3:51:01:22:bd:26:06:3c:
         4f:fd:d7:33:ec:08:b3:3e:b0:37:f2:ae:c7:97:bd:83:8c:ff:
         4f:39:38:95:4e:eb:98:05:5e:fb:90:dc:cd:33:ca:cf:33:20:
         61:c9:b2:09:5b:de:eb:6a:e1:01:93:13:f8:dc:da:0a:5d:da:
         07:5a:fe:bf:ce:de:d7:ee:bc:57:0c:e9:f9:ef:39:d5:6e:2c:
         c3:b5:df:86:4f:8d:65:84:79:12:a6:eb:5d:4d:14:ff:df:01:
         e8:57:a9:9f:7b:b0:39:28:ad:88:3f:72:a4:9e:6c:2d:45:18:
         18:d8:c6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:54:24 2025 by rpki-client