Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File:                     RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier:          qYt7bNoCFLNlvT3peY8hYBrQBcib/NZ66xECr4NkXDU=
Subject key identifier:   6A:3D:34:0D:3B:8A:86:9D:52:74:92:DE:6C:5F:79:0A:A8:61:8E:16
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer:       /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial:       01987B9C387803A94E430F1F021C86D0B284
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number:          1618
Signing time:             Tue 05 Aug 2025 19:01:32 +0000
Manifest this update:     Tue 05 Aug 2025 19:01:32 +0000
Manifest next update:     Wed 06 Aug 2025 19:01:32 +0000
Files and hashes:         1: L0dTKkQLJ3uzLHQGVfykgpUct-Y.roa (hash: 5V6u+yE0dUBJcNB/BjBYWG3G1jW8CFnCJRPOVXm/+Pc=)
                          2: MQbRmyMiZ7drfjUV2srkSRdezP4.roa (hash: gjEdlX/wGs/3ibPMlMpi8lsSgsJHw2rwLC0B8NaMJ5Y=)
                          3: QZzbQhQ_hTZIcpg_dJkoU6Xnnto.roa (hash: ldOsJ7e5BAcbKryAIK3bxjb3zV/1t/RqgjAXr4tG6fc=)
                          4: RkiK4rh0-E_-W_HqKwRMEYj0Jsc.roa (hash: gqhP/twOb4neptA72hsuXyc44XyhAEB7mRcgXtdjn0o=)
                          5: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: TpcrmuFnHz1tYpBoYX3jfFjXgoHHL7Pb+TtMLcsKr0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9c:38:78:03:a9:4e:43:0f:1f:02:1c:86:d0:b2:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
        Validity
            Not Before: Aug  5 19:01:32 2025 GMT
            Not After : Aug  6 19:01:32 2025 GMT
        Subject: CN=6a3d340d3b8a869d527492de6c5f790aa8618e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:54:52:a9:1d:15:e7:0c:e9:bb:bd:4b:53:ff:
                    ef:df:8c:b0:77:72:88:1f:3a:92:72:6b:a8:5b:f0:
                    42:5e:68:41:c5:99:e9:d1:34:81:6d:f3:e6:d3:87:
                    80:0b:fc:37:7b:5a:b7:54:06:e0:65:68:02:67:82:
                    81:8a:7e:fe:58:b6:78:82:ba:65:f3:ff:ba:72:20:
                    d1:10:c4:39:6a:3a:35:6f:77:b2:20:98:ea:37:25:
                    f2:74:77:35:c8:1a:61:6a:9f:45:76:f5:02:47:3b:
                    88:6d:4f:0e:d7:7a:45:ab:dd:f2:60:65:19:ad:8f:
                    29:2e:40:fb:9d:41:8a:f2:cc:37:69:95:ab:0f:01:
                    46:88:eb:a8:2b:33:d1:c4:f5:81:bc:1f:bc:76:b3:
                    eb:f4:b9:94:59:ef:5f:18:f5:63:53:bf:d7:b2:c7:
                    4d:09:bf:91:6b:a0:97:0b:d6:ac:0e:0c:20:17:9e:
                    0f:ee:72:fb:8f:97:4f:d9:5d:e3:33:65:6d:a4:ec:
                    f6:26:46:8a:ac:ef:14:e3:f4:37:80:cc:e8:d4:86:
                    f3:2e:29:22:09:c8:91:62:e8:1f:12:86:80:a7:c4:
                    bc:67:a1:e9:e0:61:f3:28:7f:87:29:89:ee:2a:5b:
                    64:98:54:2d:3d:83:ac:e0:10:cc:21:8e:18:9e:43:
                    f2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3D:34:0D:3B:8A:86:9D:52:74:92:DE:6C:5F:79:0A:A8:61:8E:16
            X509v3 Authority Key Identifier:
                keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:96:ae:11:ae:e5:a3:43:f4:15:e2:22:8c:0c:bb:3a:84:ce:
         87:cd:5a:de:11:a8:18:74:2f:43:32:29:fa:9f:85:99:b4:63:
         8e:f1:f4:46:bc:07:15:05:51:ac:b8:41:64:36:39:e0:27:b7:
         bc:25:fb:b0:a4:60:f2:e9:c9:0d:9e:0b:c4:f5:c1:ec:6a:1b:
         5b:a2:38:f6:ab:d8:e7:31:8c:d0:58:04:e4:46:ee:68:25:f3:
         e5:25:9d:81:11:27:0a:5d:52:b4:7b:77:69:5e:1f:da:a8:64:
         91:f0:19:5b:97:72:bf:e5:6e:b1:2f:be:b2:5a:80:44:24:55:
         60:71:f2:e3:6a:99:cc:7f:4d:ea:fe:7b:68:65:ea:71:48:89:
         35:1c:c1:91:63:b5:b5:b4:40:ef:47:05:19:21:96:80:25:88:
         44:10:2e:bb:17:84:20:1e:c5:3e:a8:05:a3:2e:02:84:23:8e:
         87:d0:2d:cc:d0:1e:97:07:6d:68:94:9a:5a:d3:3a:4d:f3:01:
         6b:76:52:38:df:d2:27:3e:1b:fa:73:b9:e6:f4:00:0c:e3:cd:
         19:fd:40:c6:91:d9:e9:f4:38:3f:dc:e5:b7:73:32:9e:f2:73:
         54:f9:35:aa:b7:76:5a:be:0d:9b:d8:6b:85:51:ce:03:dd:7c:
         23:c8:42:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:48:30 2025 by rpki-client