Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
File:                     Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft (raw, json)
Hash identifier:          Y38y+3vyOdJpQZgMkIqjef4YCv9XJ+vLzzNES7OnT14=
Subject key identifier:   16:33:A6:10:3A:99:3A:A2:24:03:3E:1F:8A:1B:2E:E0:05:9C:39:E0
Authority key identifier: 2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
Certificate issuer:       /CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Certificate serial:       019880C1D4EC8E7E76CF2F12DAF9305BFAD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
Manifest number:          1029
Signing time:             Wed 06 Aug 2025 19:00:43 +0000
Manifest this update:     Wed 06 Aug 2025 19:00:43 +0000
Manifest next update:     Thu 07 Aug 2025 19:00:43 +0000
Files and hashes:         1: B3anwTfv9G1rVUQa6NJWLwdwXYI.roa (hash: mmLvT4hHYo/WnQMssEwo9M27udmQqtzbwXP4LSX1FYM=)
                          2: Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl (hash: kuuwfTO+fn/oBwKa8ynrfiUP4/oKUnV3z7jwDmrYgkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:c1:d4:ec:8e:7e:76:cf:2f:12:da:f9:30:5b:fa:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
        Validity
            Not Before: Aug  6 19:00:43 2025 GMT
            Not After : Aug  7 19:00:43 2025 GMT
        Subject: CN=1633a6103a993aa224033e1f8a1b2ee0059c39e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e0:7a:fb:bc:95:16:a4:4d:e1:32:d1:d1:fa:
                    28:f5:76:1a:86:c5:a0:d8:9f:6e:cc:7f:d6:04:9e:
                    ad:6c:9f:b5:b1:8c:76:bf:07:20:3e:cf:08:a5:12:
                    aa:53:ce:d1:80:b4:65:2d:62:42:f7:6c:d0:1d:a4:
                    bc:c5:f6:ce:08:db:3b:5b:37:7b:e5:50:dd:f3:82:
                    4e:7b:e0:7a:e4:70:13:b1:11:28:e0:5a:a2:28:86:
                    09:c7:7a:50:11:32:c0:a6:fe:2c:9f:62:2d:97:b9:
                    65:e1:6f:af:7b:5c:bc:96:b8:09:8a:83:95:37:fa:
                    ab:ff:13:fa:4e:e5:17:7e:23:56:89:18:d0:e5:9e:
                    db:4f:69:90:49:80:d0:86:af:c9:04:2f:33:48:d3:
                    f4:1c:dd:26:8c:25:ef:8c:c1:90:70:4e:66:65:cc:
                    c2:d3:98:d6:27:29:f4:2e:68:e5:fe:83:f4:d1:85:
                    0d:8a:60:49:4e:e5:04:1d:f2:16:95:1f:80:79:43:
                    5b:38:cb:1e:18:1e:3d:ef:32:c5:c5:fa:61:71:08:
                    e8:f6:a6:6d:52:70:f7:73:94:05:8b:a4:9f:07:ae:
                    95:1f:ba:e4:fc:09:72:15:05:b3:60:5a:55:fe:65:
                    c3:b4:10:22:76:d9:bc:f5:29:d1:70:f4:6d:eb:ce:
                    35:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:33:A6:10:3A:99:3A:A2:24:03:3E:1F:8A:1B:2E:E0:05:9C:39:E0
            X509v3 Authority Key Identifier:
                keyid:2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:1d:2b:97:d3:4a:c4:97:97:a5:d3:1d:ca:5b:57:46:77:fa:
         d8:ce:d1:4f:2e:06:3f:50:da:4b:7f:a5:ff:2e:ba:36:11:ee:
         ad:74:44:56:d1:f8:c4:58:34:ed:03:b8:ef:96:3f:25:ee:bd:
         1a:9c:32:e9:c7:15:ff:f8:c0:14:a6:f0:5d:10:c8:dd:17:e0:
         3b:3f:84:61:bc:38:23:eb:c4:5a:85:b4:ae:c8:76:b8:b8:b5:
         21:9b:22:28:77:94:85:75:81:11:b2:e7:60:fd:aa:d5:cb:0c:
         9c:e0:56:04:7c:4c:28:db:b4:9c:08:f2:a1:f0:34:d2:d2:8e:
         7e:cd:87:82:9c:b5:0b:cb:b0:e4:42:9b:02:00:30:b3:70:93:
         cd:6d:69:1f:43:08:b8:ac:7b:fe:bf:f2:1a:68:e7:10:af:36:
         91:30:f5:da:08:40:24:f6:55:5d:c8:4b:d7:07:50:3a:ae:eb:
         f4:dd:1a:4c:cd:4e:c3:32:fb:c2:ba:c8:e7:43:58:64:8a:d5:
         b0:49:cd:96:bc:63:48:4b:06:9e:51:16:24:80:d3:b5:b0:51:
         a0:fd:3f:4a:50:f1:d0:80:d7:e4:62:d5:d3:dd:4c:e5:a7:77:
         a8:50:bc:6f:cf:71:45:fa:0d:e1:24:fb:a1:0e:b6:40:be:b8:
         3b:bc:fd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:15:23 2025 by rpki-client