Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
File:                     llE13UJRn92j3T_aqdszV4FfrXU.mft (raw, json)
Hash identifier:          Rpm13Ht6oqf7A6n8nUEeetcoLFL3z9jxLMx5+1TKaFY=
Subject key identifier:   C1:F0:8C:1D:42:26:F0:55:41:8D:40:2C:D0:CD:82:76:C5:E7:FD:6B
Authority key identifier: 96:51:35:DD:42:51:9F:DD:A3:DD:3F:DA:A9:DB:33:57:81:5F:AD:75
Certificate issuer:       /CN=965135dd42519fdda3dd3fdaa9db3357815fad75
Certificate serial:       019894ED737B813B773C8F7F1900CEC013E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
Manifest number:          138F
Signing time:             Sun 10 Aug 2025 17:00:46 +0000
Manifest this update:     Sun 10 Aug 2025 17:00:46 +0000
Manifest next update:     Mon 11 Aug 2025 17:00:46 +0000
Files and hashes:         1: eP_-uRGXRpi4WhMbX7jhB9aXd5g.roa (hash: Ij7xKzGQVqQU38kvjmTNToko/fNpur4SF9xRWlCB2/Q=)
                          2: llE13UJRn92j3T_aqdszV4FfrXU.crl (hash: k4Dmm4OtgQk5DTx89VC+gB+LYYBsi2cvEEXWLALXekg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:ed:73:7b:81:3b:77:3c:8f:7f:19:00:ce:c0:13:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965135dd42519fdda3dd3fdaa9db3357815fad75
        Validity
            Not Before: Aug 10 17:00:46 2025 GMT
            Not After : Aug 11 17:00:46 2025 GMT
        Subject: CN=c1f08c1d4226f055418d402cd0cd8276c5e7fd6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b0:85:7e:1f:79:b5:fa:00:b9:50:1a:97:d6:
                    1d:6d:58:22:13:8c:1d:0b:70:51:5a:b7:0e:8d:89:
                    f2:75:96:e7:f6:34:12:9d:e1:3d:28:2f:64:65:24:
                    95:48:c9:94:90:dd:ca:64:29:4c:41:0c:e7:1a:61:
                    fc:56:20:16:08:19:93:3e:ef:70:85:6d:f9:28:94:
                    68:35:fa:29:e1:61:36:93:99:c9:3e:e2:58:0a:82:
                    44:83:74:71:f1:a6:58:16:fc:3f:37:44:65:32:68:
                    3a:72:44:63:d7:52:dc:df:1e:d0:b4:e3:03:e8:09:
                    a6:08:24:4c:ea:25:90:50:2b:f8:c5:7d:71:69:dd:
                    e4:65:0b:33:e4:2b:f2:1b:0c:cd:1c:f4:4a:c1:a9:
                    87:0d:05:63:40:3a:50:17:d5:e7:40:d1:a6:d5:2f:
                    bc:cf:ad:c2:93:88:70:4b:30:04:a0:81:fd:e8:d5:
                    b7:52:38:d7:66:60:ea:1e:8a:dc:8e:a7:a5:f1:ca:
                    7d:26:04:85:c7:17:c2:bf:0b:c4:98:1b:1b:96:cb:
                    a7:cc:03:bc:bc:6e:63:43:1c:75:ba:1c:51:42:d2:
                    f4:66:ba:07:9f:98:2a:dc:2a:57:11:1e:1a:d1:86:
                    ec:97:bd:9d:3d:e8:bb:17:29:3d:1a:5d:0f:84:d2:
                    cb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F0:8C:1D:42:26:F0:55:41:8D:40:2C:D0:CD:82:76:C5:E7:FD:6B
            X509v3 Authority Key Identifier:
                keyid:96:51:35:DD:42:51:9F:DD:A3:DD:3F:DA:A9:DB:33:57:81:5F:AD:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:13:7d:4a:cb:92:9e:c4:fd:b1:f4:7c:9a:20:d0:ba:83:b3:
         62:72:52:e5:32:11:bf:8e:7b:a4:26:b9:60:99:ac:6b:d0:7b:
         96:72:04:08:76:ad:cc:44:ba:09:2e:0e:9f:5b:6d:2d:59:9d:
         65:02:17:92:45:6e:d3:9a:92:31:c8:b8:18:aa:fe:3c:92:5d:
         81:9a:c7:6e:d5:f9:a4:52:6e:bb:7c:4d:78:af:23:2f:ac:af:
         88:06:18:00:80:bf:9e:a9:dd:d6:53:49:6f:e7:f6:61:53:c5:
         85:25:e9:b8:be:99:d9:ed:03:ea:20:17:a3:ec:4d:51:99:f0:
         0a:54:a5:9c:fe:67:72:5d:bb:21:8d:27:50:57:e9:49:b3:7b:
         e4:c9:2b:e4:46:1f:d8:7b:e6:52:f1:af:2a:f2:d7:dd:dd:09:
         d4:33:02:19:8b:ef:21:8c:55:38:7e:2a:b1:f5:1b:a5:ea:3e:
         5a:bf:cb:71:6a:02:cf:08:77:2a:97:85:42:35:82:77:b4:3c:
         66:fc:2e:ca:d0:c6:25:e7:e3:18:ba:6c:ee:48:85:fc:2e:fb:
         d7:3d:3a:34:8a:32:80:50:24:f1:39:6c:6e:fd:17:d5:40:15:
         a3:63:75:48:fa:02:1f:0a:68:e6:0e:40:cd:0f:dc:fe:e5:ec:
         0d:1e:65:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:13:55 2025 by rpki-client