Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
File:                     _lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft (raw, json)
Hash identifier:          zGZxIeZhbOroQWqvv2kIbcKoAwG5gZkGRMeQcCAEr50=
Subject key identifier:   DC:41:FE:EE:2F:BE:D1:FC:6F:AD:8A:4D:1B:75:C6:6A:B5:9A:F5:1E
Authority key identifier: FE:54:DC:FF:A2:06:F4:10:08:20:6B:51:F0:EF:19:C9:C5:80:DD:28
Certificate issuer:       /CN=fe54dcffa206f41008206b51f0ef19c9c580dd28
Certificate serial:       01988168D0E746F309C87CA4F0BCA94C81A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
Manifest number:          133B
Signing time:             Wed 06 Aug 2025 22:03:06 +0000
Manifest this update:     Wed 06 Aug 2025 22:03:06 +0000
Manifest next update:     Thu 07 Aug 2025 22:03:06 +0000
Files and hashes:         1: _lTc_6IG9BAIIGtR8O8ZycWA3Sg.crl (hash: FlgImH6VgFXJssexKz3dAlBQYQDDC/4OU7DIRDKL9tE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:68:d0:e7:46:f3:09:c8:7c:a4:f0:bc:a9:4c:81:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe54dcffa206f41008206b51f0ef19c9c580dd28
        Validity
            Not Before: Aug  6 22:03:06 2025 GMT
            Not After : Aug  7 22:03:06 2025 GMT
        Subject: CN=dc41feee2fbed1fc6fad8a4d1b75c66ab59af51e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3a:e5:f7:34:26:76:19:29:71:77:a7:16:7a:
                    18:33:1c:a0:f0:84:35:72:c7:58:ff:9e:98:4e:31:
                    5d:1a:27:b9:6c:93:eb:e9:20:a7:c8:12:ea:7a:b7:
                    6c:92:8a:ca:11:7a:bf:ba:f0:c5:0f:04:21:eb:54:
                    7c:c4:45:be:94:d6:30:c1:17:dc:98:f2:58:6c:5a:
                    2d:be:44:a6:3b:32:20:83:f9:04:57:f1:ae:b2:91:
                    52:9c:fe:5f:16:27:48:15:66:6f:49:c9:1b:2f:c2:
                    a3:1f:d2:b3:40:b9:0a:27:05:a0:a5:02:bd:7d:75:
                    1f:00:80:b5:43:ef:48:33:87:a4:a7:84:e7:c6:c9:
                    bb:3f:fa:79:ce:6a:76:40:c9:06:35:d2:b0:53:cf:
                    89:41:0c:bd:97:f7:1a:b4:1a:70:6e:40:f9:67:01:
                    d5:e5:18:ef:55:0c:28:6a:a2:f1:43:db:b8:d8:96:
                    1e:2d:b1:c7:d7:e5:52:f1:f1:15:18:4b:a0:ba:00:
                    99:8f:25:77:c2:02:97:ec:4e:03:f0:94:57:0e:8c:
                    6b:21:87:5d:32:34:10:19:7d:92:4d:e1:26:4f:b1:
                    c0:b9:d9:38:75:7f:41:ca:d4:e8:00:30:28:9a:d7:
                    50:42:52:55:d9:33:32:1b:df:ee:01:08:78:c4:72:
                    ab:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:41:FE:EE:2F:BE:D1:FC:6F:AD:8A:4D:1B:75:C6:6A:B5:9A:F5:1E
            X509v3 Authority Key Identifier:
                keyid:FE:54:DC:FF:A2:06:F4:10:08:20:6B:51:F0:EF:19:C9:C5:80:DD:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:25:71:6d:b9:c4:d5:e5:f3:b0:72:a7:9b:4c:3a:17:df:47:
         63:d6:d8:33:50:73:0c:51:49:27:87:1b:68:5c:2b:b7:61:b4:
         24:08:a8:80:e4:aa:50:6e:8e:f3:e5:df:ef:83:cc:84:97:84:
         65:99:81:0b:4f:97:c4:2d:77:91:92:54:80:90:8d:fc:62:42:
         d3:c1:27:8a:26:87:01:0a:6c:79:12:aa:d9:e2:38:68:66:bc:
         b0:d1:8f:81:cf:5c:e8:56:54:03:8a:b6:b5:2c:ad:f5:b4:b2:
         72:42:9c:29:94:fa:4a:8e:60:7f:64:1e:47:9e:c2:79:9f:b6:
         08:66:c6:93:0f:18:62:59:47:d8:39:17:0e:5a:f3:ed:11:e8:
         2d:97:f4:11:13:ff:ae:6c:ad:e4:7a:cf:3b:44:c9:e5:20:07:
         3d:ed:95:43:92:ae:fb:0d:18:69:11:f5:b0:a1:c9:e1:9c:d6:
         20:3d:a5:5a:81:69:e5:2f:d5:51:5a:ef:4a:6d:48:fc:37:34:
         78:11:75:51:aa:67:0b:b9:61:f9:a7:b2:90:6c:4e:84:45:73:
         cf:0f:ad:dc:81:f7:d8:61:ec:ba:48:80:51:12:d4:30:7c:36:
         a1:40:2a:4c:9a:3d:c2:78:5f:b6:6a:48:7d:1b:29:0e:a2:55:
         14:37:d2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:04 2025 by rpki-client