Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
File:                     l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft (raw, json)
Hash identifier:          ksbzbDP9myLTynjNZllR55a5KoeLpmxlbeaC8wwEE20=
Subject key identifier:   C6:8D:AE:13:CF:E8:37:E1:3D:59:94:B9:C4:E0:AC:63:5E:08:29:EC
Authority key identifier: 97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79
Certificate issuer:       /CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
Certificate serial:       01987908A8D6B990339D4B8A4AFB7CF5350C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
Manifest number:          1410
Signing time:             Tue 05 Aug 2025 07:01:07 +0000
Manifest this update:     Tue 05 Aug 2025 07:01:07 +0000
Manifest next update:     Wed 06 Aug 2025 07:01:07 +0000
Files and hashes:         1: GYwl8BFvRYxoWPkgG0LFX5Kh3wY.roa (hash: po/DPr4lC/jP6El38brtzMkXAB3zwNPviTVID9wQBCU=)
                          2: l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl (hash: Vqv9cBCz1oo3ro+4HKDvRNisoKymHFrIYTy6mGOmch0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 07:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:08:a8:d6:b9:90:33:9d:4b:8a:4a:fb:7c:f5:35:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
        Validity
            Not Before: Aug  5 07:01:07 2025 GMT
            Not After : Aug  6 07:01:07 2025 GMT
        Subject: CN=c68dae13cfe837e13d5994b9c4e0ac635e0829ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bf:2f:78:4c:8f:97:4f:06:90:cf:a4:f5:cc:
                    46:d1:e3:c7:b7:2d:4f:33:55:35:25:92:bb:e3:34:
                    ef:e3:de:72:84:88:64:fa:40:93:f5:2f:a8:c2:9f:
                    d7:06:ac:a2:a8:97:ca:fb:19:34:76:4a:fb:11:f8:
                    ce:b6:90:22:5d:81:36:94:6b:11:8d:4e:96:0d:31:
                    47:6a:1d:f3:7a:d7:cc:3e:bb:d5:9c:7c:99:15:f4:
                    7f:84:fb:1e:da:39:6c:6f:33:65:c1:b5:e9:e5:33:
                    e3:76:b7:ab:00:84:a2:c0:d3:63:32:81:93:7f:39:
                    e4:71:d4:7c:da:d7:44:d7:3d:bb:ec:1b:e8:c8:c6:
                    33:a1:58:87:48:40:eb:82:f3:8b:3c:17:d9:46:4e:
                    b8:ef:5f:ff:34:e0:be:51:50:20:e6:fc:99:05:ec:
                    6e:e3:d4:8b:d0:23:7a:05:70:e3:55:fc:e2:63:d1:
                    40:5d:57:49:91:e7:e6:71:87:29:3c:3e:54:76:21:
                    fc:bf:63:05:dd:d9:ad:e5:45:4d:e2:5a:62:d1:29:
                    44:74:46:b4:1b:c1:43:e4:95:3d:08:8b:ec:d7:77:
                    f6:d9:14:d7:57:fa:ae:fe:79:27:ba:a5:a0:9e:82:
                    d1:22:55:ea:f3:c8:18:e4:83:61:37:11:6d:84:f4:
                    9d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8D:AE:13:CF:E8:37:E1:3D:59:94:B9:C4:E0:AC:63:5E:08:29:EC
            X509v3 Authority Key Identifier:
                keyid:97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:45:dd:f1:67:7f:39:3f:13:98:11:71:86:07:bc:3f:f3:06:
         96:6b:dd:f0:b4:27:b1:b9:59:fb:74:d0:7b:1c:f7:18:57:15:
         40:6d:a2:84:7f:26:88:32:35:09:97:fd:7f:d9:73:57:d4:c1:
         dd:ea:d1:fa:30:b1:c2:68:e9:5d:4b:d2:a5:da:aa:93:7f:e1:
         51:61:16:1f:56:3c:02:6a:f6:e7:91:41:4d:4e:0f:9d:37:1a:
         30:8c:5f:e6:d4:b2:45:fb:db:2c:4e:38:65:d1:86:1a:20:17:
         b4:52:07:48:41:bc:5a:02:93:ae:a4:15:9e:92:ec:c9:96:8d:
         0f:44:d7:38:9d:2d:9d:1e:1a:8c:06:e1:fe:7f:5b:52:e5:00:
         76:19:28:92:2c:4e:05:d0:31:92:79:d2:7b:d8:78:27:3c:d7:
         38:1b:b0:b0:0b:85:84:c1:3e:a5:61:2f:d5:30:4b:76:e6:f3:
         18:03:66:00:63:c1:57:3a:c8:2b:77:76:02:51:54:3f:4c:c4:
         9c:9e:3e:90:8d:63:af:56:c6:42:9b:92:7b:b5:99:be:98:e3:
         c5:c8:dc:2b:59:f1:b0:53:31:e9:5c:96:3a:ad:4f:07:8d:b5:
         7d:e8:a3:10:89:d9:eb:b0:37:99:4e:56:6a:62:6a:0b:cb:93:
         df:eb:05:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:13:57 2025 by rpki-client