Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
File:                     1-LGChfQu1nwR2Pg99IixD8h_F78.mft (raw, json)
Hash identifier:          FK93Y5ckHD75NAXT4vvvLF8hCAXU4g1zs0VRcw7uCTI=
Subject key identifier:   67:E3:F4:B5:1A:85:47:E5:84:65:9D:B1:D2:6B:D0:DC:85:F4:83:2B
Authority key identifier: F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
Certificate issuer:       /CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Certificate serial:       01987D1BF881028F30FD345AD76DFD20DDB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
Manifest number:          0D04
Signing time:             Wed 06 Aug 2025 02:00:41 +0000
Manifest this update:     Wed 06 Aug 2025 02:00:41 +0000
Manifest next update:     Thu 07 Aug 2025 02:00:41 +0000
Files and hashes:         1: 1-LGChfQu1nwR2Pg99IixD8h_F78.crl (hash: +l8FUyz+EJtwwHx3NIBk32zQpOhGL9SdeuROcrEqeuc=)
                          2: 8GgRYajAB5wJTdepPxBFH5fs1YY.roa (hash: FwRicgJ95Y18KNWZKntvQQc8pJZC+p4jYsaJu9/cGKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 02:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:1b:f8:81:02:8f:30:fd:34:5a:d7:6d:fd:20:dd:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
        Validity
            Not Before: Aug  6 02:00:41 2025 GMT
            Not After : Aug  7 02:00:41 2025 GMT
        Subject: CN=67e3f4b51a8547e584659db1d26bd0dc85f4832b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e5:3b:b1:38:18:b8:6c:ac:a9:e4:17:ac:c9:
                    2c:39:ad:8c:55:62:de:f7:19:ed:d8:24:c2:68:d3:
                    8d:53:fb:9f:f1:84:23:c9:0a:be:f1:4a:2a:3a:3b:
                    26:0b:14:d4:70:6e:af:a8:41:79:da:99:87:3d:37:
                    2f:91:28:42:e3:24:ae:13:41:b5:39:a4:ec:1d:d0:
                    a2:c2:b5:cc:77:c4:93:89:96:97:ab:6f:a5:52:f8:
                    d3:ba:b3:00:45:0b:03:af:f5:21:24:07:26:e7:de:
                    a2:43:b2:27:83:a8:0f:1b:58:d9:17:fb:66:9b:48:
                    b2:2e:b9:0b:aa:8d:95:4f:69:6b:fb:da:7a:ec:ea:
                    2a:01:ca:41:bd:dd:a5:df:cf:11:8b:ae:39:fd:fe:
                    61:6d:4e:60:f5:7a:7b:d4:60:3c:f8:8d:81:65:86:
                    10:32:35:3f:5c:2e:cb:06:a6:73:fd:56:05:b3:90:
                    ce:e6:f5:00:ed:9f:e7:53:da:f3:5f:8c:48:d4:ed:
                    f4:8f:a8:16:fb:18:a1:b9:9d:45:32:41:b1:9d:24:
                    ae:17:5e:2d:65:8e:1f:3d:af:e9:b1:28:5e:c3:94:
                    7f:dc:47:fe:35:c0:20:44:0e:de:b1:3e:82:0d:39:
                    05:21:50:c0:d4:ea:07:8f:5a:b2:d2:31:55:7d:f1:
                    b5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E3:F4:B5:1A:85:47:E5:84:65:9D:B1:D2:6B:D0:DC:85:F4:83:2B
            X509v3 Authority Key Identifier:
                keyid:F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:74:82:98:82:b2:25:43:54:8b:d4:d3:0e:e3:42:53:e4:ef:
         6c:3e:92:cf:b2:83:81:b7:25:3d:73:99:3e:b8:a7:24:44:fa:
         84:71:e2:97:04:55:1a:49:c4:6d:4d:b7:e7:a1:e2:fb:0d:92:
         9a:c5:95:40:e3:1b:49:4b:0e:96:43:d4:47:6d:c0:ce:f2:18:
         a0:d7:7e:3d:07:ba:47:bb:24:b0:94:0a:4f:a1:a6:d7:9a:44:
         b9:b2:55:6b:4c:61:5b:be:0d:2b:8c:a0:f7:aa:44:76:ed:7f:
         3c:87:ab:ce:9b:c7:8a:fc:46:5c:af:47:81:78:e8:39:ab:73:
         e3:a0:e7:c5:9d:dc:5f:ce:7b:69:ad:e5:65:89:ed:cb:e5:76:
         b5:b5:2d:ff:21:54:e4:59:8d:71:45:42:62:c9:4e:aa:3c:cf:
         2a:0b:fc:10:82:59:66:ea:33:ec:01:85:6d:04:98:a0:4e:29:
         5a:7a:f8:ea:51:24:2f:9f:5e:a9:cd:ff:2b:29:db:c5:2a:2d:
         35:6e:64:06:6b:00:47:64:77:61:e5:69:b9:67:c2:16:3b:84:
         1f:5d:84:ef:ab:1d:9c:52:95:d4:ce:0b:28:0e:8e:77:26:3c:
         64:bc:ba:2d:d2:fc:59:3b:5a:95:60:91:c5:26:92:2a:06:53:
         f5:fc:1f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:13:11 2025 by rpki-client