Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
File:                     LNpfA-r1E6d_LsIN5bsWcsXSeas.mft (raw, json)
Hash identifier:          8LAPk5Jg1wsZX/JaCeRoa19Az/f6Gc5YhBTAusTUoSI=
Subject key identifier:   38:BB:71:8D:C2:AA:5D:4C:3D:8B:C3:0E:7C:1D:54:86:FE:FE:DF:F3
Authority key identifier: 2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
Certificate issuer:       /CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Certificate serial:       019872CFCB20A2560F9D14B5BB9E6AAB82C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
Manifest number:          1616
Signing time:             Mon 04 Aug 2025 02:01:17 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:17 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:17 +0000
Files and hashes:         1: I_El3VD2zizuoyNdnUn9kOdcLek.roa (hash: 74aqpCJ0dpEabBMkIS/h3jijqMv/0y3rfXL3oZ/vRAo=)
                          2: LNpfA-r1E6d_LsIN5bsWcsXSeas.crl (hash: gIERdiK6u+xscjKgdw+3U9LqC7cFdCsGHfq7O7MJ7c8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:cb:20:a2:56:0f:9d:14:b5:bb:9e:6a:ab:82:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
        Validity
            Not Before: Aug  4 02:01:17 2025 GMT
            Not After : Aug  5 02:01:17 2025 GMT
        Subject: CN=38bb718dc2aa5d4c3d8bc30e7c1d5486fefedff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2a:65:0a:9b:dd:75:49:40:84:27:44:8f:49:
                    92:3a:65:07:66:d1:5b:bd:20:18:36:de:ac:8d:44:
                    7d:86:97:fb:d6:40:a4:25:2a:75:bd:26:53:c5:f0:
                    2b:93:5e:36:45:a5:5e:97:fc:57:bf:99:34:0a:26:
                    bd:c7:16:dd:26:5c:f5:3b:5b:73:9e:6d:10:fa:b1:
                    47:23:7f:e5:53:4d:cb:9a:77:8a:2b:fc:2c:1b:31:
                    a2:66:bc:ab:be:87:be:4e:0c:63:24:99:d2:f7:56:
                    4c:d7:c3:d9:98:19:57:6a:3d:a0:d2:51:75:d0:96:
                    54:e0:66:d9:c9:e6:66:a5:fe:f8:2f:cd:ec:97:66:
                    fb:c2:ee:7e:36:cc:e5:08:60:a3:0d:7a:ea:d0:e1:
                    6a:5e:c6:28:f7:fd:45:5b:0e:23:1b:47:cb:fb:6d:
                    b8:c8:d3:e5:c7:a4:5f:f4:23:5a:02:0b:a5:f6:32:
                    e2:78:d8:bd:84:1a:35:24:7c:ca:7a:c5:21:c6:da:
                    f2:1e:a2:f1:9a:45:39:f2:bb:61:67:e2:10:14:0d:
                    30:2d:a2:6a:06:b0:90:09:04:e2:6b:1c:f7:5a:4d:
                    95:f7:4b:9d:ac:5a:0b:cc:c6:37:4a:0e:ad:07:9a:
                    28:7b:c9:21:5c:19:44:03:b5:b0:42:ab:5a:5d:3d:
                    7b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BB:71:8D:C2:AA:5D:4C:3D:8B:C3:0E:7C:1D:54:86:FE:FE:DF:F3
            X509v3 Authority Key Identifier:
                keyid:2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:17:6d:74:98:60:89:30:b1:df:01:a7:70:ed:8c:9a:d3:0d:
         28:0f:70:90:08:f1:80:04:38:f7:f5:d0:72:b4:62:44:b4:0a:
         ba:01:6f:fc:03:02:39:77:7e:02:7a:dc:0c:62:f5:d8:6f:ae:
         c6:f2:eb:f0:1a:76:6f:87:c3:54:49:dd:f8:03:e0:17:51:39:
         e9:4a:db:70:be:c3:78:24:81:12:bf:70:17:3b:75:7b:0b:67:
         e6:e3:73:4b:7b:60:7e:4f:c3:5c:eb:a6:6f:45:b3:81:db:a7:
         b4:40:de:a4:2e:a1:d4:99:b7:27:3b:05:0c:5f:2d:eb:54:c8:
         f8:2e:e7:1f:00:f7:cd:23:ad:8e:e9:e5:07:68:d8:64:4b:1f:
         70:ef:05:11:84:6e:f3:c9:20:c2:6a:94:8c:7d:6a:0c:34:63:
         16:44:5f:58:bf:9a:ce:18:ab:50:7e:d6:3c:a8:79:34:f1:fa:
         e8:98:c5:c4:02:c0:bc:24:be:3a:56:40:c1:fe:2d:c6:9e:50:
         ef:fd:ef:cd:05:6d:00:7d:b1:86:37:28:51:e1:f9:d6:8b:1b:
         5d:27:d9:35:f8:90:5a:d8:61:1a:c3:02:14:5f:47:16:8a:c1:
         89:a9:0e:c1:11:ba:5c:98:99:57:03:a2:76:37:ff:7d:e9:fa:
         e8:8f:68:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz8sgolYPnRS1u55qq4LJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZGE1ZjAzZWFmNTEzYTc3ZjJlYzIwZGU1YmIxNjcyYzVk
Mjc5YWIwHhcNMjUwODA0MDIwMTE3WhcNMjUwODA1MDIwMTE3WjAzMTEwLwYDVQQD
EygzOGJiNzE4ZGMyYWE1ZDRjM2Q4YmMzMGU3YzFkNTQ4NmZlZmVkZmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiplCpvddUlAhCdEj0mSOmUHZtFb
vSAYNt6sjUR9hpf71kCkJSp1vSZTxfArk142RaVel/xXv5k0Cia9xxbdJlz1O1tz
nm0Q+rFHI3/lU03LmneKK/wsGzGiZryrvoe+TgxjJJnS91ZM18PZmBlXaj2g0lF1
0JZU4GbZyeZmpf74L83sl2b7wu5+NszlCGCjDXrq0OFqXsYo9/1FWw4jG0fL+224
yNPlx6Rf9CNaAgul9jLieNi9hBo1JHzKesUhxtryHqLxmkU58rthZ+IQFA0wLaJq
BrCQCQTiaxz3Wk2V90udrFoLzMY3Sg6tB5ooe8khXBlEA7WwQqtaXT17ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDi7cY3Cql1MPYvDDnwdVIb+/t/zMB8GA1UdIwQY
MBaAFCzaXwPq9ROnfy7CDeW7FnLF0nmrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE5wZkEtcjFFNmRfTHNJTjVic1djc1hTZWFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8zODM4YzQtNmU0Ni00OWE4LThjMTQt
YWU4YjhkNzg4NzAwLzEvTE5wZkEtcjFFNmRfTHNJTjVic1djc1hTZWFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8zODM4YzQtNmU0Ni00OWE4LThjMTQtYWU4YjhkNzg4NzAw
LzEvTE5wZkEtcjFFNmRfTHNJTjVic1djc1hTZWFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYxdtdJhg
iTCx3wGncO2MmtMNKA9wkAjxgAQ49/XQcrRiRLQKugFv/AMCOXd+AnrcDGL12G+u
xvLr8Bp2b4fDVEnd+APgF1E56UrbcL7DeCSBEr9wFzt1ewtn5uNzS3tgfk/DXOum
b0WzgduntEDepC6h1Jm3JzsFDF8t61TI+C7nHwD3zSOtjunlB2jYZEsfcO8FEYRu
88kgwmqUjH1qDDRjFkRfWL+azhirUH7WPKh5NPH66JjFxALAvCS+OlZAwf4txp5Q
7/3vzQVtAH2xhjcoUeH51osbXSfZNfiQWthhGsMCFF9HForBiakOwRG6XJiZVwOi
djf/fen66I9oQg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:48 2025 by rpki-client