Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
File:                     ltl3-HCvlNbcEWribZDw5mWOMqg.mft (raw, json)
Hash identifier:          EXCxxuCfIDbcqg9hfcrhqvra9LCGqy5WPsPmkNhuNiA=
Subject key identifier:   FA:D1:57:5D:0C:C7:67:61:80:59:CD:AF:CD:B6:B3:23:5C:0F:A3:01
Authority key identifier: 96:D9:77:F8:70:AF:94:D6:DC:11:6A:E2:6D:90:F0:E6:65:8E:32:A8
Certificate issuer:       /CN=96d977f870af94d6dc116ae26d90f0e6658e32a8
Certificate serial:       019776E62AF2A619C47E0C6A7EB9EA0B511F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
Manifest number:          09A0
Signing time:             Mon 16 Jun 2025 04:01:25 +0000
Manifest this update:     Mon 16 Jun 2025 04:01:25 +0000
Manifest next update:     Tue 17 Jun 2025 04:01:25 +0000
Files and hashes:         1: ltl3-HCvlNbcEWribZDw5mWOMqg.crl (hash: rr/nLyk5mnPW7M/Yznj9VYzbivEW07zc32d2WJKtf5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 04:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:e6:2a:f2:a6:19:c4:7e:0c:6a:7e:b9:ea:0b:51:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96d977f870af94d6dc116ae26d90f0e6658e32a8
        Validity
            Not Before: Jun 16 04:01:25 2025 GMT
            Not After : Jun 17 04:01:25 2025 GMT
        Subject: CN=fad1575d0cc767618059cdafcdb6b3235c0fa301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c3:80:35:59:79:58:91:68:ed:ee:f4:32:ab:
                    5c:3d:bb:1b:67:47:37:eb:2e:06:0e:8d:60:a9:38:
                    00:89:22:2d:af:c8:c2:de:bf:6d:cd:2b:c9:fb:65:
                    d1:68:2f:ab:16:af:6f:8e:2f:81:4d:95:1b:f3:cb:
                    94:d7:e6:de:e7:92:ce:3b:0d:2b:9b:e3:4d:b9:d1:
                    2c:a3:4a:17:4b:2a:f1:ec:f3:3d:5f:47:7f:09:2e:
                    85:a1:59:08:f0:9f:1c:53:ee:35:6f:a8:34:cc:b8:
                    94:c2:43:2f:bd:3b:2a:3a:de:2c:45:71:6c:3b:90:
                    1f:82:35:f1:17:64:1f:fa:08:ed:0d:a1:c0:4b:f0:
                    8e:2e:50:ec:36:8a:67:7e:6d:c4:dc:64:0f:17:c6:
                    5a:55:8e:f6:4a:8c:4e:e8:ff:16:7a:d0:de:74:10:
                    be:95:0f:0a:4e:57:67:61:16:7a:38:36:1b:80:37:
                    bb:81:48:13:1f:42:9d:6b:4d:84:78:9e:9d:a2:5a:
                    86:72:01:fe:85:72:84:af:0f:a7:ae:42:83:a3:14:
                    d5:98:82:ec:01:f9:34:28:a9:8e:b2:1d:b4:e4:44:
                    e3:b8:99:1f:a1:d2:39:21:bf:a4:67:7c:6a:e7:cb:
                    80:9d:e3:4f:55:51:97:75:33:67:f0:09:fb:4a:e8:
                    af:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D1:57:5D:0C:C7:67:61:80:59:CD:AF:CD:B6:B3:23:5C:0F:A3:01
            X509v3 Authority Key Identifier:
                keyid:96:D9:77:F8:70:AF:94:D6:DC:11:6A:E2:6D:90:F0:E6:65:8E:32:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:2a:9a:48:96:c0:03:fc:f3:e9:c4:a0:92:fe:9c:89:4a:a9:
         72:16:c6:de:f6:10:4e:e3:d3:f3:6f:a7:ee:cf:d7:7e:66:37:
         bb:52:9c:1e:f0:65:21:e4:b3:0b:d2:ed:32:81:f9:25:35:62:
         1b:b0:cd:e2:c4:20:e0:9f:81:d2:8a:11:d6:3a:c4:c5:d8:e8:
         f7:ce:71:38:f9:3e:92:1b:dc:97:b1:a1:cc:9f:af:4b:47:91:
         24:1c:1a:12:0e:3e:d1:33:e1:9b:b0:08:d9:e4:b0:d6:63:1c:
         73:8e:c8:14:50:07:15:44:3f:8a:b8:4d:7e:fd:bc:83:b7:b4:
         f8:71:e5:bf:02:35:f6:58:2f:d3:75:df:7f:c3:06:a1:47:e4:
         c3:dd:bd:cf:c8:35:b2:61:1a:91:fd:ee:09:4f:94:e9:45:0a:
         88:c6:ab:ce:bc:cb:d3:c8:b9:e3:ef:1a:fc:ec:fb:04:b8:53:
         f3:68:e8:92:fa:a1:fa:8e:0a:f5:37:09:f1:1b:01:e6:5f:45:
         7c:30:21:76:96:ff:3c:47:e9:00:6e:34:6d:94:e3:4f:d3:65:
         6a:8d:27:43:2f:98:ab:a7:6b:ee:b2:f0:a7:30:4b:f9:73:5a:
         f3:7d:b8:56:61:a2:f2:e7:40:28:da:cf:f8:eb:6d:bd:3f:7c:
         aa:d0:8a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:14:05 2025 by rpki-client