Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
File:                     LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft (raw, json)
Hash identifier:          RSWFE3vFBkBMqDzjaj49Lde/JisC4kJuM9XtJq6pr7A=
Subject key identifier:   08:9D:AD:69:16:AA:AF:F1:79:C1:63:63:BC:0B:24:70:27:A9:2D:5C
Authority key identifier: 2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27
Certificate issuer:       /CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
Certificate serial:       019849652C0233601817A5EC04B12151E6C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
Manifest number:          1602
Signing time:             Sun 27 Jul 2025 01:00:23 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:23 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:23 +0000
Files and hashes:         1: Jc6JT4xshgQRG7HUAK1HtP9BkTI.roa (hash: hCl5v0Z86Jy7+0GlCW+6oKfv2bUVufzYinCdryb0Gzo=)
                          2: LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl (hash: rCCz14tG5TMT1kjj3CQRP4TjNgoGwR3ki/94t1xZUfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:2c:02:33:60:18:17:a5:ec:04:b1:21:51:e6:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
        Validity
            Not Before: Jul 27 01:00:23 2025 GMT
            Not After : Jul 28 01:00:23 2025 GMT
        Subject: CN=089dad6916aaaff179c16363bc0b247027a92d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c0:c1:ad:f7:f2:59:2c:f0:c4:0c:9d:e0:98:
                    87:fb:49:88:4a:bd:ad:31:6c:b6:07:03:ad:4c:f9:
                    0b:ed:19:b9:da:9a:b8:8e:6d:a0:9c:d0:d5:ca:13:
                    48:5d:39:6b:4e:42:f7:55:5c:92:11:e4:fd:0e:bc:
                    48:58:12:ed:44:7c:f6:8e:2a:b1:9a:ab:d8:53:ac:
                    fb:ed:3b:a9:1f:6e:47:96:03:2c:4c:d3:f8:b8:d8:
                    8f:8e:d5:0e:c1:46:c9:18:c6:9c:20:f1:24:0e:20:
                    5a:50:36:24:5e:9d:2e:e2:68:20:35:e8:fd:a5:b5:
                    49:4d:26:d8:12:b2:67:f2:5b:41:01:e9:d2:1a:9f:
                    ef:01:0a:0a:a4:d4:68:27:9d:7d:f9:d4:0d:2f:da:
                    66:a4:62:8f:32:f3:20:aa:11:e3:e4:fe:25:87:6c:
                    07:90:32:ed:71:42:07:1a:94:f4:87:22:b1:07:bd:
                    d4:7d:dc:74:0c:ca:7b:db:3c:92:d1:46:c0:ed:14:
                    b5:26:09:72:02:f5:45:9c:d8:54:2a:27:66:ad:af:
                    cb:60:77:d3:54:43:c8:82:e7:35:b4:12:c5:d7:1e:
                    75:6d:e8:b4:ba:89:75:40:86:c0:41:b3:f3:d5:d9:
                    ef:02:ec:0d:93:ec:2c:30:88:7d:88:be:ce:6e:c7:
                    bd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9D:AD:69:16:AA:AF:F1:79:C1:63:63:BC:0B:24:70:27:A9:2D:5C
            X509v3 Authority Key Identifier:
                keyid:2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:f9:97:7f:4f:92:1c:b1:e3:60:26:fa:05:4e:a1:43:bf:32:
         34:83:ab:93:57:95:9d:03:86:37:94:93:03:e8:8d:a8:2d:6b:
         1e:a2:35:70:0a:8c:96:bb:a2:38:1d:da:54:42:2e:e7:ad:ab:
         6c:1f:7d:fc:93:4b:90:45:92:19:2c:e6:08:02:5b:43:3f:06:
         4d:c4:91:87:2b:a1:3e:88:8d:99:df:9d:c9:2c:c0:5c:1a:8c:
         02:bb:bb:4a:b9:f7:ac:7c:72:94:d1:21:20:bd:2c:f2:e9:80:
         d0:f8:cc:ce:6e:fd:35:8f:81:ea:6f:f0:b0:18:70:0e:76:41:
         23:14:32:31:f9:12:c5:db:41:a4:cb:a2:08:fb:6c:ef:b4:d0:
         98:bd:3e:3e:e6:dc:0c:4a:a2:20:97:90:d3:0b:7c:8a:8d:fb:
         24:61:c6:c5:fc:16:52:51:d2:c4:20:d5:ff:2d:de:36:46:cb:
         c7:3a:38:16:ee:2c:17:0a:02:51:12:9f:73:d5:d2:ac:4f:dd:
         d4:b2:9b:ee:63:cc:ca:7b:93:c5:75:c2:b9:d4:b8:23:2f:0b:
         a4:c1:78:7f:22:d8:cf:8c:3d:32:01:b7:8c:5e:8a:11:41:e6:
         0d:b7:a1:00:fd:43:c8:b8:95:6d:c8:96:af:2e:c2:ab:a0:4a:
         3f:90:23:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZSwCM2AYF6XsBLEhUebGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkYzljYjUzMDJkOGQxM2ZlOTFlODBmNWNiZDFmYmFjYmMw
MTQ4MjcwHhcNMjUwNzI3MDEwMDIzWhcNMjUwNzI4MDEwMDIzWjAzMTEwLwYDVQQD
EygwODlkYWQ2OTE2YWFhZmYxNzljMTYzNjNiYzBiMjQ3MDI3YTkyZDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMDBrffyWSzwxAyd4JiH+0mISr2t
MWy2BwOtTPkL7Rm52pq4jm2gnNDVyhNIXTlrTkL3VVySEeT9DrxIWBLtRHz2jiqx
mqvYU6z77TupH25HlgMsTNP4uNiPjtUOwUbJGMacIPEkDiBaUDYkXp0u4mggNej9
pbVJTSbYErJn8ltBAenSGp/vAQoKpNRoJ519+dQNL9pmpGKPMvMgqhHj5P4lh2wH
kDLtcUIHGpT0hyKxB73Ufdx0DMp72zyS0UbA7RS1JglyAvVFnNhUKidmra/LYHfT
VEPIguc1tBLF1x51bei0uol1QIbAQbPz1dnvAuwNk+wsMIh9iL7Obse9FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAidrWkWqq/xecFjY7wLJHAnqS1cMB8GA1UdIwQY
MBaAFC3Jy1MC2NE/6R6A9cvR+6y8AUgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGNuTFV3TFkwVF9wSG9EMXk5SDdyTHdCU0NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jY2M4MDgtMTRiYi00OTRkLTk5Yzgt
MmYxMWE2NTE5NjJiLzEvTGNuTFV3TFkwVF9wSG9EMXk5SDdyTHdCU0NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jY2M4MDgtMTRiYi00OTRkLTk5YzgtMmYxMWE2NTE5NjJi
LzEvTGNuTFV3TFkwVF9wSG9EMXk5SDdyTHdCU0NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/mXf0+S
HLHjYCb6BU6hQ78yNIOrk1eVnQOGN5STA+iNqC1rHqI1cAqMlruiOB3aVEIu562r
bB99/JNLkEWSGSzmCAJbQz8GTcSRhyuhPoiNmd+dySzAXBqMAru7Srn3rHxylNEh
IL0s8umA0PjMzm79NY+B6m/wsBhwDnZBIxQyMfkSxdtBpMuiCPts77TQmL0+Pubc
DEqiIJeQ0wt8io37JGHGxfwWUlHSxCDV/y3eNkbLxzo4Fu4sFwoCURKfc9XSrE/d
1LKb7mPMynuTxXXCudS4Iy8LpMF4fyLYz4w9MgG3jF6KEUHmDbehAP1DyLiVbciW
ry7Cq6BKP5AjRQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:27:05 2025 by rpki-client