Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
File:                     L0yd_nsacqVRu6FamZpsGTM__5Y.mft (raw, json)
Hash identifier:          1YKiirw779wsRb9rmI3Q40LTVFNgvEmbG/tYvTKEKGA=
Subject key identifier:   DC:53:DE:35:6D:62:07:05:08:06:4B:55:96:A4:C5:11:A7:82:F0:E2
Authority key identifier: 2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
Certificate issuer:       /CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Certificate serial:       0198499BFC3BBF7E09409C604923EAF52429
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
Manifest number:          1343
Signing time:             Sun 27 Jul 2025 02:00:16 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:16 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:16 +0000
Files and hashes:         1: L0yd_nsacqVRu6FamZpsGTM__5Y.crl (hash: Mky9FC8gi4PvYgQ9Ch6zEZmj4xQqg8BAO/OHZMlbnUc=)
                          2: _D7djxZolRxCx5AgywEsR673Vyc.roa (hash: lkosjygsw/gw6j4Ql0QUbhSbmAPEpo1du5WppRl3Xeg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9b:fc:3b:bf:7e:09:40:9c:60:49:23:ea:f5:24:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
        Validity
            Not Before: Jul 27 02:00:16 2025 GMT
            Not After : Jul 28 02:00:16 2025 GMT
        Subject: CN=dc53de356d62070508064b5596a4c511a782f0e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:38:54:5f:13:d2:89:40:b5:6e:af:5e:49:9a:
                    61:d6:f8:c5:12:ba:b2:56:0c:b1:a4:5a:42:9b:9b:
                    9f:02:f3:7a:4c:48:d0:75:9f:5b:ce:08:f9:76:63:
                    d1:bf:18:4e:17:c0:d6:81:cd:43:ca:ec:77:36:10:
                    f0:7d:23:20:06:b4:85:ad:e5:9c:99:14:a2:83:6d:
                    8b:e4:39:65:7b:df:e1:43:13:a7:82:3a:32:40:fb:
                    4a:b1:b5:6c:81:0f:c0:15:95:b7:c8:02:b7:aa:e0:
                    f9:ad:c0:6b:65:bc:f3:4d:cb:e9:55:09:2d:79:0b:
                    6c:59:56:1c:8d:e7:fc:c0:85:72:75:b7:14:97:7a:
                    e3:11:29:b9:b8:d2:04:3a:60:e1:d0:78:04:b7:ce:
                    09:d2:1c:9d:6d:f3:81:b7:91:1b:61:be:dc:7c:ff:
                    7b:c2:55:2a:0e:fa:d5:c5:2b:35:73:56:94:18:a8:
                    e6:4f:8f:c4:ec:48:f0:d8:dd:8a:48:bd:40:90:db:
                    b0:68:c4:e2:c1:a2:5c:16:27:65:0e:17:39:49:b2:
                    3a:81:3d:3a:7f:87:aa:6c:a8:81:34:f9:1a:7b:e1:
                    e7:78:ab:91:af:a2:f7:7c:a0:f2:69:42:4d:ae:7e:
                    bb:5e:f9:1c:a6:c5:d5:4d:a2:c2:9f:4b:df:59:ec:
                    a4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:53:DE:35:6D:62:07:05:08:06:4B:55:96:A4:C5:11:A7:82:F0:E2
            X509v3 Authority Key Identifier:
                keyid:2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:dc:e4:11:aa:31:27:35:5a:54:37:19:8d:31:4d:63:8c:d4:
         21:51:6e:5a:1c:b1:b4:3a:8c:d5:e7:fc:0f:f4:a7:0e:1b:ff:
         46:4f:ae:f9:5d:c4:81:42:3c:5b:fb:69:21:7e:cc:56:4e:10:
         81:3a:16:f2:0f:85:73:91:55:31:01:0f:e6:25:89:c1:e5:0f:
         2b:8c:d5:a2:c7:a9:5b:a2:d7:f8:3e:ff:08:b4:6a:98:74:4d:
         10:71:c6:4f:12:17:8b:b4:8f:63:f6:08:e7:49:1b:28:31:33:
         7d:b8:b9:dc:f6:83:aa:e5:57:f7:01:16:11:9a:e7:b4:9f:b8:
         f0:3d:c8:1a:c5:6f:dc:f3:3b:7a:9e:ea:88:a8:c4:91:7b:7c:
         5b:e9:fb:1e:bc:84:47:d0:c4:da:c0:02:56:64:fe:71:22:c7:
         38:72:de:7d:ad:ab:0e:41:c6:1d:9e:3f:27:dd:81:16:97:33:
         db:5b:0d:41:02:53:04:53:40:7e:19:c5:7c:9a:2b:5f:2b:4f:
         cb:a6:b4:98:4b:cf:4b:b1:34:d3:8a:be:20:7d:00:94:db:f8:
         91:9b:e2:71:34:08:51:ff:c4:ac:62:c0:88:79:ae:bf:40:c4:
         b4:3c:4f:37:49:6c:62:57:c5:e6:36:58:05:a4:ee:2e:93:21:
         77:9f:f0:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJm/w7v34JQJxgSSPq9SQpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNGM5ZGZlN2IxYTcyYTU1MWJiYTE1YTk5OWE2YzE5MzMz
ZmZmOTYwHhcNMjUwNzI3MDIwMDE2WhcNMjUwNzI4MDIwMDE2WjAzMTEwLwYDVQQD
EyhkYzUzZGUzNTZkNjIwNzA1MDgwNjRiNTU5NmE0YzUxMWE3ODJmMGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszhUXxPSiUC1bq9eSZph1vjFErqy
VgyxpFpCm5ufAvN6TEjQdZ9bzgj5dmPRvxhOF8DWgc1Dyux3NhDwfSMgBrSFreWc
mRSig22L5Dlle9/hQxOngjoyQPtKsbVsgQ/AFZW3yAK3quD5rcBrZbzzTcvpVQkt
eQtsWVYcjef8wIVydbcUl3rjESm5uNIEOmDh0HgEt84J0hydbfOBt5EbYb7cfP97
wlUqDvrVxSs1c1aUGKjmT4/E7Ejw2N2KSL1AkNuwaMTiwaJcFidlDhc5SbI6gT06
f4eqbKiBNPkae+HneKuRr6L3fKDyaUJNrn67XvkcpsXVTaLCn0vfWeykdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxT3jVtYgcFCAZLVZakxRGngvDiMB8GA1UdIwQY
MBaAFC9Mnf57GnKlUbuhWpmabBkzP/+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lZmEwMDItMDBiNS00NzZiLTg1Y2Yt
ZTllMzg4ODEyNzUyLzEvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9lZmEwMDItMDBiNS00NzZiLTg1Y2YtZTllMzg4ODEyNzUy
LzEvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9zkEaox
JzVaVDcZjTFNY4zUIVFuWhyxtDqM1ef8D/SnDhv/Rk+u+V3EgUI8W/tpIX7MVk4Q
gToW8g+Fc5FVMQEP5iWJweUPK4zVosepW6LX+D7/CLRqmHRNEHHGTxIXi7SPY/YI
50kbKDEzfbi53PaDquVX9wEWEZrntJ+48D3IGsVv3PM7ep7qiKjEkXt8W+n7HryE
R9DE2sACVmT+cSLHOHLefa2rDkHGHZ4/J92BFpcz21sNQQJTBFNAfhnFfJorXytP
y6a0mEvPS7E004q+IH0AlNv4kZvicTQIUf/ErGLAiHmuv0DEtDxPN0lsYlfF5jZY
BaTuLpMhd5/w1g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:17:34 2025 by rpki-client