Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
File:                     LG88xdeFlC5gSAk8dDOXOusV_iI.mft (raw, json)
Hash identifier:          RfnqGM3xaVeDqOVz6+cngEL2L1Js4FlzIof1psuziEw=
Subject key identifier:   42:A5:62:FD:F6:3F:33:7F:E7:6A:1C:F7:27:BE:38:7B:C2:52:DD:C4
Authority key identifier: 2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22
Certificate issuer:       /CN=2c6f3cc5d785942e6048093c7433973aeb15fe22
Certificate serial:       01984F31F9A352866445969853C2FED07CF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
Manifest number:          1603
Signing time:             Mon 28 Jul 2025 04:02:11 +0000
Manifest this update:     Mon 28 Jul 2025 04:02:11 +0000
Manifest next update:     Tue 29 Jul 2025 04:02:11 +0000
Files and hashes:         1: LG88xdeFlC5gSAk8dDOXOusV_iI.crl (hash: 1oUQSQCB6PEWVGcb2H2AVXfieSFllm0/A9dv4zoFfQ4=)
                          2: r-LdmNgDJxor_chtzxn23ViAn4E.roa (hash: MPImeKuP5zzvcwvgc9vgO37r54W5h9GJtWUTmdVepC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4f:31:f9:a3:52:86:64:45:96:98:53:c2:fe:d0:7c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c6f3cc5d785942e6048093c7433973aeb15fe22
        Validity
            Not Before: Jul 28 04:02:11 2025 GMT
            Not After : Jul 29 04:02:11 2025 GMT
        Subject: CN=42a562fdf63f337fe76a1cf727be387bc252ddc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fd:d3:63:ab:6b:b2:83:44:3f:f6:7a:47:e3:
                    c7:05:a9:db:91:27:bb:16:6e:76:0e:79:eb:00:bf:
                    77:aa:24:c8:fc:60:20:ed:3c:ed:2e:b0:15:25:92:
                    c3:3a:18:d1:ee:43:b2:15:0c:47:35:56:59:77:23:
                    28:78:76:21:1e:ef:5a:e0:c9:30:0d:6f:d7:eb:19:
                    6c:97:a8:88:d2:f2:6f:8d:8b:cd:d3:0c:eb:81:7a:
                    66:b1:6c:90:06:ec:ee:14:6c:da:c2:74:ea:5c:58:
                    1a:2c:21:ba:c7:df:05:cb:63:41:18:73:5b:1a:04:
                    26:56:5e:a7:5c:e3:25:bf:41:98:ba:f5:83:4c:1d:
                    db:a9:81:89:a1:5c:2d:c6:aa:c3:81:de:e5:50:e3:
                    47:37:6e:26:f2:20:3c:9f:1b:ed:d3:a2:c0:19:38:
                    d1:42:64:59:7d:60:87:42:5c:88:c3:22:92:84:4c:
                    61:bd:68:0b:3b:e9:d3:b3:60:04:46:fc:f3:1d:48:
                    25:50:b5:2a:c8:2a:09:4d:dc:ca:9a:e1:ae:d1:24:
                    63:fb:41:e9:67:43:a8:4c:f0:65:9d:fa:6d:25:a3:
                    35:bf:4b:a9:af:bc:85:44:bc:25:ef:96:39:0d:5d:
                    3b:79:59:4b:ae:e3:1d:fb:da:0f:a9:bf:38:e4:10:
                    16:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A5:62:FD:F6:3F:33:7F:E7:6A:1C:F7:27:BE:38:7B:C2:52:DD:C4
            X509v3 Authority Key Identifier:
                keyid:2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f6:3b:e5:31:2a:39:0c:2b:3c:ff:09:d9:89:61:cf:2e:0e:
         eb:06:6a:05:a8:e2:43:91:82:14:45:02:ee:71:0f:79:1f:eb:
         b0:e9:65:9d:d8:5d:24:28:50:1f:76:5f:10:3f:93:0b:15:79:
         d7:d9:2e:39:57:71:d6:cf:07:20:8a:87:f2:88:92:fe:4c:d5:
         18:52:f6:41:39:f8:fd:bd:10:a1:ef:52:89:d0:96:55:51:ed:
         a7:52:b8:b5:44:d6:c8:15:86:84:81:f9:52:13:a7:40:64:86:
         ec:b7:c9:04:63:48:6d:e9:79:49:53:b2:e1:c4:fa:bd:74:e8:
         07:68:2c:3b:8d:24:46:a3:cb:59:dd:61:15:3b:be:59:8d:76:
         ea:08:d5:91:83:8e:14:71:52:d9:83:fa:5e:f4:cc:c2:df:70:
         c8:bc:c7:45:b9:36:db:37:c9:05:64:a9:e7:00:b9:69:5a:d0:
         8a:72:91:60:49:4b:cf:2b:fb:9e:5d:c8:ed:94:c6:78:bf:9b:
         41:79:37:52:7c:a4:2a:6d:59:bb:a7:70:9c:61:ad:ac:d9:0e:
         d1:31:b5:7b:38:44:f0:c0:18:d9:4b:97:0e:d1:a6:07:bf:5d:
         a8:2e:cf:88:f0:e5:88:01:a0:b9:34:c5:e1:c7:09:97:39:8c:
         59:c7:43:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 05:44:05 2025 by rpki-client