Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
File:                     LxF62jy5UVptim3MFfKwsafZvh0.mft (raw, json)
Hash identifier:          A1/hgithMFA7fKzHrQqQKonjnYerv/blHZenXE3e0F4=
Subject key identifier:   F3:09:2C:68:7E:DF:94:97:8B:54:FA:E5:A4:67:D7:D2:DD:36:33:9E
Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
Certificate issuer:       /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Certificate serial:       0198289273FB4513AE3EA25446B24B348660
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
Manifest number:          15F8
Signing time:             Sun 20 Jul 2025 16:02:23 +0000
Manifest this update:     Sun 20 Jul 2025 16:02:23 +0000
Manifest next update:     Mon 21 Jul 2025 16:02:23 +0000
Files and hashes:         1: 4y-HwXvA0OxK3vVdPd5A33rGg9Q.roa (hash: gzORbcgXYU+qNBe8rAH5Phv3POsitSIbAnxxOJbLq5U=)
                          2: LxF62jy5UVptim3MFfKwsafZvh0.crl (hash: mbvK3p9CRRudq/WN3eZOmn+Hgf30Tmww4X6EHRbwOwk=)
                          3: OcMN4PGYYl4NIh--L2pu14Kv2wI.roa (hash: y5JZ+EK3MrQ+Hieebg8h6lpRv7jQFoUhr5uq84o9xb4=)
                          4: cur4FXdft_oIrPB-e2wMuxoxg0k.roa (hash: EMpY5uYjW4BdaSy23lSxIa0kd9ZyYy6IZCRIGCLLNgg=)
                          5: sGMmHuejSMxnvYle1EwKk7ibCFs.roa (hash: 3X9v/hOxIl5oX9TSgmXZwDSxu4qkLlAZp1GYV/4bw7U=)
                          6: ztb5nfGZ41OyyLKu0WyjRkGWEqs.roa (hash: D+kp5S3EtYZJrj3NV0J9bAjz4ni5Vdza3meqOp3xMyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:28:92:73:fb:45:13:ae:3e:a2:54:46:b2:4b:34:86:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
        Validity
            Not Before: Jul 20 16:02:23 2025 GMT
            Not After : Jul 21 16:02:23 2025 GMT
        Subject: CN=f3092c687edf94978b54fae5a467d7d2dd36339e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:27:40:95:5f:0d:f7:09:0f:87:ae:27:d1:0c:
                    3b:ac:a4:40:c7:eb:1c:5e:6a:05:ad:1b:cb:eb:b5:
                    17:d5:45:cc:88:ed:5a:0e:0d:15:75:0d:14:30:4b:
                    49:c2:f9:fb:fe:86:f1:59:5b:ab:a0:29:79:fc:ef:
                    5d:ba:1f:df:9a:5d:98:7c:72:11:95:1f:80:f0:66:
                    3f:be:cb:12:81:b0:d9:be:b9:6f:3d:aa:5f:8c:89:
                    d2:1a:32:65:80:43:a3:34:37:c2:62:75:79:e4:1b:
                    44:f8:36:46:d6:13:a6:f2:cc:fe:1c:c8:11:4d:d4:
                    2b:0b:7d:56:20:f8:92:9a:f0:f4:57:db:71:aa:c4:
                    8d:2d:c6:41:62:15:7a:a2:4e:3b:f3:4b:8d:f5:0e:
                    34:d7:33:e3:a9:92:06:21:18:2f:7a:6c:9e:71:80:
                    ec:4d:ac:4b:4e:4a:07:cf:fc:61:ea:c4:6a:1f:c0:
                    e9:36:2c:2d:94:4d:4d:15:6c:22:a8:e1:68:cc:47:
                    cd:ff:81:63:58:08:fc:66:70:fb:f9:05:15:c7:d2:
                    48:0d:a8:2c:0a:10:c6:99:bc:5a:55:74:b1:9b:66:
                    01:5f:17:26:80:fd:55:c6:43:1a:21:cb:91:f7:70:
                    ff:c7:17:ce:07:7e:54:8e:69:c6:eb:a9:86:45:44:
                    59:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:09:2C:68:7E:DF:94:97:8B:54:FA:E5:A4:67:D7:D2:DD:36:33:9E
            X509v3 Authority Key Identifier:
                keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ef:68:4e:76:39:88:00:23:27:97:f4:74:f3:9c:70:62:6b:
         a2:f4:b8:02:e6:5d:92:c6:b4:db:48:89:79:3d:c0:40:1b:09:
         ee:cb:8d:4a:00:ec:3b:51:47:65:d9:bf:8f:a0:83:98:0c:68:
         7a:71:b2:24:2b:c9:9b:f5:54:2c:f0:78:87:9e:13:69:23:d1:
         9b:ff:ff:0c:05:41:fa:0d:3a:c8:cf:2f:d5:4b:c3:6b:08:68:
         fd:10:00:1d:6c:1d:0a:ef:12:48:33:82:de:db:40:1c:32:38:
         f4:aa:a8:4c:b2:bd:5d:11:3a:1b:64:67:4e:5d:5b:0d:4e:e8:
         15:cc:ac:4e:9c:19:54:52:29:18:ff:f2:e9:0b:97:2e:46:12:
         92:49:9c:7d:27:f4:a6:8b:58:e9:60:52:04:fa:58:99:6c:1f:
         bf:41:a4:82:30:cc:86:cf:4b:5e:a8:9e:af:37:48:3d:72:68:
         27:1d:e3:a9:0a:e7:cc:ea:5e:ee:fd:2a:fc:48:7c:f1:c7:78:
         95:ce:36:a9:87:1b:da:92:c9:4e:92:41:34:e6:8a:d2:ac:b5:
         f0:76:d4:5f:a5:fd:33:68:e4:c1:12:eb:b0:78:fe:18:ca:d1:
         ae:44:a1:bc:59:52:97:a9:d0:66:95:a4:c3:00:cb:41:14:31:
         7e:93:ed:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:25:27 2025 by rpki-client