Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft
File:                     LOuI0A5SCtZgtBbZIInGDVyPE-E.mft (raw, json)
Hash identifier:          80BL6bTG3Ajm1an5IYsDC/igxPi+9nQAkHZ9rao8kV0=
Subject key identifier:   9F:BA:49:2D:B9:05:2B:65:06:AE:78:F9:EC:2F:5B:76:5C:61:DA:BF
Authority key identifier: 2C:EB:88:D0:0E:52:0A:D6:60:B4:16:D9:20:89:C6:0D:5C:8F:13:E1
Certificate issuer:       /CN=2ceb88d00e520ad660b416d92089c60d5c8f13e1
Certificate serial:       01984A0A263ED245194324947961A372CA32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft
Manifest number:          0272
Signing time:             Sun 27 Jul 2025 04:00:35 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:35 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:35 +0000
Files and hashes:         1: LOuI0A5SCtZgtBbZIInGDVyPE-E.crl (hash: mlJNa/4DYv7m5LI8lK+D0bHTYhoidkq4QuztTXCAWmo=)
                          2: Y46vCOXYHw7rQaQKH4vVvjsoPj0.roa (hash: x4bPgE4P0Zq2nwgUR4AjUuUSz6sm/lpYmxdn5ktx7oM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:26:3e:d2:45:19:43:24:94:79:61:a3:72:ca:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ceb88d00e520ad660b416d92089c60d5c8f13e1
        Validity
            Not Before: Jul 27 04:00:35 2025 GMT
            Not After : Jul 28 04:00:35 2025 GMT
        Subject: CN=9fba492db9052b6506ae78f9ec2f5b765c61dabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:eb:c8:28:ab:db:36:ef:fe:36:e6:c1:57:53:
                    d6:4a:73:47:4d:fd:67:3b:78:8b:aa:17:84:79:a6:
                    22:ec:6f:ed:11:12:14:8f:97:6d:de:7c:e4:58:41:
                    e0:9e:e8:d5:1a:5c:49:80:73:6f:d3:01:d1:24:4b:
                    ac:47:70:70:03:58:56:50:69:de:71:ed:04:6d:14:
                    c2:6c:45:f4:19:a1:d6:bc:91:8e:15:d9:62:f5:d0:
                    22:75:ba:fd:cd:e7:2b:1c:e7:08:73:b5:77:87:cf:
                    12:ab:c9:a2:b0:43:fd:29:cb:44:ce:1c:06:3f:90:
                    3e:f1:8c:fd:af:77:5c:e4:bb:3b:96:5c:8c:72:e5:
                    15:3a:d2:98:05:c5:64:67:50:db:d8:41:49:a4:e6:
                    db:70:53:ee:6b:2d:f1:f1:1c:93:fe:eb:7a:55:ee:
                    5b:13:0f:ac:b9:dc:cb:52:e0:8f:4a:ad:59:31:ea:
                    13:b3:3c:d1:4d:60:81:39:f1:cc:c7:d3:9b:02:d5:
                    32:51:ed:c6:85:df:45:b6:ef:7e:bf:1c:43:b9:98:
                    30:0b:83:15:44:ff:30:d2:7a:15:33:cd:be:63:88:
                    8d:0a:80:7e:0a:84:29:d4:a5:37:a8:9e:c3:41:7a:
                    33:0c:a8:e8:00:06:d8:ea:6c:a5:23:7c:97:47:d7:
                    e4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BA:49:2D:B9:05:2B:65:06:AE:78:F9:EC:2F:5B:76:5C:61:DA:BF
            X509v3 Authority Key Identifier:
                keyid:2C:EB:88:D0:0E:52:0A:D6:60:B4:16:D9:20:89:C6:0D:5C:8F:13:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:5b:73:6e:fb:e2:c9:0e:b1:d1:05:d2:0b:fc:99:85:7a:ab:
         4f:62:b3:36:65:9f:f7:4f:44:58:c0:06:9b:cc:ed:c9:ff:23:
         f8:12:5c:95:17:a5:ac:ee:b3:14:ba:8a:98:c9:96:02:71:66:
         10:3d:c1:6e:1f:71:a8:5c:b9:f5:99:fb:3b:f2:ff:7e:a2:5d:
         11:3a:bf:1e:9e:36:32:b9:31:1b:69:6e:85:9f:72:03:1c:4b:
         a5:91:3e:ad:72:38:45:76:06:2d:c6:eb:64:2e:ea:57:c2:ce:
         47:e7:be:35:32:c0:ff:2c:d9:8b:2e:00:c5:a2:9a:f3:c2:aa:
         96:ac:b3:a8:a2:7b:6f:70:c3:92:42:fc:25:3b:78:8b:30:2c:
         6c:c8:a9:f4:a3:6d:27:0a:02:50:0d:7f:a0:a9:f0:fb:04:a7:
         b5:81:ed:38:2e:48:d2:d1:ff:6e:40:f6:fd:f5:af:40:1e:5f:
         a7:9d:e3:e0:7d:14:27:79:ee:77:96:f8:3c:26:1c:55:d1:23:
         55:7a:af:2f:3f:86:95:4a:27:86:ba:b7:db:89:8a:2c:69:1e:
         c2:e8:3a:70:11:31:53:4e:02:52:b7:d0:a3:61:2e:cb:c3:11:
         d1:31:f3:9a:68:10:69:70:4f:62:5d:bc:0d:97:2e:05:58:79:
         34:d9:69:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:21:52 2025 by rpki-client