Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
File:                     LTDDBwxuYe3FimTzIz-pf8X1c5s.mft (raw, json)
Hash identifier:          dY4gT0IqpwPCtFxqw9vYOkVT1gPAxAz1Hm+Hzab+cZk=
Subject key identifier:   7C:3B:75:CB:8B:EA:6F:63:6E:FC:C1:D7:BC:C5:D9:A8:F2:BF:AD:12
Authority key identifier: 2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
Certificate issuer:       /CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Certificate serial:       01984DB06C471C817D56AFADFDC78AB708EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
Manifest number:          1606
Signing time:             Sun 27 Jul 2025 21:01:04 +0000
Manifest this update:     Sun 27 Jul 2025 21:01:04 +0000
Manifest next update:     Mon 28 Jul 2025 21:01:04 +0000
Files and hashes:         1: 8zTP6bF-8Ig21O-GNkBs9OXORp0.roa (hash: 9YznWSa8FHqt+jbmFpmAFvzlfMFLjOXYAA2TeVtspuE=)
                          2: LTDDBwxuYe3FimTzIz-pf8X1c5s.crl (hash: 3yZgaZNFgj45/DRMrVaGrJO0+BC7M9P3WCQgxusjuoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 21:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4d:b0:6c:47:1c:81:7d:56:af:ad:fd:c7:8a:b7:08:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
        Validity
            Not Before: Jul 27 21:01:04 2025 GMT
            Not After : Jul 28 21:01:04 2025 GMT
        Subject: CN=7c3b75cb8bea6f636efcc1d7bcc5d9a8f2bfad12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:85:62:19:27:6d:6c:ad:d3:7b:15:2a:e8:d0:
                    55:f3:ab:5c:31:31:97:aa:54:25:78:87:7a:1b:04:
                    c5:67:f2:00:d7:8e:de:86:b6:bc:e5:30:e6:a7:35:
                    df:7e:34:a0:3b:80:be:2e:46:8e:04:bd:35:b5:43:
                    d1:34:4a:e5:23:7a:9f:60:4b:82:0a:c8:96:a9:57:
                    9d:0a:2e:2c:04:59:c4:2d:1f:d4:fa:67:0e:6d:12:
                    5a:b2:de:3d:dd:29:4f:b5:0e:99:68:a1:7c:35:04:
                    60:44:76:a1:3c:dd:10:e4:26:e0:6a:90:ff:d8:ba:
                    1a:0d:ba:01:5b:9a:4f:05:fc:0f:4c:08:44:2e:14:
                    5f:92:88:3b:41:28:87:ed:30:23:b3:e1:64:83:55:
                    38:56:39:96:6b:67:be:41:3d:b1:44:dd:4a:72:9a:
                    b2:4d:ca:71:d5:38:2f:72:da:4c:ff:92:39:12:4f:
                    3d:f8:18:0b:58:da:50:2a:ac:06:53:b4:41:98:bc:
                    23:0d:89:e4:24:c2:8e:b1:c5:cc:9e:25:96:82:c1:
                    6a:0b:2c:26:d2:68:50:c1:ed:f3:ff:b2:13:e9:f9:
                    ee:76:87:f8:94:84:96:5c:8a:02:80:af:46:c3:03:
                    36:e1:ba:c3:b9:d2:10:4e:45:e4:cb:68:d2:6d:43:
                    bf:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3B:75:CB:8B:EA:6F:63:6E:FC:C1:D7:BC:C5:D9:A8:F2:BF:AD:12
            X509v3 Authority Key Identifier:
                keyid:2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:8e:fe:08:c9:b3:51:7a:a9:1f:b7:b1:7a:f9:d9:f7:8d:89:
         41:09:c1:af:6a:3f:8d:76:32:cb:ab:31:3f:8a:bb:5f:05:99:
         66:74:94:7a:2a:60:6b:71:bc:12:27:a7:85:70:89:00:73:0b:
         bc:07:02:9b:8a:8d:e8:a8:f2:a2:fd:35:71:98:32:90:f3:55:
         c5:7f:b3:3b:38:a0:b1:86:90:a7:16:c9:1c:78:6a:37:67:88:
         ec:e1:98:0a:14:63:e6:25:e7:d3:39:d8:cf:48:b3:0e:04:35:
         f1:83:e2:cd:c9:70:d4:d1:11:77:27:fd:b4:9f:0e:33:f0:0c:
         5a:90:46:78:c4:c7:83:e9:ba:c3:d9:30:a7:a0:ed:7a:7e:81:
         07:60:02:19:f8:4e:9d:51:78:88:e2:e0:a1:08:19:b3:2a:70:
         f6:06:0b:71:8b:a5:81:b2:9e:a1:50:1c:85:ac:58:19:05:5c:
         46:d7:0e:dd:03:ae:82:19:1a:31:c9:51:5e:fb:9a:d7:da:84:
         8a:db:d4:a8:b7:8b:dd:68:e7:4c:29:1d:62:f4:57:47:ba:d1:
         ec:03:2a:dd:62:53:47:b7:30:c2:f2:cf:02:9b:b9:d2:70:58:
         30:30:05:f6:34:d8:58:fb:4a:98:a4:1d:0d:5d:a2:1b:df:32:
         92:3c:7a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 05:17:10 2025 by rpki-client