Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
File:                     LtxXg3JdWVAZYqostbWQxCtX314.mft (raw, json)
Hash identifier:          1SO2H7x3qZMYsQuJutEDnxeHx5KPt+AGw0NtyoWXLOU=
Subject key identifier:   D1:7B:53:E7:C4:85:4E:90:CF:29:97:F2:C9:19:9D:63:1A:69:A3:89
Authority key identifier: 2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E
Certificate issuer:       /CN=2edc5783725d59501962aa2cb5b590c42b57df5e
Certificate serial:       0198488986BBB851009629B897B2C427A8CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
Manifest number:          134B
Signing time:             Sat 26 Jul 2025 21:00:29 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:29 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:29 +0000
Files and hashes:         1: LtxXg3JdWVAZYqostbWQxCtX314.crl (hash: HgoJnzloxC2sFt1IAPOKaEBcMfZTskpDvpXE/U8QOVA=)
                          2: r9FlEVdK2kxGPhNPo_-PFZXz5Hg.roa (hash: /9b7HSJW7nIal7/NVxztFoZrvte6gjhfTeD0u5Uqs6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:86:bb:b8:51:00:96:29:b8:97:b2:c4:27:a8:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2edc5783725d59501962aa2cb5b590c42b57df5e
        Validity
            Not Before: Jul 26 21:00:29 2025 GMT
            Not After : Jul 27 21:00:29 2025 GMT
        Subject: CN=d17b53e7c4854e90cf2997f2c9199d631a69a389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7a:cc:1f:0e:ca:86:65:3c:6d:db:91:dd:f2:
                    0d:0e:43:61:71:50:9d:dd:65:6e:f9:66:f2:e3:43:
                    b3:e7:03:6b:15:00:9b:30:66:c3:03:38:69:51:83:
                    7f:3a:a6:c3:e5:66:82:16:db:e1:f9:5c:87:c4:d8:
                    9d:92:7d:28:a0:a3:97:4d:a5:e8:e9:46:1a:de:68:
                    b2:81:c9:fe:34:de:6d:4d:8c:70:af:d8:c0:78:d5:
                    f7:a4:7c:61:de:7f:06:bd:83:24:3b:63:b4:7b:9d:
                    d5:cb:19:67:7b:0d:c1:5f:8f:01:13:5a:e4:73:31:
                    05:e2:4b:6c:43:82:cc:63:39:72:fd:39:b9:e6:37:
                    a2:84:fb:dc:d6:10:dc:89:b9:11:80:1b:4a:a7:11:
                    1c:15:4c:8b:54:f7:d8:5d:0b:3e:92:24:04:89:a9:
                    f4:59:14:f5:e0:75:e2:e8:f6:dd:91:ef:f3:e9:37:
                    30:66:47:92:c6:7b:3a:05:b2:c6:b7:f6:22:e2:6c:
                    30:6f:0c:21:d1:d6:8e:bc:1d:1b:97:29:d2:ac:d0:
                    3e:66:63:ec:a4:e6:17:11:7a:52:d7:4d:e8:81:f6:
                    97:2b:8e:43:44:e3:d8:75:3d:84:c5:3c:7a:d7:8a:
                    67:e6:69:62:35:16:28:5a:68:88:b0:cc:08:97:cb:
                    17:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7B:53:E7:C4:85:4E:90:CF:29:97:F2:C9:19:9D:63:1A:69:A3:89
            X509v3 Authority Key Identifier:
                keyid:2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:7c:f0:fe:23:d8:0f:13:72:c1:67:96:a3:07:1f:2b:ce:24:
         9b:6d:88:95:e4:e7:44:db:a0:9d:55:5b:a5:06:68:a3:da:92:
         50:b8:1a:e9:bd:97:de:e2:7c:90:9e:ce:49:d4:60:bb:1e:3c:
         35:ee:d5:50:92:e2:07:49:65:f4:a9:69:2c:d3:bf:6b:a5:61:
         0a:b4:cf:3a:3c:08:fb:13:c7:a9:14:d4:74:5a:4d:c6:01:cf:
         61:22:b2:15:bb:65:0f:2c:ab:00:d2:1c:ae:36:31:3c:1c:e1:
         c7:3f:f4:45:d4:b8:20:e0:a6:1d:88:1f:75:40:4f:12:98:4e:
         b0:b2:3e:cf:6e:b9:74:75:e9:4d:f4:fd:32:9e:6d:59:75:14:
         c5:b8:48:e6:74:0a:95:09:2f:38:e6:e0:bd:92:28:0b:a3:56:
         0f:f8:13:be:41:42:15:ef:2e:6e:94:69:27:f3:96:c6:d5:9a:
         0b:b8:39:27:2d:ac:e5:b7:04:b8:ff:8b:d2:66:76:ec:93:bf:
         f4:28:c7:38:de:10:53:ec:f1:5b:20:a4:f9:38:3b:c1:8c:e2:
         df:20:89:8e:6c:d4:ac:15:94:a9:28:a0:6c:50:b2:24:a8:75:
         de:18:43:31:04:ed:b3:98:40:3d:34:02:ef:99:36:d5:c8:06:
         be:87:b6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:10:03 2025 by rpki-client