Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
File:                     LDljuiquWr04pu7QnamFYR8bUCE.mft (raw, json)
Hash identifier:          nNctkKegmhx+/7Q5dpB2rsU/MePeDkiqrPmZJQ2wftg=
Subject key identifier:   7F:C7:BB:CD:CB:F2:09:84:6F:A4:2C:5E:AD:64:DE:1C:E8:C2:93:23
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Certificate issuer:       /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial:       01984776B55E87598D57A5886F4215EBED34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
Manifest number:          160C
Signing time:             Sat 26 Jul 2025 16:00:18 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:18 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:18 +0000
Files and hashes:         1: 1-50fUTEZMsqAfXKRVrjaJClUTPo.roa (hash: SmVCW5SnXSQgzJ45PrQg5gb9ODVy5PLQWa7gK9vYWEc=)
                          2: 1-rkdO3RS7mM1mTwHCfWVGwivLng.roa (hash: BJTIHx9AZNxRytnvkhO+a74x3XvNzoddWw1cmVufMkE=)
                          3: 1tphX7duVxQmoCj6iTv4JAUaFg0.roa (hash: 27/QMQNGQs+g1Yp+wtV2KRKQWUHGqze2SI6TtsCCM6Y=)
                          4: EsH1wGyP_4A3yjvtVJYJ-XBblic.roa (hash: DKgsauljcGZUwZ9qDQvDqIX1wcEbMc0VYZIYyCHtBuo=)
                          5: HuN4xP77vmRQRTk2kLL4bBeTBzg.roa (hash: cfsClMuW5Wg28hM5IbnYhS3Trbel7XimVvBZYWRkJfs=)
                          6: IMiFsNnN_p3sRoFH_C0d3qAaG_Q.roa (hash: oWqS9ieXKn+2R3xoqT+UPllXbLVMb7LbQgSB908taWQ=)
                          7: J8ocfDucYOz1VMSwyoOUgA7bURQ.roa (hash: 0LgKF+X2hpfhBTpNW2fTwMBm/B3MJkvlI1FoopslTw8=)
                          8: KE6TA5zPoru3bUa_YwQT_Aq4Tew.roa (hash: 6ftLo5kAogsbjk6fggK5ulzLgZYRlhQ2Mq1e7w+2xz0=)
                          9: LDljuiquWr04pu7QnamFYR8bUCE.crl (hash: CHl5xO3A117Jgb/KmPHsLxgtTMAHjySyQc5RMqOvf3o=)
                          10: MtbsaY1yHn7-MT1fnsMPsz6ewPc.roa (hash: OtSZHtlFSjGonybseZjtwCmp5aSwaiqTCQ92rP98kgk=)
                          11: PskBO-hDKENpyj5TTl1bEDl9XFc.roa (hash: tVSD5b97fIERDtyitQPZy1bsEOcd19dJWMvlkxpkiNA=)
                          12: Vr7CtL_FipPK_JMmN6nyOTkF9N4.roa (hash: O291N7rIOeqa+sP7ZzErWn7Ntd1lj5fabHHpKHOsvGs=)
                          13: Y1Q65_50tcxlLXfWRBA87l5aDQw.roa (hash: g92z5H6lVXAl9mxdMgSPp7qM0b2CPQJ/omh9m+p0QO4=)
                          14: tfcI96HYGRf5GQ2bB8COjBYLdUQ.roa (hash: TrgrDqQXriqLm4qlMfISeHZWAMtYQBeQJnDLH6tGFGI=)
                          15: wajonDxdBm0pS767lGRq06Z84rM.roa (hash: Ne2muvaUoR5VivXU1vdN76aOmdMN56u55EBtWCDX1QI=)
                          16: yyYpMTy-uoOfGWdAgBKsqlQl5P4.roa (hash: bh3l2F5hAe5r/ruUhfgdEqGkzm/2Cu1kCzAkVz4n/4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:b5:5e:87:59:8d:57:a5:88:6f:42:15:eb:ed:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
        Validity
            Not Before: Jul 26 16:00:18 2025 GMT
            Not After : Jul 27 16:00:18 2025 GMT
        Subject: CN=7fc7bbcdcbf209846fa42c5ead64de1ce8c29323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:29:64:24:06:21:c4:5f:3d:2a:65:69:7d:c8:
                    45:02:a0:98:1b:24:16:fc:4d:80:a6:68:57:c1:98:
                    f1:5b:f7:4e:26:d5:2e:9e:8f:c6:76:e2:13:26:6c:
                    14:f2:a6:54:65:33:0d:35:f8:5f:63:80:f4:b8:78:
                    85:c5:44:21:f1:06:ba:61:cb:05:09:72:07:36:90:
                    dc:7b:9a:cd:de:72:9c:ac:a0:46:6b:99:7e:eb:62:
                    b5:04:e9:d7:62:26:7a:50:d7:5c:3a:4e:59:c5:8e:
                    89:96:08:10:d3:4d:fe:63:ab:94:5c:e4:9c:d7:38:
                    e4:20:05:aa:69:3b:8f:ce:a4:ff:e1:81:07:5d:dc:
                    e0:98:cf:a7:a8:48:77:99:95:c5:f9:7a:3f:99:30:
                    df:e8:2c:3f:1d:65:aa:6c:51:78:08:5c:d9:1a:e0:
                    35:0e:38:b8:24:c3:4a:a3:b2:20:51:af:76:07:4c:
                    08:e0:02:8b:99:be:bf:58:31:67:43:cb:d2:7c:38:
                    c2:da:23:66:14:e9:c3:be:d9:72:78:e7:76:f1:41:
                    af:3f:29:d5:9e:36:0b:a9:c7:8d:ea:e9:b3:3a:20:
                    d7:f5:be:5d:59:92:71:46:9e:ef:10:3e:6d:f6:10:
                    24:2e:e0:15:96:8a:13:cb:5b:00:95:27:09:4c:60:
                    f8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C7:BB:CD:CB:F2:09:84:6F:A4:2C:5E:AD:64:DE:1C:E8:C2:93:23
            X509v3 Authority Key Identifier:
                keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:7b:11:58:7e:88:a4:30:25:2c:07:b0:b0:57:8c:62:89:46:
         fa:dc:b3:ae:fd:02:f8:11:67:78:37:c4:8e:0b:81:dd:91:71:
         40:f9:78:cc:87:36:9b:d6:f2:ac:e5:68:c0:97:ea:4d:0d:af:
         4a:0e:63:9a:2a:94:1f:fb:26:d0:5b:24:7e:6a:09:d4:0c:4d:
         d9:5f:0c:4c:b7:0a:7c:8e:3b:34:ee:99:0d:a9:06:28:ca:b0:
         d1:c7:65:31:74:12:e9:a9:81:10:11:09:1b:c0:83:56:06:01:
         c1:82:b8:c7:27:e8:a5:68:7d:76:d7:c5:33:d4:11:50:2b:ed:
         10:fb:77:38:89:1f:1e:a2:0d:82:a5:50:f2:ce:95:b0:7e:07:
         8e:9c:9f:af:13:d1:31:04:6f:5e:49:66:a1:0b:7a:ec:ed:17:
         4c:ad:8e:22:c6:46:35:de:37:8a:0f:68:0f:1a:5a:61:79:c6:
         d8:d0:a2:89:90:bf:53:cd:ba:3d:61:2b:d6:8a:7b:57:27:09:
         02:12:ee:07:7c:43:e6:36:1e:dd:2d:83:4a:02:07:cd:75:af:
         5f:8c:4e:32:0c:2b:03:32:93:a4:0b:9e:af:25:36:38:b0:49:
         65:11:91:48:1d:17:f7:c6:44:56:96:bd:23:13:0b:a0:3b:b3:
         c3:f6:21:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:59:06 2025 by rpki-client