Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft
File:                     LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft (raw, json)
Hash identifier:          uPI8BWCuIAiugtkZ02ho4n+Bd2DXJPxK6buIOU5nVjY=
Subject key identifier:   69:E6:06:DB:79:14:D0:97:03:2F:C7:4E:9D:4F:04:C2:A0:76:20:0E
Authority key identifier: 2E:5C:57:1B:F9:BF:A7:E2:1B:C7:E3:39:F9:B8:EE:BE:06:13:37:11
Certificate issuer:       /CN=2e5c571bf9bfa7e21bc7e339f9b8eebe06133711
Certificate serial:       019A21E4CA4D9AE86651288AA072F5465BC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft
Manifest number:          0DDC
Signing time:             Sun 26 Oct 2025 19:00:33 +0000
Manifest this update:     Sun 26 Oct 2025 19:00:33 +0000
Manifest next update:     Mon 27 Oct 2025 19:00:33 +0000
Files and hashes:         1: LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl (hash: WP0vbLf6qHNi9ImYQ4Zm40MkHBFgnA+3l+TuaQwGcfA=)
                          2: RfAA1xaR3Se-RvvvQKJJ2gMoa-w.roa (hash: ZjUwK6nsqDf3RG0U3GrfbUxp0iL0zaNbRBEGccx3Ch0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:e4:ca:4d:9a:e8:66:51:28:8a:a0:72:f5:46:5b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e5c571bf9bfa7e21bc7e339f9b8eebe06133711
        Validity
            Not Before: Oct 26 19:00:33 2025 GMT
            Not After : Oct 27 19:00:33 2025 GMT
        Subject: CN=69e606db7914d097032fc74e9d4f04c2a076200e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c5:d8:1e:32:c5:42:b0:0f:75:4a:6a:23:aa:
                    23:b2:75:c8:dd:8d:01:7f:c8:fb:98:3e:b8:2d:d9:
                    d4:eb:c7:87:4e:dd:19:55:c5:d5:49:fb:a7:75:09:
                    fb:00:e4:a1:a7:90:86:74:da:1d:08:ad:b3:f9:9e:
                    ef:26:0f:c4:42:ee:d7:c6:ec:bd:cc:1a:91:ea:88:
                    42:b0:03:49:16:98:d5:9d:fe:da:5c:88:53:43:bf:
                    55:d1:a2:19:46:37:df:2a:bf:d6:2c:ba:21:0e:99:
                    09:26:81:50:3a:63:82:c8:79:de:9c:9c:67:be:53:
                    3c:43:aa:e8:4e:7d:c2:0f:ff:42:86:0f:2d:b5:10:
                    9b:ac:4f:0e:04:28:64:ee:5a:b3:d9:c3:fa:b5:32:
                    fd:39:54:1a:4b:5f:dc:9a:ad:9b:39:10:f1:95:57:
                    74:e8:17:75:c2:df:88:01:99:1f:a1:99:3b:3b:d6:
                    ec:53:35:6c:83:7f:bc:82:5e:87:b2:74:7f:3f:4a:
                    10:19:e9:67:60:98:de:73:98:50:a2:e0:1c:51:eb:
                    32:f1:35:65:93:e1:f8:cb:b3:f2:bb:c1:0f:51:39:
                    6d:2a:fc:03:e0:f7:4b:1b:ef:cd:39:42:e4:f9:04:
                    63:37:ad:f9:a0:59:3e:5d:b6:27:31:cb:6b:6b:9a:
                    e0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E6:06:DB:79:14:D0:97:03:2F:C7:4E:9D:4F:04:C2:A0:76:20:0E
            X509v3 Authority Key Identifier:
                keyid:2E:5C:57:1B:F9:BF:A7:E2:1B:C7:E3:39:F9:B8:EE:BE:06:13:37:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:9b:7b:16:6d:a8:22:8c:63:a2:eb:1c:9b:ae:f5:86:1b:0d:
         22:e9:07:11:f3:c8:db:43:58:35:1b:a9:c4:8a:46:8b:39:8a:
         2e:7b:8c:df:40:61:51:e2:be:4c:db:24:ae:30:83:d5:68:0f:
         f6:cf:7d:d8:69:9c:23:71:19:0b:c4:76:11:33:cc:c2:d0:21:
         e5:ed:e9:ef:b2:bd:f7:db:d1:92:1c:50:1e:0f:00:68:b6:37:
         c7:3f:7e:7f:fa:37:41:6e:97:cc:a7:ac:e6:4d:af:79:4b:94:
         54:06:e9:cb:76:f7:34:9a:6d:12:ab:52:95:bf:a0:df:20:82:
         f0:95:86:43:c8:96:21:aa:e5:79:c6:0e:b4:38:ef:a0:8d:ed:
         82:9c:6b:e4:a0:0b:c6:5d:7d:94:b2:93:f9:3d:dc:47:e1:3a:
         d8:7a:3d:63:fe:db:4e:8d:53:68:16:8f:c2:13:2f:1f:f7:db:
         44:e8:12:4f:cd:bd:5b:51:e6:57:05:b2:04:c6:15:b3:77:80:
         ce:44:54:e9:12:5e:a7:3c:3b:5a:51:be:69:2b:bb:32:32:ef:
         58:bb:1a:a0:69:27:f2:8d:ee:76:57:e8:5d:1a:e4:ef:c6:24:
         2a:76:50:bc:8f:65:ec:16:94:fd:37:47:8e:a5:27:6b:84:6a:
         95:de:13:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:16:02 2025 by rpki-client