Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
File:                     LO_eMLilizIqQx8IKe1P8ztarBg.mft (raw, json)
Hash identifier:          9z6wxF6i+TUWiskd7BboWXg6kiNQekZl7x7OqewdF+Q=
Subject key identifier:   A6:4A:65:3A:96:97:4C:A9:E2:05:97:77:1B:24:14:EB:9C:6E:9B:27
Authority key identifier: 2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18
Certificate issuer:       /CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
Certificate serial:       019933132D0D10D1C054DF34AFB391B7A43B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
Manifest number:          167B
Signing time:             Wed 10 Sep 2025 10:01:58 +0000
Manifest this update:     Wed 10 Sep 2025 10:01:58 +0000
Manifest next update:     Thu 11 Sep 2025 10:01:58 +0000
Files and hashes:         1: LO_eMLilizIqQx8IKe1P8ztarBg.crl (hash: Pe1/diZzOfsYqTRn7nnnb5Q2JKBEuMvnFhlIRXomePI=)
                          2: mQcxBkZ7-mWqzkv2ZtLrNKCsXXw.roa (hash: KchD7ZXPUhVAHhfHUs6iNxTS5Xs7vYjFeQVLeVV+Bu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 10:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:13:2d:0d:10:d1:c0:54:df:34:af:b3:91:b7:a4:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
        Validity
            Not Before: Sep 10 10:01:58 2025 GMT
            Not After : Sep 11 10:01:58 2025 GMT
        Subject: CN=a64a653a96974ca9e20597771b2414eb9c6e9b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:2b:e1:24:e9:41:0f:0b:ce:da:ed:a2:8d:
                    05:06:05:73:ca:16:6a:b8:35:37:5c:93:76:d1:17:
                    39:26:7a:9d:75:9a:1b:bc:45:bf:86:85:12:85:d5:
                    a9:5f:6f:a8:bc:3a:68:60:65:3c:d6:cb:ad:fd:06:
                    ea:ef:ca:95:d1:de:fc:9b:57:08:55:20:10:5a:d1:
                    90:89:b3:65:a6:31:49:fc:93:4a:ac:c1:f3:36:6b:
                    56:7a:b4:13:95:b6:60:5c:4d:60:80:a3:45:ab:96:
                    9b:db:2c:0c:1d:f6:cf:62:24:ad:d1:b4:6c:e0:20:
                    84:08:df:2c:ed:30:20:c9:ed:1e:e6:c5:db:24:06:
                    47:45:ee:c6:fb:da:ac:a0:f3:09:1c:f2:b9:49:c6:
                    3f:e3:fe:56:af:db:ad:9a:7f:42:5a:2a:c2:e0:2f:
                    84:3b:10:51:de:41:63:16:0c:e6:08:4e:4e:aa:04:
                    3e:ee:99:3d:75:b4:a8:5a:10:a8:03:ea:3c:8c:30:
                    4c:8e:8c:19:4a:5c:3a:50:ec:3d:0c:15:e0:c1:b5:
                    ec:ba:b4:a5:94:62:02:51:18:9b:de:3a:40:ad:4d:
                    a3:43:3c:25:84:33:59:df:1f:6e:6f:53:ad:c4:59:
                    c5:ac:de:9e:e8:94:59:de:d2:ff:82:3b:2a:1d:c9:
                    4d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4A:65:3A:96:97:4C:A9:E2:05:97:77:1B:24:14:EB:9C:6E:9B:27
            X509v3 Authority Key Identifier:
                keyid:2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f9:9e:31:d5:f7:0b:73:7d:38:0b:83:42:a5:d5:9c:bc:16:
         dd:0b:92:ca:dd:57:f3:a4:74:cb:51:a5:aa:59:9b:05:f2:39:
         4b:47:a8:cd:44:fe:d1:90:2e:22:00:35:90:12:e4:a6:c4:13:
         83:60:7d:15:cc:02:17:da:62:e1:b2:a4:69:bb:73:36:6e:92:
         7a:fc:e3:0f:69:85:4a:23:fb:40:0b:b9:f5:44:87:ec:19:2e:
         fb:5c:dc:ea:cb:2d:c9:bb:0e:9e:b5:3f:2e:bc:af:98:42:bd:
         c6:6d:89:a8:f1:de:80:32:fd:20:93:58:be:f1:3a:13:b4:a6:
         96:b2:fa:85:8f:42:2a:14:81:59:33:63:14:e0:b5:02:85:c6:
         7a:2e:91:16:4e:f6:1b:1d:b3:8d:3b:a2:9f:85:78:6b:c8:39:
         d5:bd:8e:76:30:ad:73:76:63:f2:3f:72:bf:0b:04:40:b2:21:
         66:c7:89:f1:fa:85:e4:18:56:1d:44:89:6c:06:39:73:96:cb:
         6d:83:04:b6:0d:a0:de:71:ad:4b:0a:63:30:16:2d:0d:89:ac:
         25:74:e6:7b:11:53:f4:8d:87:05:5a:80:61:0e:18:71:e7:6e:
         38:ec:19:a0:56:7f:b9:54:f0:b6:6f:d8:22:4b:97:89:b4:52:
         50:35:be:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:50:57 2025 by rpki-client