Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
File:                     LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft (raw, json)
Hash identifier:          Z/4Ktw2R0YBWPZJInf0+UZbIzzgXJ/D2ll5+M/qpXNs=
Subject key identifier:   21:04:31:78:29:16:F5:1F:55:BE:DF:3B:8B:FE:90:C8:1C:77:54:D0
Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
Certificate issuer:       /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Certificate serial:       019921E75B358A448BFCCEEE7BEE15B4CC2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
Manifest number:          1674
Signing time:             Sun 07 Sep 2025 02:00:34 +0000
Manifest this update:     Sun 07 Sep 2025 02:00:34 +0000
Manifest next update:     Mon 08 Sep 2025 02:00:34 +0000
Files and hashes:         1: 2pOIOt6X219VN3XtCdkvfoMV1HM.roa (hash: KzERp6VpDMwzGAgg9zdxnmFvkE4p1OFFxh7fS85flGo=)
                          2: 9XHx-FMLe5KFZj_JCaCK7as9iPY.roa (hash: sCVbuVUuH2ERBnxlvsUX4HPEyoA2qfu7FIegGKtn/gw=)
                          3: GGgXcPcm_VptZUKYb8GMmNRReBo.roa (hash: j3A5aG9PwaRgDAI8o0WNyR1pWgweLYrS0ZRrTwX+vVc=)
                          4: LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl (hash: g+YcQaB0vA1RvEZZHVhjf4qqt2fJDunOhlwuXB4Mnis=)
                          5: aH3szR6jhr3LKmXFz58P9TMNq1M.roa (hash: k2DoDeJi//lnLAIw8oEfwg7P4tlKFybQoCOgJClGVQo=)
                          6: cg9vAN0so6RVwR7-dl1qakm7GSg.roa (hash: LWonZXTxxx8N9GGW8RVI8f+urakLOSBngPnNd8+m61s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:e7:5b:35:8a:44:8b:fc:ce:ee:7b:ee:15:b4:cc:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
        Validity
            Not Before: Sep  7 02:00:34 2025 GMT
            Not After : Sep  8 02:00:34 2025 GMT
        Subject: CN=210431782916f51f55bedf3b8bfe90c81c7754d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:03:03:00:96:dc:e8:ee:b9:e6:48:d4:62:ac:
                    8f:21:cf:ae:80:4b:c5:b0:91:07:c9:93:a0:68:15:
                    3f:b8:0f:b0:8d:dd:e5:ae:4d:46:61:a4:fa:cd:36:
                    7d:48:f5:ec:5f:fa:f0:49:b9:ef:72:c0:3e:dd:f9:
                    3b:a1:42:f3:ec:a7:a4:23:29:d0:59:c6:3f:bf:a8:
                    41:dc:b3:62:d6:69:bd:9f:70:75:47:1e:11:9d:72:
                    e8:57:6f:fc:cf:41:c4:fd:a6:50:83:76:cc:b6:c5:
                    5b:fd:ea:f6:af:d7:b9:21:87:6e:fc:4f:9b:ff:e8:
                    8b:85:2f:cc:02:c6:17:79:3b:3e:2d:92:93:c7:0b:
                    06:05:5b:ba:b4:ba:b8:83:e5:c4:dd:ce:c4:54:30:
                    41:75:7e:64:e0:2e:0b:1e:41:4f:7e:ef:5d:81:be:
                    b0:49:21:6a:22:1e:8e:55:c0:69:05:d3:71:15:ec:
                    19:b5:d1:80:fa:98:46:65:a8:73:ee:a8:c2:4e:c3:
                    c5:eb:de:e5:6b:80:78:16:77:a6:d8:7b:ff:4b:6b:
                    60:4c:bf:2b:e9:94:c8:d7:7e:07:1f:5f:6d:df:06:
                    df:48:ef:a5:32:8d:a7:1a:91:e0:d6:d2:90:3f:d2:
                    df:13:30:2a:9a:87:e4:66:f5:71:00:ce:b3:1d:77:
                    37:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:04:31:78:29:16:F5:1F:55:BE:DF:3B:8B:FE:90:C8:1C:77:54:D0
            X509v3 Authority Key Identifier:
                keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c9:b5:8e:a4:11:89:29:c2:7b:aa:40:c8:6e:12:3a:d5:4f:
         77:14:99:e3:b0:a3:39:be:a6:3e:50:f5:91:bf:9f:eb:32:a4:
         ce:09:01:81:d8:ff:eb:0a:d1:e8:49:e4:75:08:1c:0a:8c:0d:
         6b:af:7a:67:3b:6d:c0:20:cd:de:68:1b:43:21:72:e4:03:9d:
         9b:43:24:6a:23:67:31:b4:b9:f4:aa:c6:c5:0d:88:9b:69:ec:
         02:05:f8:0f:ab:58:c8:7c:eb:7e:6e:ee:20:bc:c7:a1:c4:88:
         64:b1:6f:8e:25:56:52:5b:0e:a5:d4:8f:63:ad:68:68:60:10:
         1e:bf:c0:1a:67:06:65:f7:16:a0:f3:1f:af:db:83:60:bd:c2:
         a0:4d:a7:a2:4c:28:78:ee:2b:5e:e0:54:8b:c2:67:8a:37:46:
         82:30:0c:17:7d:5e:51:81:1a:6e:19:b5:47:ca:20:ff:1f:46:
         46:05:64:1e:83:57:50:b1:bc:c3:85:06:f1:75:98:fa:09:7a:
         4f:f6:af:f7:3d:30:99:79:26:db:b1:14:bf:88:15:14:b6:3a:
         a2:c1:e3:99:f6:14:7c:cd:29:15:ba:b6:4f:5a:69:6c:d2:b5:
         54:20:b9:3c:2d:5c:af:fb:85:34:9e:91:91:b8:2a:13:05:04:
         7f:5d:58:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:17 2025 by rpki-client