Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft
File:                     LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft (raw, json)
Hash identifier:          LpdhP8MHoaTodwwLxFuFSYMGpHpzKs3TTeJZ/VvVJMw=
Subject key identifier:   FF:ED:E9:61:5A:9E:7F:C9:4C:0A:3E:F1:C4:92:72:7C:76:C7:F0:92
Authority key identifier: 2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2
Certificate issuer:       /CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2
Certificate serial:       019921B059B5047D5D8AF58EA5559F59CE20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft
Manifest number:          0DE3
Signing time:             Sun 07 Sep 2025 01:00:29 +0000
Manifest this update:     Sun 07 Sep 2025 01:00:29 +0000
Manifest next update:     Mon 08 Sep 2025 01:00:29 +0000
Files and hashes:         1: LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl (hash: mqFpyAhNrZdmY3NRZBa/ZKqFTTefZnuSK8Pe7/Q63VI=)
                          2: YwSn1lGGwl7KLAZTYR2zvBndC9g.roa (hash: 8r7UZf1B94Wo3xzBwCz0diJ6mM+rBducaQI/NNaX0EM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b0:59:b5:04:7d:5d:8a:f5:8e:a5:55:9f:59:ce:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2
        Validity
            Not Before: Sep  7 01:00:29 2025 GMT
            Not After : Sep  8 01:00:29 2025 GMT
        Subject: CN=ffede9615a9e7fc94c0a3ef1c492727c76c7f092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ce:d3:18:6e:58:ce:12:63:a0:07:16:cf:23:
                    ef:2a:f7:f1:d7:d9:69:16:9b:a1:ab:01:63:67:a0:
                    bb:f8:85:34:b0:2a:0c:ca:1b:02:8a:62:03:29:5e:
                    5b:fc:2c:e0:19:3e:11:da:29:3e:97:58:fb:e6:d9:
                    9f:35:a0:16:e1:02:fe:1d:f7:9d:6f:1e:d2:0c:62:
                    92:0d:08:6f:e2:4d:d8:60:4c:16:3c:b1:0d:c9:65:
                    e2:6d:42:b4:b3:81:1a:b3:44:3b:ad:26:66:e2:5b:
                    1c:f6:ea:4c:1f:44:49:f1:ce:d0:c4:77:f3:66:a9:
                    fb:7d:99:8f:94:b2:26:dd:7b:2c:36:82:f7:fb:36:
                    85:66:a4:47:fa:ea:99:25:f7:53:d4:ff:70:97:9a:
                    76:42:93:96:c0:29:1f:00:ef:c7:73:e5:b6:be:2e:
                    a0:e8:eb:e6:40:77:ea:45:0d:9f:dc:27:12:8b:2b:
                    92:6d:a5:00:7e:32:14:f4:fd:78:29:f9:d4:fb:c0:
                    b9:15:4c:08:44:f3:db:b0:4b:a1:78:22:45:de:e9:
                    70:a2:67:32:11:a6:fa:47:1c:2e:85:64:72:dd:f8:
                    00:52:f3:7d:74:54:c2:7d:28:6a:a3:84:1a:ed:43:
                    79:9e:13:ce:a6:96:57:22:c7:3e:5f:ad:81:0d:a7:
                    bb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:ED:E9:61:5A:9E:7F:C9:4C:0A:3E:F1:C4:92:72:7C:76:C7:F0:92
            X509v3 Authority Key Identifier:
                keyid:2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:7b:f7:28:22:6e:18:0c:a0:9e:19:05:09:8d:c6:28:04:ef:
         ad:ea:79:31:dd:a8:27:ba:50:df:5e:c7:d4:d8:95:e1:dc:bb:
         5b:10:c3:8a:e1:29:12:0b:5d:87:b8:59:72:35:24:7f:b5:59:
         eb:21:48:b7:1c:35:3d:01:ef:41:ef:ca:ba:74:7c:65:58:89:
         49:38:ee:83:90:12:4b:ba:f1:42:a3:d6:56:4d:25:fa:48:3b:
         e8:28:4d:18:f4:1e:c7:41:12:0f:e3:a2:f9:74:28:2d:24:6a:
         43:79:fe:65:19:8a:48:2a:91:8e:92:36:91:d1:18:f2:30:9f:
         88:1b:db:80:d1:a0:31:05:69:bc:57:97:82:4d:a5:cd:e9:84:
         b6:fd:5b:57:17:af:fc:aa:3c:59:0c:da:0b:8c:b6:26:7f:e3:
         36:6b:a3:9a:90:4f:6e:cc:a2:a0:21:28:ee:b3:10:be:fb:ad:
         52:ab:cc:50:c7:bc:8f:e7:d2:9f:a8:bf:52:88:12:6e:ba:12:
         ca:6e:31:b9:71:00:53:3d:9a:45:d2:08:bb:af:b8:6a:db:cd:
         bd:1b:00:37:2f:a4:39:5e:97:fd:3b:0d:82:71:22:6f:9b:09:
         65:c0:29:ef:c1:be:0e:74:6c:5f:1a:26:22:b3:bc:31:4e:42:
         80:3e:fd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:33 2025 by rpki-client