Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
File:                     slLdonImonXj55s3TI8mPNLY7NE.mft (raw, json)
Hash identifier:          lOFDLLnL8lePou94+1/8F4V/bxRj8IERK3REprwBwGM=
Subject key identifier:   ED:69:9A:AC:1F:56:A8:1D:A5:40:72:E1:33:94:E9:57:2D:B7:49:F2
Authority key identifier: B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
Certificate issuer:       /CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Certificate serial:       019935377392F0595057BD469047B5613B1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
Manifest number:          167E
Signing time:             Wed 10 Sep 2025 20:00:50 +0000
Manifest this update:     Wed 10 Sep 2025 20:00:50 +0000
Manifest next update:     Thu 11 Sep 2025 20:00:50 +0000
Files and hashes:         1: 7QMuMfRcubM7Dw9mRD9Oeleudm0.roa (hash: 34yr97BhHkN5u8FjcTkMX2e6CbJy1pgn7SWZTkyU8GQ=)
                          2: slLdonImonXj55s3TI8mPNLY7NE.crl (hash: 6Rn8LuWDsSSQQLNxXoAfptqCS18tIbwZ1CAR42K365s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:37:73:92:f0:59:50:57:bd:46:90:47:b5:61:3b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
        Validity
            Not Before: Sep 10 20:00:50 2025 GMT
            Not After : Sep 11 20:00:50 2025 GMT
        Subject: CN=ed699aac1f56a81da54072e13394e9572db749f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a6:00:3b:9c:04:27:a4:f4:93:c3:5f:3a:ec:
                    40:3a:c9:da:06:96:1c:d0:e1:24:c9:33:9c:ec:47:
                    42:bf:82:c3:cc:d2:d1:4d:ea:b0:00:c3:3d:f3:29:
                    28:68:a3:05:8c:70:68:16:97:97:03:c2:a7:47:8a:
                    65:d4:d7:85:4e:a8:53:5d:09:cc:d6:93:28:1c:42:
                    bc:fe:21:44:cd:e5:82:a6:45:ad:17:93:a7:78:d3:
                    cf:5d:d3:2f:f5:1d:15:bd:b7:19:65:36:a6:56:8e:
                    0a:29:71:c6:4d:82:7f:59:8a:c6:98:64:fa:ae:af:
                    65:68:8e:ae:a6:49:c4:71:32:b1:27:29:15:50:5e:
                    63:7f:b4:6c:91:b4:af:db:2b:c4:56:5c:71:2c:04:
                    89:37:48:45:99:66:bb:4f:e7:fa:eb:4c:5a:f2:c6:
                    55:97:60:d0:3d:a4:aa:8b:66:f4:9e:bd:74:56:1c:
                    89:8c:64:a2:d5:0f:6b:30:9d:42:26:6f:9c:16:49:
                    ea:cc:61:59:ca:eb:04:9b:9d:99:c6:0d:c8:eb:6c:
                    43:a2:df:5b:52:16:93:f0:7c:72:88:a0:e4:3f:a3:
                    b6:3d:95:cf:02:c1:22:29:b3:0d:e1:ae:83:0e:38:
                    9f:98:03:52:7b:6d:9b:08:5f:58:95:0f:e3:1a:e3:
                    29:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:69:9A:AC:1F:56:A8:1D:A5:40:72:E1:33:94:E9:57:2D:B7:49:F2
            X509v3 Authority Key Identifier:
                keyid:B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:9c:3a:80:85:70:6a:6d:21:53:76:60:91:e6:44:26:79:8c:
         3a:7a:28:43:48:0d:93:a8:c5:7d:11:ce:86:7d:77:fe:39:90:
         8d:d3:3f:f1:c1:ed:46:2c:c0:24:e0:fd:03:87:19:5e:14:34:
         4c:f4:87:07:0c:49:4d:51:a5:1e:fd:24:5c:11:84:90:28:b2:
         52:6c:fd:90:18:ec:fa:87:a4:c3:a5:c9:90:6d:1a:a0:0a:89:
         0b:8c:c7:eb:a8:a0:69:2d:71:97:5a:4e:c1:9a:bb:90:b1:18:
         01:50:68:e4:e4:48:d1:44:dc:e4:ee:26:b1:ab:b7:b7:96:b6:
         10:c9:af:f2:9d:c9:24:0b:8a:50:00:10:69:71:ae:d1:2a:38:
         ca:8f:e6:6c:08:48:1d:8a:18:0d:4f:7f:30:0b:a3:bc:ea:ad:
         d3:3c:92:71:a8:4d:81:45:9b:2d:65:c4:28:9a:c8:21:23:e3:
         b4:5c:3a:a0:f8:9a:33:bf:25:92:94:2e:04:00:3d:6f:b2:12:
         f1:0d:55:8e:ea:fd:84:0e:10:26:4e:0e:d6:04:39:eb:2c:9c:
         9c:c1:3b:30:e8:57:fa:97:a3:63:e5:5c:f3:86:c5:ab:07:e5:
         7a:f6:00:5b:85:58:a0:ce:fd:50:33:eb:f9:8c:ba:4c:a1:b4:
         09:42:94:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:24:14 2025 by rpki-client