Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
File:                     l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft (raw, json)
Hash identifier:          lIO40OXY1ZJEy213dMnsejfpaaKr4rhrPObg4B5k8Ms=
Subject key identifier:   27:2A:1F:C4:01:97:06:0A:7B:8A:49:5A:27:98:C3:C0:48:55:30:5B
Authority key identifier: 97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79
Certificate issuer:       /CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
Certificate serial:       019922FAF67C9E2EA08C76911EED274C4EA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
Manifest number:          1468
Signing time:             Sun 07 Sep 2025 07:01:36 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:36 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:36 +0000
Files and hashes:         1: GYwl8BFvRYxoWPkgG0LFX5Kh3wY.roa (hash: po/DPr4lC/jP6El38brtzMkXAB3zwNPviTVID9wQBCU=)
                          2: l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl (hash: vFMuwFH5GpyOtQusKUVURJOF5rWpeThsWsDPn/Fl+cA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:f6:7c:9e:2e:a0:8c:76:91:1e:ed:27:4c:4e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
        Validity
            Not Before: Sep  7 07:01:36 2025 GMT
            Not After : Sep  8 07:01:36 2025 GMT
        Subject: CN=272a1fc40197060a7b8a495a2798c3c04855305b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:15:db:33:f4:2e:88:5f:e6:7c:50:e5:fc:c4:
                    1b:0c:3c:a6:f1:66:0b:d7:6d:67:d2:a9:6c:13:04:
                    5f:9f:ef:80:23:39:0c:c4:b7:41:d4:96:ac:f3:64:
                    e0:31:b5:7d:40:02:97:7f:db:0e:7f:49:e0:71:9a:
                    69:f1:ea:24:ea:44:e7:89:06:75:86:01:0c:a2:c2:
                    9e:75:39:af:a1:07:63:8b:6f:b7:d8:9f:6d:86:09:
                    64:09:6c:a4:9f:80:90:d9:fe:da:97:e1:b3:e0:d4:
                    ff:8c:da:d2:cb:92:c4:7d:f1:88:4a:dc:fc:4e:c9:
                    8e:69:ff:bc:bf:0a:e2:ca:cb:86:e5:8d:0b:02:4f:
                    39:25:92:a5:35:2b:ca:ff:47:02:08:c4:c4:ed:c4:
                    d0:85:d2:04:54:db:85:6d:83:4c:c8:a6:b9:1f:4d:
                    5c:1a:fe:f6:88:92:d6:0c:9c:70:0f:df:97:6b:80:
                    c4:18:ba:4d:b1:b2:ef:8f:a1:f8:d8:be:3b:c7:03:
                    a1:ee:70:46:fa:f1:87:7f:b6:0d:54:ee:3f:64:fe:
                    e0:ad:76:44:2e:59:b7:f3:a6:24:99:d1:27:0c:ed:
                    56:25:db:d3:b2:38:25:e2:db:71:37:77:c3:ae:b3:
                    5d:2a:f9:e1:30:b3:29:ac:fa:4c:d8:a3:6d:40:af:
                    11:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2A:1F:C4:01:97:06:0A:7B:8A:49:5A:27:98:C3:C0:48:55:30:5B
            X509v3 Authority Key Identifier:
                keyid:97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:c4:fe:34:03:79:a7:44:a9:99:bf:ea:a3:49:75:fd:d3:4b:
         fb:7f:84:9a:f8:23:44:fe:d6:cf:1b:0b:d4:c0:1d:67:3e:22:
         f0:aa:1e:1c:6d:16:8a:a0:72:a7:df:a4:05:1a:80:46:62:ee:
         f3:a4:a7:78:2e:cd:08:bd:90:75:2a:92:29:be:3f:dc:2c:c7:
         83:e5:dd:f0:d2:13:6a:80:dc:8d:54:31:c9:cb:5d:6e:ac:66:
         f0:4c:79:05:91:bf:9b:0b:29:a8:6b:2c:98:9a:b5:07:a6:ed:
         f5:33:66:98:9f:7a:fa:1a:03:b3:0c:8f:3a:a7:eb:27:09:24:
         b4:dc:c8:d2:16:17:a9:b1:b4:a4:3b:ed:bb:1d:79:86:6e:8c:
         8a:09:c3:63:b6:9a:60:e8:22:b2:b3:38:dd:e0:ed:c6:7a:53:
         c7:45:d2:22:01:2f:07:1a:8a:35:2f:77:2c:29:c6:f5:38:ed:
         c7:8a:8b:37:97:4d:68:b2:93:56:75:e5:7a:a9:04:5c:aa:73:
         18:3e:3d:3b:85:6b:21:f5:20:7c:b6:47:bb:b7:7a:46:ce:68:
         3d:6b:2d:71:30:c0:3c:58:8e:10:2a:e1:2e:06:8b:36:55:f8:
         f0:14:88:00:14:1f:5a:b6:04:40:db:88:96:32:f2:e9:0e:7b:
         ae:c9:e7:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+vZ8ni6gjHaRHu0nTE6jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NDg4MjhkN2I5OWIwYTk3MDE3ZWMyNmJjYmVmZTk2ZmRi
ZTk1NzkwHhcNMjUwOTA3MDcwMTM2WhcNMjUwOTA4MDcwMTM2WjAzMTEwLwYDVQQD
EygyNzJhMWZjNDAxOTcwNjBhN2I4YTQ5NWEyNzk4YzNjMDQ4NTUzMDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBXbM/QuiF/mfFDl/MQbDDym8WYL
121n0qlsEwRfn++AIzkMxLdB1Jas82TgMbV9QAKXf9sOf0ngcZpp8eok6kTniQZ1
hgEMosKedTmvoQdji2+32J9thglkCWykn4CQ2f7al+Gz4NT/jNrSy5LEffGIStz8
TsmOaf+8vwriysuG5Y0LAk85JZKlNSvK/0cCCMTE7cTQhdIEVNuFbYNMyKa5H01c
Gv72iJLWDJxwD9+Xa4DEGLpNsbLvj6H42L47xwOh7nBG+vGHf7YNVO4/ZP7grXZE
Llm386YkmdEnDO1WJdvTsjgl4ttxN3fDrrNdKvnhMLMprPpM2KNtQK8RjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcqH8QBlwYKe4pJWieYw8BIVTBbMB8GA1UdIwQY
MBaAFJdIgo17mbCpcBfsJry+/pb9vpV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDBpQ2pYdVpzS2x3Ri13bXZMNy1sdjItbFhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8xZTFlYmYtYzNhYy00OWExLWI2YTgt
YTRhMDc1Mzk4YjBlLzEvbDBpQ2pYdVpzS2x3Ri13bXZMNy1sdjItbFhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8xZTFlYmYtYzNhYy00OWExLWI2YTgtYTRhMDc1Mzk4YjBl
LzEvbDBpQ2pYdVpzS2x3Ri13bXZMNy1sdjItbFhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMT+NAN5
p0Spmb/qo0l1/dNL+3+EmvgjRP7WzxsL1MAdZz4i8KoeHG0WiqByp9+kBRqARmLu
86SneC7NCL2QdSqSKb4/3CzHg+Xd8NITaoDcjVQxyctdbqxm8Ex5BZG/mwspqGss
mJq1B6bt9TNmmJ96+hoDswyPOqfrJwkktNzI0hYXqbG0pDvtux15hm6MignDY7aa
YOgisrM43eDtxnpTx0XSIgEvBxqKNS93LCnG9Tjtx4qLN5dNaLKTVnXleqkEXKpz
GD49O4VrIfUgfLZHu7d6Rs5oPWstcTDAPFiOECrhLgaLNlX48BSIABQfWrYEQNuI
ljLy6Q57rsnngA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:21 2025 by rpki-client