Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
File:                     LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft (raw, json)
Hash identifier:          E6NYM/G4Xe4wAQ8a9uyD8MESZgNJS4g7wz6amWuwbsc=
Subject key identifier:   18:EC:0C:34:62:04:C7:00:58:CC:CF:2C:7D:45:1E:A6:BE:EF:4F:4B
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Certificate issuer:       /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial:       019851FAA538398A2AE296D559BAFA0A40B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
Manifest number:          1615
Signing time:             Mon 28 Jul 2025 17:00:37 +0000
Manifest this update:     Mon 28 Jul 2025 17:00:37 +0000
Manifest next update:     Tue 29 Jul 2025 17:00:37 +0000
Files and hashes:         1: 01X6uEQds9Y9s0Nj6vCgByaYk4o.roa (hash: zRPbzdJELLZCFUdSNf06UKLGLPusehNC5YazUYIIsTM=)
                          2: 0tRB9OCC9xas7e6MVH8FJn0Ja3c.roa (hash: cbQqhS8rCleS/cZGOp49BraWBlvDlSz9avYU2nr/DSU=)
                          3: 9tSoewyxusy3XiU4MPlfgCKviQM.roa (hash: 4mAbpqKotMEUi55o3nvNZU9MOu3aXF7KZ9T6UnO+Ftc=)
                          4: FSPf9GPeE9OlDZ4wjRNl7LN012Y.roa (hash: qnw8o1IATV+jUOf4O3NJflnEbA239Ao6/8MIoEaYYAw=)
                          5: Ik5x4sxVpJGKDVZlhpgzVJyFcdE.roa (hash: hUjlBlwFujOIxjIsUbH4qKxEVtqgo5ThvH9AsXM845U=)
                          6: LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl (hash: tgs5erVZwcLD9Q9I2TovUkrTxt3kNc1A5FIoX6w/qi0=)
                          7: ewUitY15BVRTKh0SmutPUcBQMXQ.roa (hash: B5ro7AbVa+pZeZWKqhB5vQ8tCOIi1/1KiBGVk/ZJiIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 14:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:51:fa:a5:38:39:8a:2a:e2:96:d5:59:ba:fa:0a:40:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
        Validity
            Not Before: Jul 28 17:00:37 2025 GMT
            Not After : Jul 29 17:00:37 2025 GMT
        Subject: CN=18ec0c346204c70058cccf2c7d451ea6beef4f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:19:97:18:a3:91:d0:1c:ac:38:e2:fc:b3:2f:
                    1f:41:08:5b:89:ed:de:56:c3:89:0c:65:15:61:61:
                    53:ec:de:85:21:fe:36:82:be:53:8f:ac:10:ca:af:
                    f1:b9:15:e4:be:e5:e9:01:a1:14:ea:4a:e7:3c:06:
                    4f:11:82:0b:48:33:89:da:43:0c:2c:c9:a5:54:8c:
                    fc:bc:ab:2b:5e:1e:fc:0f:d4:68:49:01:9f:94:1f:
                    4f:db:cb:fb:6f:3b:39:d1:08:65:c2:86:28:1f:97:
                    0a:60:15:e1:83:bf:bb:47:c4:c7:f4:99:5d:bc:b3:
                    f6:45:64:40:e9:c8:51:d0:7f:ec:91:ce:8f:eb:3b:
                    0b:9c:80:89:b6:a5:17:8d:a8:ec:70:01:b5:8a:fa:
                    3d:d7:a8:bd:42:8a:61:d2:28:d2:48:d5:5e:33:2f:
                    19:8a:e7:20:0b:77:57:6d:09:9c:77:7c:38:43:4a:
                    46:ca:b0:21:89:70:cc:d8:d4:2d:b2:ff:0a:20:50:
                    d4:58:58:a5:cd:c7:1c:3a:19:41:dc:2c:e0:81:bb:
                    b2:93:9b:d8:24:e9:c8:f1:19:52:8d:4e:63:5f:0f:
                    31:c0:14:6e:52:8a:35:73:32:d1:c1:2f:4f:13:bf:
                    60:24:aa:36:e8:3f:f1:4a:5e:a1:20:83:a0:98:1e:
                    f9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EC:0C:34:62:04:C7:00:58:CC:CF:2C:7D:45:1E:A6:BE:EF:4F:4B
            X509v3 Authority Key Identifier:
                keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:65:4c:fe:e0:9e:71:95:ae:11:69:0f:58:79:1c:84:78:10:
         d9:45:96:b2:f7:09:47:5e:e9:0f:17:f2:68:62:98:69:0c:d0:
         cb:a7:52:85:f9:0a:89:b9:bd:9b:ee:90:3f:8f:d2:97:e2:45:
         cc:45:44:ab:61:b3:d5:7e:e5:cd:f2:a6:6f:ac:08:a5:7a:98:
         71:8c:e9:a5:b9:17:a3:1d:db:65:b2:db:4a:5c:32:fa:01:ec:
         29:3f:8b:c5:ba:1e:1b:15:17:44:b5:99:e3:54:01:54:e1:e2:
         c8:8b:fb:ec:1a:3b:73:e2:e0:ae:e0:4d:b0:29:45:5f:d2:4d:
         87:ac:c0:f4:2d:89:1e:41:b2:69:b9:c1:23:6c:fc:57:0b:db:
         9f:a0:0e:db:94:a1:a2:81:72:2b:aa:fe:45:fb:bf:21:92:1a:
         1c:27:87:b3:bf:ce:9d:d2:1f:6c:2c:2a:4d:d1:76:0a:d0:56:
         1e:9f:95:21:86:4f:1b:05:bb:03:79:0b:1a:12:71:33:29:af:
         55:eb:64:07:ed:9c:f3:31:c4:c7:3a:34:e1:98:33:8b:02:0c:
         7b:b3:ff:50:5c:5c:71:b9:35:2a:d7:35:3d:1a:0a:51:0c:eb:
         50:0a:e7:98:32:5c:5d:38:92:93:95:6b:28:5d:37:27:d9:02:
         44:b3:69:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:03:30 2025 by rpki-client