Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
File:                     ldn8gV6QyoeSeQfF6rP-ecohXqo.mft (raw, json)
Hash identifier:          uOv1UG+YLe2eADBrm1DxcsJKziaxWaCDV42YyGwL2RQ=
Subject key identifier:   7D:4D:C9:E6:9C:24:EC:38:68:40:14:1A:0A:2F:54:02:41:E5:60:BA
Authority key identifier: 95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
Certificate issuer:       /CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Certificate serial:       0199338013E961624CBA6D55B3E3B4A7118F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
Manifest number:          037C
Signing time:             Wed 10 Sep 2025 12:00:55 +0000
Manifest this update:     Wed 10 Sep 2025 12:00:55 +0000
Manifest next update:     Thu 11 Sep 2025 12:00:55 +0000
Files and hashes:         1: A4UfYrXsQ6iSsiav-YeuLfimOTs.roa (hash: cPKqM44Z83MlRMbviQtgWddEZ3JyHZfP+3cvsuoyczI=)
                          2: WqCM--ZSqxtcqHxil1wItYtEpEM.roa (hash: CPcHuYLnfs1zjrIDaz07dO7we+nME2TOlwKRzyCU7gM=)
                          3: ldn8gV6QyoeSeQfF6rP-ecohXqo.crl (hash: b4L336/vVZT0Z/uBvLbPOUSAHRkoAWCQ/TUFFZaSGl4=)
                          4: wkbm61J6JI58DzdO7MCd9o4dj-o.roa (hash: hSaua0y3ny5hOslQkyLJESOAWMtyf0RUHAd8EHcHySo=)
                          5: xhhJQqhM5sB1fU9J0vxm3RoZWw0.roa (hash: +YOuzWIZ++rhf1ENTPtE45w85KCzRIvAgoMtfwrZcLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:80:13:e9:61:62:4c:ba:6d:55:b3:e3:b4:a7:11:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
        Validity
            Not Before: Sep 10 12:00:55 2025 GMT
            Not After : Sep 11 12:00:55 2025 GMT
        Subject: CN=7d4dc9e69c24ec386840141a0a2f540241e560ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:fa:4b:74:a7:89:e0:61:a9:ee:cf:7c:9d:
                    51:7c:ce:ab:c6:ee:4f:09:76:d7:55:98:24:43:52:
                    48:4a:93:6a:4f:95:0d:ae:7c:ff:93:50:af:73:30:
                    9a:37:19:d2:58:af:31:c9:87:47:8c:5b:96:2d:bd:
                    67:b1:80:50:e9:3e:e0:34:e9:8f:9e:85:91:13:61:
                    b0:cc:6b:74:55:0e:4e:14:5f:e4:87:42:51:4c:5c:
                    69:ef:0d:19:c8:ca:ad:95:25:22:15:9f:5c:ab:b4:
                    ec:0b:61:02:46:4f:62:31:7b:de:82:d5:47:b6:23:
                    ee:66:e3:61:20:90:43:c9:44:eb:5a:c2:d0:ea:1b:
                    ce:35:94:c0:2d:a2:4c:bf:5e:1a:fc:30:3a:a3:a4:
                    81:51:dd:de:8b:85:af:9a:42:45:01:ba:e3:51:f2:
                    94:00:70:22:56:ec:0e:76:13:d4:10:33:95:a9:14:
                    5d:3e:5d:90:29:8a:4b:fe:a0:b9:24:07:e7:75:4d:
                    50:8e:72:59:d8:b5:0d:9f:e4:92:8c:14:64:06:7e:
                    a4:e3:ce:e1:38:80:19:7a:1b:0f:dc:1d:c6:a7:6d:
                    c1:e6:14:1e:60:f9:c7:39:7a:14:d2:14:4d:32:72:
                    29:61:10:cd:a4:0d:e2:0b:98:7c:e7:79:a8:8d:a9:
                    2a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4D:C9:E6:9C:24:EC:38:68:40:14:1A:0A:2F:54:02:41:E5:60:BA
            X509v3 Authority Key Identifier:
                keyid:95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:e8:e0:e1:6b:d5:d7:aa:54:5b:e6:6a:33:70:2d:b8:41:b3:
         e8:bf:ae:d9:e4:81:50:36:2f:be:44:8d:17:54:9c:ca:05:68:
         95:8a:bc:8c:6c:6a:22:2b:f1:a6:e7:4a:47:de:c9:ac:9e:43:
         86:0c:55:b7:0e:48:94:fe:da:97:44:3f:e3:0d:d7:ab:21:7a:
         59:30:e8:d5:c5:b8:20:46:09:02:d0:35:de:48:bf:71:f1:d2:
         e4:82:00:ea:d1:30:51:f0:67:57:69:c9:2e:5d:28:8c:f8:0e:
         52:93:34:8c:e8:fd:f6:e5:8b:fa:e8:61:b8:de:78:43:e4:a7:
         3c:25:30:9b:8d:c5:51:4b:1f:c2:30:ac:0b:4d:28:7e:a1:61:
         61:d9:0b:43:80:2e:3f:44:a7:5c:6d:24:3c:64:f7:08:53:e2:
         76:2e:41:c2:f4:50:c4:ef:ac:b7:91:70:53:e6:94:1d:56:bf:
         80:16:01:7b:58:67:e7:6d:b7:ea:ac:08:e9:96:bd:d5:8d:1c:
         25:10:e6:f6:f6:df:86:52:18:22:7e:7f:54:dc:e4:ca:52:33:
         f4:94:4b:d6:9b:7d:9e:d4:5d:c1:fa:fc:bb:c0:cf:d0:67:dd:
         06:21:56:5e:5f:c8:8b:f0:49:ec:19:26:b5:00:63:08:2a:90:
         8e:2f:c8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:43:31 2025 by rpki-client