Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
File:                     rLICUNTN02Zxm5adb0EjAcE-uQE.mft (raw, json)
Hash identifier:          KjxPOlmf4FYG7UCDl3K+FDYXdQRdUQqasZZHXzEN2cU=
Subject key identifier:   C9:D1:4E:9D:DC:67:78:24:BC:92:C6:96:B8:32:6C:D2:36:10:6D:D3
Authority key identifier: AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
Certificate issuer:       /CN=acb20250d4cdd366719b969d6f412301c13eb901
Certificate serial:       0199239FDB239EF8535610C2254CE9CB1A7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
Manifest number:          166F
Signing time:             Sun 07 Sep 2025 10:01:42 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:42 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:42 +0000
Files and hashes:         1: 5n7dgIWemJ_305TpiU3O_0-YbeA.roa (hash: LdWHm24O7+fxQTfSmSb6FS6jzu11KxxrVzOXyxJmUuE=)
                          2: rLICUNTN02Zxm5adb0EjAcE-uQE.crl (hash: Dcv5j5GkmnbDSU5FJd6B2hXJwH6A03f7S1zhHMZB61Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:db:23:9e:f8:53:56:10:c2:25:4c:e9:cb:1a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb20250d4cdd366719b969d6f412301c13eb901
        Validity
            Not Before: Sep  7 10:01:42 2025 GMT
            Not After : Sep  8 10:01:42 2025 GMT
        Subject: CN=c9d14e9ddc677824bc92c696b8326cd236106dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4c:32:bd:96:c5:22:67:5a:6f:44:59:f2:3b:
                    7e:42:46:75:dc:2b:50:a3:ef:bc:18:dc:d1:0f:45:
                    3a:a0:e7:f0:e4:ce:73:cf:ec:12:ed:8d:a9:be:c8:
                    1a:15:8f:2c:73:c1:a6:3a:0b:85:a1:89:d1:f6:78:
                    1e:23:74:02:b2:02:78:b2:08:b1:9d:bc:2f:1f:a0:
                    82:b2:ec:0a:ed:17:76:58:d6:c0:6e:28:be:f4:f4:
                    28:f4:2e:da:71:4b:9c:61:ee:7b:73:d1:69:24:33:
                    f9:c8:92:3f:5e:1e:29:e5:82:d1:d3:1e:3c:6c:62:
                    eb:87:fb:53:19:cb:b5:07:b6:ad:8e:ef:4c:82:c9:
                    c0:ea:7c:1e:5c:fd:73:d8:2d:be:4e:ec:58:55:55:
                    6c:0f:1e:e5:c9:e9:c2:35:a1:52:23:01:d4:35:fe:
                    e6:2f:eb:b4:23:af:f9:c0:17:fd:06:6b:93:4a:dd:
                    f0:f5:35:01:fc:82:dc:da:bd:95:da:af:b6:21:91:
                    c8:75:34:09:79:43:c6:49:0a:9e:c0:6c:67:d6:62:
                    3b:18:67:30:a9:3b:b6:70:89:da:d9:d7:3d:77:ca:
                    10:5e:bd:de:22:83:54:b0:e1:16:bc:8b:52:ca:16:
                    12:52:75:3e:77:ca:7d:1d:5e:c6:6d:68:89:b4:07:
                    10:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D1:4E:9D:DC:67:78:24:BC:92:C6:96:B8:32:6C:D2:36:10:6D:D3
            X509v3 Authority Key Identifier:
                keyid:AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:5a:60:56:d8:01:fe:4c:41:c9:a9:79:bb:b8:8e:7e:8b:0e:
         6c:54:71:c9:9b:07:7d:10:ac:fd:69:ae:70:c9:f6:e7:72:83:
         e6:5c:3d:bc:4d:86:5b:0e:1f:64:d4:ad:b9:43:a4:16:0e:d3:
         bb:53:12:41:1c:ae:1e:4a:e2:6c:3c:8a:05:82:fb:88:8c:c4:
         e5:23:3b:01:8b:16:6e:0a:d5:93:f0:54:c7:3c:c1:98:2b:5d:
         b0:40:e9:94:d3:1f:56:ff:65:92:2a:23:47:83:de:40:d8:da:
         a3:3f:84:93:c9:ab:21:86:c8:43:86:70:3b:52:45:45:40:f4:
         f0:1c:40:2a:1d:7a:76:18:a2:d7:cd:99:e7:e1:4d:86:8e:8d:
         cc:8d:22:fa:0f:b9:e8:85:74:1d:1a:9c:41:d0:90:18:3d:9e:
         83:0f:be:c1:1a:a7:b1:ad:81:e7:1e:c2:0e:15:6d:1d:dc:d3:
         de:5a:a5:d3:93:b6:50:63:40:9b:45:0c:41:ba:f5:97:0e:7e:
         e2:55:94:22:48:35:33:59:1d:2c:02:fe:12:55:21:64:93:ef:
         40:62:34:33:ab:49:4c:2f:2b:9b:d4:1f:a0:e8:83:f1:ad:5b:
         af:7c:e6:0b:ef:41:b9:2a:92:34:b3:da:6b:c5:74:27:4f:ee:
         ae:83:10:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn9sjnvhTVhDCJUzpyxp+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYjIwMjUwZDRjZGQzNjY3MTliOTY5ZDZmNDEyMzAxYzEz
ZWI5MDEwHhcNMjUwOTA3MTAwMTQyWhcNMjUwOTA4MTAwMTQyWjAzMTEwLwYDVQQD
EyhjOWQxNGU5ZGRjNjc3ODI0YmM5MmM2OTZiODMyNmNkMjM2MTA2ZGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0wyvZbFImdab0RZ8jt+QkZ13CtQ
o++8GNzRD0U6oOfw5M5zz+wS7Y2pvsgaFY8sc8GmOguFoYnR9ngeI3QCsgJ4sgix
nbwvH6CCsuwK7Rd2WNbAbii+9PQo9C7acUucYe57c9FpJDP5yJI/Xh4p5YLR0x48
bGLrh/tTGcu1B7atju9MgsnA6nweXP1z2C2+TuxYVVVsDx7lyenCNaFSIwHUNf7m
L+u0I6/5wBf9BmuTSt3w9TUB/ILc2r2V2q+2IZHIdTQJeUPGSQqewGxn1mI7GGcw
qTu2cIna2dc9d8oQXr3eIoNUsOEWvItSyhYSUnU+d8p9HV7GbWiJtAcQeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnRTp3cZ3gkvJLGlrgybNI2EG3TMB8GA1UdIwQY
MBaAFKyyAlDUzdNmcZuWnW9BIwHBPrkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckxJQ1VOVE4wMlp4bTVhZGIwRWpBY0UtdVFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8zZTllM2UtOTQxNi00MmM4LWEzNWQt
NmY0ZjAzMWVlYWUyLzEvckxJQ1VOVE4wMlp4bTVhZGIwRWpBY0UtdVFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8zZTllM2UtOTQxNi00MmM4LWEzNWQtNmY0ZjAzMWVlYWUy
LzEvckxJQ1VOVE4wMlp4bTVhZGIwRWpBY0UtdVFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1pgVtgB
/kxByal5u7iOfosObFRxyZsHfRCs/WmucMn253KD5lw9vE2GWw4fZNStuUOkFg7T
u1MSQRyuHkribDyKBYL7iIzE5SM7AYsWbgrVk/BUxzzBmCtdsEDplNMfVv9lkioj
R4PeQNjaoz+Ek8mrIYbIQ4ZwO1JFRUD08BxAKh16dhii182Z5+FNho6NzI0i+g+5
6IV0HRqcQdCQGD2egw++wRqnsa2B5x7CDhVtHdzT3lql05O2UGNAm0UMQbr1lw5+
4lWUIkg1M1kdLAL+ElUhZJPvQGI0M6tJTC8rm9QfoOiD8a1br3zmC+9BuSqSNLPa
a8V0J0/uroMQwg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:35 2025 by rpki-client