Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
File:                     ltl3-HCvlNbcEWribZDw5mWOMqg.mft (raw, json)
Hash identifier:          a1btnMKr+57arehtw6IfSqrXdpOBCQsdJ5QkGQmsPuA=
Subject key identifier:   E5:DB:14:7B:06:97:F4:8A:C5:64:5D:32:6E:39:97:24:31:69:01:D2
Authority key identifier: 96:D9:77:F8:70:AF:94:D6:DC:11:6A:E2:6D:90:F0:E6:65:8E:32:A8
Certificate issuer:       /CN=96d977f870af94d6dc116ae26d90f0e6658e32a8
Certificate serial:       0199239F3108D88CEB4B56AB1C79F2B12ED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
Manifest number:          0A7E
Signing time:             Sun 07 Sep 2025 10:00:59 +0000
Manifest this update:     Sun 07 Sep 2025 10:00:59 +0000
Manifest next update:     Mon 08 Sep 2025 10:00:59 +0000
Files and hashes:         1: ltl3-HCvlNbcEWribZDw5mWOMqg.crl (hash: AmERKqqZ0RcGOdfMZ9mZ773hdWEB2zCFJ1Gkfb0sKS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:31:08:d8:8c:eb:4b:56:ab:1c:79:f2:b1:2e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96d977f870af94d6dc116ae26d90f0e6658e32a8
        Validity
            Not Before: Sep  7 10:00:59 2025 GMT
            Not After : Sep  8 10:00:59 2025 GMT
        Subject: CN=e5db147b0697f48ac5645d326e399724316901d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fd:c6:71:a2:b2:e2:e4:8d:c7:95:0a:62:96:
                    8b:b7:9e:f5:69:e9:19:9c:a3:7a:00:66:26:c1:22:
                    62:1c:f6:ad:32:75:45:91:ed:5a:1b:de:39:81:32:
                    ad:8b:e6:3e:bd:c2:fe:96:b5:6c:8b:6a:05:51:bc:
                    4b:cb:50:71:08:cf:f8:0d:5f:b5:48:d0:40:2f:23:
                    4a:75:df:1e:6e:73:0d:fe:f1:c8:06:cd:79:11:df:
                    74:e8:1c:95:a2:74:e5:76:ce:4f:8f:c7:59:20:c7:
                    33:37:1d:2c:cc:66:40:2e:a5:65:16:d4:08:cd:62:
                    42:b4:60:4a:d6:1b:32:39:5d:53:bf:98:4f:f4:27:
                    20:68:0f:4e:5e:be:21:44:1b:76:d2:d3:0b:3e:78:
                    0f:ba:ea:ef:11:38:5f:d4:42:7b:d4:59:61:ad:1d:
                    1d:a7:25:57:e6:2a:02:98:36:4f:41:fe:00:ab:3e:
                    89:7c:26:a0:f0:1c:b6:2a:2c:fd:72:5d:af:a6:72:
                    88:05:b4:89:be:2b:d9:f6:c1:0a:bf:0d:0d:d3:f3:
                    d2:ff:78:38:51:db:8e:78:cb:9f:b9:fb:7d:6f:c5:
                    5f:c7:76:46:1b:1f:1e:42:6c:65:77:dc:36:60:7f:
                    a0:91:c7:a9:fc:ae:e5:e6:cb:68:df:1f:26:c0:aa:
                    bd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:DB:14:7B:06:97:F4:8A:C5:64:5D:32:6E:39:97:24:31:69:01:D2
            X509v3 Authority Key Identifier:
                keyid:96:D9:77:F8:70:AF:94:D6:DC:11:6A:E2:6D:90:F0:E6:65:8E:32:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:52:c5:b5:52:ea:80:ef:b8:2c:75:d3:de:d7:54:af:68:5a:
         08:9f:88:6e:b8:98:a2:9f:52:54:ff:0d:75:29:dc:35:4a:ac:
         45:7a:11:42:e2:61:3b:9e:ae:31:d9:f8:a8:65:8e:b6:97:00:
         72:44:dd:49:bd:29:8c:c4:07:d4:eb:84:c1:bf:e7:f9:2b:ac:
         26:70:4d:ee:d6:e3:b9:e8:ed:95:ab:49:4b:85:a4:b1:63:95:
         c1:3c:8d:fd:70:c4:aa:53:75:b7:ca:6e:cc:86:20:8d:d2:37:
         49:0a:ec:f6:cb:3c:c5:96:fd:0b:ec:b3:df:5a:45:f4:14:13:
         c9:8b:18:7f:9b:5e:d5:d4:a9:95:38:36:c7:c1:5b:e7:18:5e:
         0f:38:a3:c1:52:ac:8c:d0:a9:94:f8:49:6e:55:58:4d:ac:92:
         f5:2d:08:1c:2b:5a:07:ec:53:87:59:84:ec:9e:79:5c:d5:12:
         3d:db:87:34:fa:ad:d2:f4:f5:14:5e:d8:91:62:8c:f3:91:41:
         79:e0:dc:56:b8:97:ef:fc:38:d0:d7:c1:38:4b:cf:b6:38:a2:
         64:99:f6:5f:69:64:af:3c:31:b6:24:d9:9e:4a:34:e8:36:29:
         fb:49:12:5d:f2:78:dc:14:4b:c8:9a:62:76:89:4f:46:9e:d7:
         02:6a:0d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:46:11 2025 by rpki-client