Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
File:                     LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft (raw, json)
Hash identifier:          jkyl8nZm+KbgPeU+J+rppDVs13mZS7C5Gf8VJ8HjC9Y=
Subject key identifier:   C3:FC:CF:E9:85:71:5C:01:F1:73:E1:64:B8:0B:07:D9:76:64:00:49
Authority key identifier: 2D:2C:C1:39:32:19:51:DB:27:6F:3F:FA:29:3A:C0:A0:F3:FA:8B:F7
Certificate issuer:       /CN=2d2cc139321951db276f3ffa293ac0a0f3fa8bf7
Certificate serial:       019A27E6AC3C1E5091E77303CA5EAE4C0E41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
Manifest number:          019C
Signing time:             Mon 27 Oct 2025 23:00:20 +0000
Manifest this update:     Mon 27 Oct 2025 23:00:20 +0000
Manifest next update:     Tue 28 Oct 2025 23:00:20 +0000
Files and hashes:         1: 6Y-dz23_E1vFq4knErbs01-uZMw.roa (hash: rAKus0aYY6lzOdl0PAY4O4iIsDrPWnm0ZrrdK7p/52I=)
                          2: LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl (hash: oNDzc1K1hel0O5BlB9dQl5Rv3IKizoPpqM02Y6PAI5Q=)
                          3: OMjXgufGu7qz8nFaTx0akX2s_bA.roa (hash: BFAAWnjI4vlasJk/UdPdP2Sw5YmLCiP6pm/D70iwFGw=)
                          4: haci0wHWv3PDyudz0_g5F_r8gmQ.roa (hash: xpWgQhWnTLkyOHdJXW4G6WZ622/WFwOg5U25NN+USho=)
                          5: jWARhOvQnhRQXkxxUF1RCZ8Xr5g.roa (hash: 4x96g8YlVB8qqXIZOypAO1dDSyWsSe2A0i/2gmJhRDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 23:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:27:e6:ac:3c:1e:50:91:e7:73:03:ca:5e:ae:4c:0e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cc139321951db276f3ffa293ac0a0f3fa8bf7
        Validity
            Not Before: Oct 27 23:00:20 2025 GMT
            Not After : Oct 28 23:00:20 2025 GMT
        Subject: CN=c3fccfe985715c01f173e164b80b07d976640049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:82:3f:7b:41:57:f8:c2:89:f3:f5:7d:bd:e8:
                    ac:29:4e:72:ac:01:32:65:66:cf:2c:85:e8:98:f3:
                    93:06:ae:5f:03:ea:e1:13:a9:2c:ef:06:dd:a2:d1:
                    fd:fa:55:40:93:f8:88:7d:16:51:a8:d5:02:b7:32:
                    5a:de:17:60:75:a4:4c:d9:52:fa:b1:3a:8d:3f:7c:
                    0a:73:0a:2d:fd:04:ad:a3:14:a2:99:9f:b5:59:52:
                    51:99:82:3a:64:61:9a:eb:1c:54:44:71:a5:1d:bf:
                    be:25:24:b6:f4:86:04:af:bd:3e:1a:8e:8e:76:92:
                    f6:a6:45:95:1e:77:9b:c5:e9:04:7f:20:4c:40:e4:
                    55:a3:75:0b:20:f6:07:17:f0:21:0b:9c:2d:29:90:
                    32:98:95:b2:b0:70:88:98:08:02:bf:a0:1c:49:21:
                    81:bf:6a:ad:ca:11:a1:c2:36:f6:96:07:19:da:96:
                    d9:e7:f4:06:07:11:0d:91:ed:34:08:40:df:a1:d4:
                    71:6f:9e:48:57:1a:15:57:b2:70:30:69:c0:20:fc:
                    59:cc:ce:29:7a:c9:6c:6e:65:5e:42:df:c7:81:99:
                    12:b9:fc:a6:b9:d4:d4:db:63:f0:81:96:e4:c8:25:
                    75:80:97:35:75:d0:03:12:a7:92:45:ea:19:f7:f9:
                    fe:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FC:CF:E9:85:71:5C:01:F1:73:E1:64:B8:0B:07:D9:76:64:00:49
            X509v3 Authority Key Identifier:
                keyid:2D:2C:C1:39:32:19:51:DB:27:6F:3F:FA:29:3A:C0:A0:F3:FA:8B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:bb:55:8f:59:32:1c:c5:f7:1d:f8:83:93:c3:82:e9:34:06:
         09:d6:3d:fb:27:46:b9:5c:94:01:b5:ed:07:a6:8c:a0:ce:85:
         ca:20:53:4c:a6:f8:48:a4:56:1c:97:67:a2:6d:04:a7:68:65:
         82:74:0d:11:6c:04:e5:d5:9e:80:21:8e:02:14:b0:5f:aa:37:
         4b:dc:0c:7d:1e:34:b3:4c:d8:f2:09:02:0d:17:5a:1b:e5:67:
         37:f8:36:e0:eb:5e:63:62:6a:ec:c8:ad:d4:b8:60:3d:c1:ad:
         fe:9c:82:71:39:7b:1b:fb:74:95:c7:ac:28:ed:96:c1:59:05:
         f6:8d:7d:0e:b4:e2:8f:ad:0d:76:bc:a8:41:3a:75:a3:da:f6:
         f4:b9:d1:d5:a0:ab:d7:b3:f4:8a:2b:06:97:95:f7:24:e9:83:
         4e:e5:e9:95:47:eb:d2:f8:19:99:f8:bc:63:65:9e:08:9d:a1:
         cc:6a:64:fa:05:71:76:1a:89:25:fa:ff:fb:47:ae:59:59:48:
         12:c7:86:65:f5:87:b9:75:72:7b:e6:4e:01:ec:26:8c:f6:21:
         09:fa:48:8f:a4:77:2e:d2:55:5a:fe:b6:31:ac:4f:fc:4e:5a:
         20:be:40:e5:a8:27:e9:69:9f:53:08:08:ed:be:8b:0b:be:6f:
         4b:5c:80:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 09:22:02 2025 by rpki-client