Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
File:                     LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft (raw, json)
Hash identifier:          RCI2EKIgmaN5udEgAiSDThvPkk/IP5CbyufmBB9AWE4=
Subject key identifier:   BB:54:87:E3:BF:85:AC:7B:AB:79:46:EF:09:10:08:7D:17:16:43:7B
Authority key identifier: 2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D
Certificate issuer:       /CN=2cba355669b4f9b9035f05b1fba211ef8696101d
Certificate serial:       0199FBEBBC5D8CB5B8047D93E70700A29E15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
Manifest number:          15B0
Signing time:             Sun 19 Oct 2025 10:02:34 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:34 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:34 +0000
Files and hashes:         1: LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl (hash: 3u5KdZu6lKotVDIahHd0LgfBHhJhSyu6JkY3Lq9DpsI=)
                          2: N2MMA2ajHovb9op5fyA_qeAVz_M.roa (hash: n+Qd6FGkBgmtsqN4tvP533FkHH2YOTsZsw1S1MXov80=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:bc:5d:8c:b5:b8:04:7d:93:e7:07:00:a2:9e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cba355669b4f9b9035f05b1fba211ef8696101d
        Validity
            Not Before: Oct 19 10:02:34 2025 GMT
            Not After : Oct 20 10:02:34 2025 GMT
        Subject: CN=bb5487e3bf85ac7bab7946ef0910087d1716437b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:35:e2:9e:c8:14:a3:f6:ff:a1:df:72:42:ff:
                    d3:ab:8f:34:5b:53:77:90:a9:9e:4e:c8:49:2a:a5:
                    84:c9:1d:1d:30:7f:8e:37:4c:99:e5:23:ad:04:4d:
                    3b:c2:ba:19:cf:3a:b6:b4:2c:5c:e4:64:0b:0a:20:
                    5a:60:77:a1:92:d5:5d:d7:83:8c:83:df:2a:3b:c2:
                    08:d5:e6:aa:98:db:d0:44:2a:75:4f:63:c8:10:77:
                    65:4c:71:80:cf:60:87:42:c0:a7:df:9b:85:f0:ad:
                    c5:d2:3a:be:7d:66:91:0b:76:51:aa:e2:31:54:e5:
                    ff:7d:ab:0e:e3:26:9e:e6:9f:f5:97:bb:c7:5b:2b:
                    ff:56:9b:6e:19:9e:e4:5a:6c:b0:f0:cd:13:26:1d:
                    98:b9:2e:44:9c:22:65:f4:fd:b0:84:d7:de:ec:ec:
                    e4:a0:cc:16:e2:2d:d3:ae:e8:68:11:d3:a0:f7:cf:
                    d9:87:29:97:2a:cc:ad:89:9c:8a:22:4b:79:97:68:
                    64:2e:d3:b5:68:1c:a5:98:57:c3:30:a3:c5:80:94:
                    ef:4a:bf:fe:82:45:1c:3d:d3:5c:1c:f4:06:b4:77:
                    58:dc:4d:f5:a0:b6:68:fc:5b:67:42:ec:8d:b1:36:
                    d8:27:42:24:da:e1:01:e7:c3:dc:94:9c:c1:96:23:
                    ba:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:54:87:E3:BF:85:AC:7B:AB:79:46:EF:09:10:08:7D:17:16:43:7B
            X509v3 Authority Key Identifier:
                keyid:2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b6:1a:76:f2:50:63:36:e5:42:d7:c0:4d:9c:7b:cb:9c:dd:
         ad:0f:53:46:74:f2:8b:05:0a:0d:e7:61:ec:b1:e1:57:b0:89:
         c9:73:d1:5a:81:06:8d:c1:51:59:27:b6:54:00:e8:fd:d2:0a:
         9e:c0:20:f8:66:94:43:93:15:38:29:8a:bb:e9:18:4c:40:ac:
         d0:a3:f9:cd:20:ea:c0:38:aa:b7:20:d0:28:28:ee:4e:88:74:
         22:c0:38:37:a1:78:89:0c:08:36:b7:49:ee:32:81:ea:f5:22:
         9c:f8:81:ae:f8:dc:3e:be:e4:64:bc:cf:94:a7:37:dd:7e:1b:
         d5:98:90:18:0f:4e:a9:13:95:6a:a3:8a:b9:29:83:e6:d3:25:
         ba:cf:cc:b3:f1:ad:a3:3d:9d:b7:b0:49:c5:88:7d:82:38:e4:
         5d:6a:7d:19:ff:38:98:44:21:80:27:ba:0c:e6:51:74:ee:0e:
         61:90:de:7b:d0:db:28:1a:d3:2e:a9:c4:e7:c2:9c:b7:85:d5:
         11:4a:51:53:f3:ef:58:d8:2f:c8:33:e1:cc:4c:50:1f:85:44:
         7b:59:6b:35:dc:8a:44:18:4e:8a:4b:4d:05:e4:9e:2e:2f:b0:
         47:4b:04:eb:42:23:ee:e4:56:20:76:dc:da:cd:ce:85:c2:1a:
         9a:d3:e0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:07 2025 by rpki-client