Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft
File:                     LOuI0A5SCtZgtBbZIInGDVyPE-E.mft (raw, json)
Hash identifier:          a65qpnmR7rL24ZuH3l5gM2B/QfFHh/+YPaAMn8m99Oc=
Subject key identifier:   20:A4:7B:31:48:81:AC:20:98:51:E4:15:90:7F:29:12:46:42:A5:66
Authority key identifier: 2C:EB:88:D0:0E:52:0A:D6:60:B4:16:D9:20:89:C6:0D:5C:8F:13:E1
Certificate issuer:       /CN=2ceb88d00e520ad660b416d92089c60d5c8f13e1
Certificate serial:       0199FC8F78A6DC4EB6E8B45CC60FD2184F46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft
Manifest number:          0353
Signing time:             Sun 19 Oct 2025 13:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:24 +0000
Files and hashes:         1: LOuI0A5SCtZgtBbZIInGDVyPE-E.crl (hash: 443kqe75Jfbb52a432+J7HuKv34NGdAa0mS1/PrWjcI=)
                          2: Y46vCOXYHw7rQaQKH4vVvjsoPj0.roa (hash: x4bPgE4P0Zq2nwgUR4AjUuUSz6sm/lpYmxdn5ktx7oM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:78:a6:dc:4e:b6:e8:b4:5c:c6:0f:d2:18:4f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ceb88d00e520ad660b416d92089c60d5c8f13e1
        Validity
            Not Before: Oct 19 13:01:24 2025 GMT
            Not After : Oct 20 13:01:24 2025 GMT
        Subject: CN=20a47b314881ac209851e415907f29124642a566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b5:ee:31:56:d8:95:10:a9:a3:4b:9d:04:5c:
                    b9:f5:c7:af:85:21:cb:63:ff:d5:e5:79:a6:64:88:
                    75:97:5e:44:7e:61:fb:80:03:77:58:9d:d1:7a:6d:
                    b6:0e:37:69:66:80:1b:9e:d8:55:f6:45:16:75:0c:
                    f8:14:70:39:3a:d9:23:0e:bc:ee:68:a6:20:7e:12:
                    9a:77:04:ad:e1:3c:31:f6:bc:01:a3:ed:f5:62:e0:
                    ef:b2:f6:19:b8:47:f3:65:b8:51:0e:f3:19:15:34:
                    97:1b:c4:44:ba:41:97:2c:31:44:d3:ed:4e:f1:00:
                    ab:ca:a9:f1:50:04:bc:36:18:25:f6:c7:cf:c0:cc:
                    0e:f3:83:22:5c:98:f1:30:f9:1b:68:21:dd:ef:3d:
                    cd:12:7f:1d:4e:68:c3:6c:f0:56:be:3b:ad:40:52:
                    60:c5:9b:26:70:bf:25:c3:27:fc:90:8f:6e:08:77:
                    81:9d:33:17:4d:e6:a6:a4:c3:18:46:25:ba:13:72:
                    f6:9f:29:25:4c:9b:82:c3:20:a2:32:1f:6c:04:42:
                    00:68:5a:8a:b7:25:71:16:58:06:04:1d:d4:e5:ec:
                    ad:48:3b:ca:67:cc:1e:7f:95:ec:7d:f1:4b:b7:e3:
                    88:78:98:37:01:b0:6a:43:37:a7:32:bf:27:8b:8b:
                    c6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A4:7B:31:48:81:AC:20:98:51:E4:15:90:7F:29:12:46:42:A5:66
            X509v3 Authority Key Identifier:
                keyid:2C:EB:88:D0:0E:52:0A:D6:60:B4:16:D9:20:89:C6:0D:5C:8F:13:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:60:bb:e4:5c:45:42:04:0e:a9:09:f1:39:31:eb:7b:b7:2b:
         83:7f:3d:d3:18:60:a5:e3:e8:bf:9f:c4:71:4d:0c:b8:f3:44:
         3a:31:fa:ff:dc:5b:53:a2:56:22:b4:e8:79:98:ff:53:6c:b6:
         94:92:21:2f:c2:df:e0:39:bc:7b:2c:73:16:6d:86:eb:39:10:
         2a:c9:21:bb:23:f9:19:f9:4a:e5:d5:9f:42:0e:14:97:f2:8b:
         d9:37:8b:33:15:f1:95:12:54:24:64:49:40:8f:ed:e1:04:54:
         e9:cf:1b:41:a6:fa:af:4d:35:e0:38:33:76:ab:6d:15:5b:55:
         26:65:c9:d1:6e:80:72:5c:2d:d4:4d:91:67:f9:83:83:7d:c7:
         c3:bb:96:52:d6:23:4b:d8:8a:c0:f6:04:03:58:dc:a3:cc:0c:
         b9:aa:a6:21:04:e3:f9:c3:a9:29:01:d7:13:18:a3:a8:e4:0f:
         da:3f:a4:86:83:9c:58:05:b4:8d:49:b5:ce:16:19:71:a0:e9:
         71:80:2b:4f:31:50:e7:55:26:38:25:52:bf:a4:13:c5:89:2a:
         01:ab:37:a1:39:dd:10:4c:1e:78:bb:df:b4:89:f2:e6:93:81:
         07:c7:0f:46:6e:0d:3c:7c:e4:72:12:94:0a:9f:08:e0:8c:cf:
         5d:f8:81:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:58 2025 by rpki-client