Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
File:                     lv9F5t5Iv8A5faytg6hIMdt5UtE.mft (raw, json)
Hash identifier:          Sxr0ISt3w994pFiMffls1gzaNdsjSuOLPXG3lA3gyMA=
Subject key identifier:   C4:32:26:E1:67:F3:11:81:B7:FF:83:E1:1A:10:50:34:55:1D:50:DA
Authority key identifier: 96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
Certificate issuer:       /CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Certificate serial:       0198D473CD4B8F2C93D2526CDDB86319F257
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
Manifest number:          0D92
Signing time:             Sat 23 Aug 2025 01:03:35 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:35 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:35 +0000
Files and hashes:         1: BtyxmQt-yF5Itrxy7RzgES75cCE.roa (hash: j8jLpS73B8XEvRgoeYut2S/JGAmztzXRK1Z6kg/eRK4=)
                          2: abefSJyNsQ4kIHg_JbBrvyMZNs0.roa (hash: R4sEc9WgkQp8S9L0gh+lAeV2TR1f+UNjjiBWxu0UkWE=)
                          3: guRmkEKKRi3yIA2ms7Lm_Uw6LLU.roa (hash: GzLvOZNBYSJ/eLCppkRql6pMeRHG+UlZlmhw3iYs8mo=)
                          4: lv9F5t5Iv8A5faytg6hIMdt5UtE.crl (hash: IFE0bvyd0NdE7WSJ55of67QsoRUIEmjzCl3+341a88Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:cd:4b:8f:2c:93:d2:52:6c:dd:b8:63:19:f2:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96ff45e6de48bfc0397dacad83a84831db7952d1
        Validity
            Not Before: Aug 23 01:03:35 2025 GMT
            Not After : Aug 24 01:03:35 2025 GMT
        Subject: CN=c43226e167f31181b7ff83e11a105034551d50da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6e:ef:1f:58:ff:1d:42:dd:f2:0b:f2:75:eb:
                    fc:85:7a:3d:f2:77:d2:f2:53:fb:65:26:de:13:2d:
                    23:4b:86:31:a5:9f:d5:78:34:c8:5a:e7:7d:53:2d:
                    90:a8:bd:5e:47:db:92:21:7a:2c:4f:b0:8f:c2:11:
                    71:81:b6:0d:43:0f:2f:9c:2c:34:ef:e8:3c:40:b0:
                    2f:3f:5e:0d:f3:09:d9:04:95:90:6c:60:15:9a:dc:
                    b1:e3:59:d8:fb:1b:c9:6c:22:a6:03:ff:35:b5:09:
                    b7:67:63:83:d0:49:b9:5a:c9:b8:63:1d:d7:5d:de:
                    dc:08:9d:0c:1d:ef:d3:cb:7c:56:88:7f:03:84:c7:
                    6e:c3:b1:cb:eb:b0:f9:78:44:da:d0:1e:57:8f:fa:
                    75:55:22:1c:82:3a:8c:32:52:43:50:96:4f:1b:7c:
                    14:e7:64:03:81:21:d0:97:04:d4:50:ad:40:c7:2b:
                    4e:75:36:92:65:81:d5:44:6d:c6:f5:82:1b:e1:05:
                    06:e7:d6:a9:57:ce:41:6c:42:4e:4b:d1:93:4b:23:
                    55:56:84:79:a7:c1:47:12:8b:62:d2:5f:8d:18:d8:
                    34:7b:a6:6a:ca:fd:15:5f:f9:92:03:77:af:bb:0f:
                    f1:84:68:a8:c3:df:fa:f4:49:88:2d:4f:7a:b6:ed:
                    ef:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:32:26:E1:67:F3:11:81:B7:FF:83:E1:1A:10:50:34:55:1D:50:DA
            X509v3 Authority Key Identifier:
                keyid:96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:55:10:79:25:ea:31:07:36:7d:b6:fe:31:16:50:08:3b:49:
         bc:a5:93:fe:d3:aa:8f:3e:f1:4a:8a:82:a1:c9:e0:f1:27:32:
         d9:b5:76:54:c3:af:47:65:96:7a:d2:4c:95:b1:13:0e:49:db:
         c9:e9:bb:3f:b8:7a:5b:43:a6:7f:97:21:c7:0b:19:7d:ac:d5:
         17:d8:40:db:7d:0c:f4:fd:d6:5e:5a:24:34:f8:e9:eb:0f:6a:
         c6:db:7c:9e:f3:a7:a5:87:9f:90:3f:53:38:b6:98:53:93:53:
         92:73:07:84:a3:39:b6:49:e9:bd:39:3c:aa:20:fd:f6:49:32:
         9b:a9:12:76:bd:5e:69:c4:93:26:54:9b:49:10:88:b5:44:62:
         19:64:b4:cf:c0:c5:1c:7f:30:07:c3:d6:40:77:05:91:9b:bf:
         1a:4e:6f:ee:49:91:b4:9e:3c:68:f4:a4:a3:9d:69:b5:63:d5:
         20:ad:4c:fc:6f:66:0e:98:e2:6d:87:92:a1:72:42:16:b2:14:
         1d:31:40:2d:43:16:d0:3c:69:f0:fc:87:1f:a5:52:76:2b:25:
         86:ab:e4:e9:00:9c:65:ae:56:66:99:1c:96:39:32:32:a1:63:
         f6:22:18:6b:3a:27:68:8d:f7:f4:73:e3:22:08:a3:49:34:5f:
         ae:8c:48:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:05 2025 by rpki-client