Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
File:                     ldcL-AoHyf_L7wzYRltFjWE9zIU.mft (raw, json)
Hash identifier:          qrwpYeZb0AjBz43buIoeUhslTz5XuDm2+QaUB2I/pFo=
Subject key identifier:   5D:D0:A2:16:47:8E:0C:9A:F9:2E:D9:17:53:C0:12:27:61:96:2F:CA
Authority key identifier: 95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
Certificate issuer:       /CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Certificate serial:       0198D472F2ABD834F86A8C29D70F6057F788
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
Manifest number:          0928
Signing time:             Sat 23 Aug 2025 01:02:39 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:39 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:39 +0000
Files and hashes:         1: Li8wKnrdmOXpX94BLLLbjVutDVE.roa (hash: B7wnEDA93LjWijQLqvYkWeQvccIg2ujkRKA0vpbO5ig=)
                          2: ldcL-AoHyf_L7wzYRltFjWE9zIU.crl (hash: eC9+ZWwE6V1uBMmBYRdl1CXiw7qCcIVBHEiMQ0sWWnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:f2:ab:d8:34:f8:6a:8c:29:d7:0f:60:57:f7:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
        Validity
            Not Before: Aug 23 01:02:39 2025 GMT
            Not After : Aug 24 01:02:39 2025 GMT
        Subject: CN=5dd0a216478e0c9af92ed91753c0122761962fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bd:1b:da:f9:cc:e6:60:54:17:1b:9d:69:d4:
                    3a:a7:1f:c1:8f:c6:98:ce:0a:69:cd:d9:99:92:ed:
                    6b:a2:b2:a1:3a:19:10:01:a5:8a:23:32:ab:7a:e2:
                    e6:1e:7d:19:ec:24:7b:58:6b:f3:54:1d:32:ff:b6:
                    aa:f0:5b:70:aa:8b:d6:b7:98:e1:fe:b4:e2:4b:a9:
                    eb:2c:ec:af:07:da:51:ca:e1:f6:ad:74:03:e4:36:
                    2c:f9:17:05:db:11:ed:64:32:50:3d:8a:d7:e4:0e:
                    e3:84:a9:29:04:1c:dc:2a:3e:ed:0e:aa:5b:a2:34:
                    53:f1:4f:47:23:b3:f2:9e:5e:b2:7e:a9:0c:fe:f1:
                    ed:30:ea:31:55:1b:5f:97:f4:9d:7f:48:87:e9:75:
                    73:87:e0:15:db:d9:ea:3d:bf:c7:82:95:17:84:5e:
                    c7:cb:b4:74:bf:5e:67:c8:64:c7:ee:10:a8:2a:e4:
                    26:f9:3a:d1:5b:8a:cb:d2:14:d6:f6:98:a6:81:ce:
                    22:ee:7b:75:84:80:2c:63:1b:a6:aa:bd:25:86:ad:
                    95:a0:1e:66:3e:7c:0c:81:59:c7:a9:41:41:45:12:
                    6e:f8:79:49:83:7e:af:26:a7:61:d2:08:4d:64:5b:
                    6f:6e:9e:e4:54:0e:da:5c:67:d0:fb:8d:e7:bc:0e:
                    84:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D0:A2:16:47:8E:0C:9A:F9:2E:D9:17:53:C0:12:27:61:96:2F:CA
            X509v3 Authority Key Identifier:
                keyid:95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:47:2a:d6:33:3d:62:1b:cc:c2:41:08:99:7a:37:32:2d:65:
         32:58:13:2a:70:12:b4:a7:fb:04:73:62:d6:29:0a:4c:92:13:
         39:3a:48:a7:5f:04:fb:ab:d7:4c:da:11:71:12:a4:5c:d7:07:
         f7:e6:8d:a4:f7:2e:81:c4:86:2a:d4:7a:02:53:4c:19:a4:0a:
         eb:3f:e5:08:05:2e:d3:2e:e7:5b:91:9c:de:3e:af:6e:75:cd:
         0f:1e:60:21:3b:08:c7:f2:21:24:6c:80:e2:72:05:d8:75:a6:
         2b:be:82:45:cd:f3:b0:56:51:68:50:38:6d:e9:cd:fc:0a:16:
         7b:67:39:5d:b9:f0:36:6a:58:91:03:52:28:70:3d:d2:97:f4:
         ad:e0:cf:a9:36:39:5c:ae:a2:e7:cb:70:8a:02:38:5a:c9:d3:
         32:71:08:51:28:c6:80:63:b2:3e:b7:22:fc:5d:81:0a:aa:b2:
         a2:6c:d5:b3:4a:a7:79:31:df:62:e7:47:3a:79:8e:ad:a5:47:
         07:f5:7c:77:d7:f2:04:05:91:8a:8f:c8:d4:ed:c0:db:ac:af:
         bb:4f:47:9d:7a:d7:29:9d:b9:03:48:f8:4d:dc:a8:bd:17:a2:
         62:4e:d5:7b:ce:16:cc:91:9f:56:ca:fb:70:f9:cb:7a:aa:5c:
         4e:aa:fc:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcvKr2DT4aowp1w9gV/eIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZDcwYmY4MGEwN2M5ZmZjYmVmMGNkODQ2NWI0NThkNjEz
ZGNjODUwHhcNMjUwODIzMDEwMjM5WhcNMjUwODI0MDEwMjM5WjAzMTEwLwYDVQQD
Eyg1ZGQwYTIxNjQ3OGUwYzlhZjkyZWQ5MTc1M2MwMTIyNzYxOTYyZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw70b2vnM5mBUFxudadQ6px/Bj8aY
zgppzdmZku1rorKhOhkQAaWKIzKreuLmHn0Z7CR7WGvzVB0y/7aq8FtwqovWt5jh
/rTiS6nrLOyvB9pRyuH2rXQD5DYs+RcF2xHtZDJQPYrX5A7jhKkpBBzcKj7tDqpb
ojRT8U9HI7Pynl6yfqkM/vHtMOoxVRtfl/Sdf0iH6XVzh+AV29nqPb/HgpUXhF7H
y7R0v15nyGTH7hCoKuQm+TrRW4rL0hTW9pimgc4i7nt1hIAsYxumqr0lhq2VoB5m
PnwMgVnHqUFBRRJu+HlJg36vJqdh0ghNZFtvbp7kVA7aXGfQ+43nvA6EswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3QohZHjgya+S7ZF1PAEidhli/KMB8GA1UdIwQY
MBaAFJXXC/gKB8n/y+8M2EZbRY1hPcyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGRjTC1Bb0h5Zl9MN3d6WVJsdEZqV0U5eklVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yYjBlMTEtZjE4ZC00NzU3LTkwMTEt
NjY3OGViODFiOGIwLzEvbGRjTC1Bb0h5Zl9MN3d6WVJsdEZqV0U5eklVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8yYjBlMTEtZjE4ZC00NzU3LTkwMTEtNjY3OGViODFiOGIw
LzEvbGRjTC1Bb0h5Zl9MN3d6WVJsdEZqV0U5eklVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0cq1jM9
YhvMwkEImXo3Mi1lMlgTKnAStKf7BHNi1ikKTJITOTpIp18E+6vXTNoRcRKkXNcH
9+aNpPcugcSGKtR6AlNMGaQK6z/lCAUu0y7nW5Gc3j6vbnXNDx5gITsIx/IhJGyA
4nIF2HWmK76CRc3zsFZRaFA4benN/AoWe2c5XbnwNmpYkQNSKHA90pf0reDPqTY5
XK6i58twigI4WsnTMnEIUSjGgGOyPrci/F2BCqqyomzVs0qneTHfYudHOnmOraVH
B/V8d9fyBAWRio/I1O3A26yvu09HnXrXKZ25A0j4TdyovReiYk7Ve84WzJGfVsr7
cPnLeqpcTqr8nQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:31 2025 by rpki-client