Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
File:                     L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft (raw, json)
Hash identifier:          lyNpLoIe68NhxJen+Vp40KwIxdeYKBRMDF5G1eHyjQY=
Subject key identifier:   57:A3:CC:36:C3:D9:2F:F6:F6:F4:76:45:E2:1F:45:3A:84:90:82:0B
Authority key identifier: 2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20
Certificate issuer:       /CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120
Certificate serial:       019A4EF436411DCD7E0D29545671F0B80C6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
Manifest number:          1708
Signing time:             Tue 04 Nov 2025 13:00:18 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:18 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:18 +0000
Files and hashes:         1: L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl (hash: zEPpzpKQsUeCcXN8hMn+jp7FJc8D/VGpGDa21zdh6cg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 13:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:36:41:1d:cd:7e:0d:29:54:56:71:f0:b8:0c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120
        Validity
            Not Before: Nov  4 13:00:18 2025 GMT
            Not After : Nov  5 13:00:18 2025 GMT
        Subject: CN=57a3cc36c3d92ff6f6f47645e21f453a8490820b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e5:6e:ae:a3:da:48:1d:69:4d:d9:da:fd:31:
                    9e:5e:a3:93:47:06:d9:7f:8f:c7:9f:1b:ae:db:6a:
                    10:9d:03:45:12:6b:03:fb:9d:94:d1:3b:74:5c:21:
                    3f:f9:eb:39:1c:f0:cd:82:b6:6e:d4:42:bd:54:6b:
                    99:f4:98:5f:df:3b:8a:12:21:b7:c4:93:98:ce:9c:
                    bc:15:86:45:6e:d6:82:54:98:4b:11:45:93:1b:25:
                    0d:84:f9:70:80:13:73:ea:19:1a:b8:37:72:da:a5:
                    07:9a:ac:05:d6:09:92:ea:48:ff:56:87:6a:80:db:
                    db:65:7b:e4:fd:6d:cf:90:e5:72:0f:88:38:55:40:
                    19:0b:de:18:11:31:3e:69:1a:e6:7c:90:d5:d5:8e:
                    b0:5a:76:63:6b:69:5c:84:43:02:8e:83:3b:35:9a:
                    f0:d0:24:05:b0:13:84:d1:e0:62:be:92:52:f8:fc:
                    07:87:f7:42:dd:01:94:92:e1:9b:5f:e0:e3:2d:4f:
                    f0:4d:de:a8:4d:b9:3b:b4:6e:21:54:ff:4b:3c:e1:
                    68:c4:f9:ac:c2:99:25:54:1e:dd:95:cd:b4:d4:9e:
                    3b:49:c2:f2:ff:74:4f:6b:53:ea:fa:34:da:e8:63:
                    94:0e:19:e2:43:d1:ab:3d:9c:37:27:df:8c:e9:5e:
                    67:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A3:CC:36:C3:D9:2F:F6:F6:F4:76:45:E2:1F:45:3A:84:90:82:0B
            X509v3 Authority Key Identifier:
                keyid:2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:31:55:90:65:f0:1e:00:3f:34:5b:d2:95:6a:c4:a0:06:0e:
         3f:4b:a0:f8:7d:10:c0:22:78:9f:13:88:17:b5:1e:fd:0e:66:
         23:84:56:38:bc:1f:ca:12:9d:53:2c:8b:a5:f0:49:f9:c7:42:
         31:df:d0:8a:87:e8:5e:9d:27:1a:9a:22:25:d0:d4:5b:14:92:
         89:fd:03:3f:2e:13:e2:c2:41:c8:02:ee:c0:58:a0:17:8d:f1:
         04:5d:57:1a:ea:de:c0:11:79:fc:78:ef:f2:d5:83:bb:36:e3:
         be:81:76:a3:8d:c5:d4:7b:70:af:1d:e9:ee:6b:52:f9:12:3d:
         00:67:4a:34:59:ed:bb:c5:58:19:b9:2f:c0:79:b3:e7:be:2a:
         7a:2b:c3:29:1f:2f:ac:fc:d9:80:86:fb:44:13:3e:a2:a3:30:
         9c:8c:0f:7d:9c:8d:9a:67:76:d3:1a:52:93:9e:7b:9b:67:dd:
         31:2a:3d:4a:70:e4:4f:0f:70:78:0f:0f:97:4e:97:e3:36:4a:
         7d:e0:83:4a:5d:e8:86:8e:cd:b7:17:38:e5:8f:a3:46:28:cd:
         51:aa:85:6a:9d:a0:18:81:bd:d9:17:18:96:56:5f:80:c0:87:
         4e:66:63:c9:f5:66:af:a3:00:f1:d5:1f:08:38:7b:f0:3d:a6:
         a6:bd:da:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9DZBHc1+DSlUVnHwuAxvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZTBhYTdiZmFlMTI0NzQwMmFiYjZjODliNzViYjIzZjBm
MGYxMjAwHhcNMjUxMTA0MTMwMDE4WhcNMjUxMTA1MTMwMDE4WjAzMTEwLwYDVQQD
Eyg1N2EzY2MzNmMzZDkyZmY2ZjZmNDc2NDVlMjFmNDUzYTg0OTA4MjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+VurqPaSB1pTdna/TGeXqOTRwbZ
f4/Hnxuu22oQnQNFEmsD+52U0Tt0XCE/+es5HPDNgrZu1EK9VGuZ9Jhf3zuKEiG3
xJOYzpy8FYZFbtaCVJhLEUWTGyUNhPlwgBNz6hkauDdy2qUHmqwF1gmS6kj/Vodq
gNvbZXvk/W3PkOVyD4g4VUAZC94YETE+aRrmfJDV1Y6wWnZja2lchEMCjoM7NZrw
0CQFsBOE0eBivpJS+PwHh/dC3QGUkuGbX+DjLU/wTd6oTbk7tG4hVP9LPOFoxPms
wpklVB7dlc201J47ScLy/3RPa1Pq+jTa6GOUDhniQ9GrPZw3J9+M6V5nzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFejzDbD2S/29vR2ReIfRTqEkIILMB8GA1UdIwQY
MBaAFC/gqnv64SR0Aqu2yJt1uyPw8PEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTC1DcWVfcmhKSFFDcTdiSW0zVzdJX0R3OFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hNDZkMzItYjA1NS00YWIyLTgyODYt
NTJjOWQzNTZhMjE1LzEvTC1DcWVfcmhKSFFDcTdiSW0zVzdJX0R3OFNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9hNDZkMzItYjA1NS00YWIyLTgyODYtNTJjOWQzNTZhMjE1
LzEvTC1DcWVfcmhKSFFDcTdiSW0zVzdJX0R3OFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljFVkGXw
HgA/NFvSlWrEoAYOP0ug+H0QwCJ4nxOIF7Ue/Q5mI4RWOLwfyhKdUyyLpfBJ+cdC
Md/QiofoXp0nGpoiJdDUWxSSif0DPy4T4sJByALuwFigF43xBF1XGurewBF5/Hjv
8tWDuzbjvoF2o43F1Htwrx3p7mtS+RI9AGdKNFntu8VYGbkvwHmz574qeivDKR8v
rPzZgIb7RBM+oqMwnIwPfZyNmmd20xpSk557m2fdMSo9SnDkTw9weA8Pl06X4zZK
feCDSl3oho7Ntxc45Y+jRijNUaqFap2gGIG92RcYllZfgMCHTmZjyfVmr6MA8dUf
CDh78D2mpr3azQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:54 2025 by rpki-client