Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
File:                     L6CLlwvIy9DkRTyJa9uCKqccom8.mft (raw, json)
Hash identifier:          Q7O/ENN9jf/qSki/Sgvzk8p5srQ5SqwwaT8XWLMCb/Q=
Subject key identifier:   43:B6:F3:F7:93:6F:FC:F7:98:3D:B5:5F:DF:D8:E4:89:A0:87:8A:09
Authority key identifier: 2F:A0:8B:97:0B:C8:CB:D0:E4:45:3C:89:6B:DB:82:2A:A7:1C:A2:6F
Certificate issuer:       /CN=2fa08b970bc8cbd0e4453c896bdb822aa71ca26f
Certificate serial:       01988B455BCF3C95CC783294417020350A3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
Manifest number:          0314
Signing time:             Fri 08 Aug 2025 20:00:35 +0000
Manifest this update:     Fri 08 Aug 2025 20:00:35 +0000
Manifest next update:     Sat 09 Aug 2025 20:00:35 +0000
Files and hashes:         1: L6CLlwvIy9DkRTyJa9uCKqccom8.crl (hash: aAuKqaFRpPXxsupwPKOU0COqce9TBEucXGIt44xMaqI=)
                          2: dp6ZCuRIqo4YLa9gbgLjmyAheBM.roa (hash: yf/5qE0uY00EXj7opiLq6SkYzRlB8nAZTXaYic2R17w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:45:5b:cf:3c:95:cc:78:32:94:41:70:20:35:0a:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa08b970bc8cbd0e4453c896bdb822aa71ca26f
        Validity
            Not Before: Aug  8 20:00:35 2025 GMT
            Not After : Aug  9 20:00:35 2025 GMT
        Subject: CN=43b6f3f7936ffcf7983db55fdfd8e489a0878a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:61:ea:25:bb:df:52:04:65:53:1b:64:a5:1c:
                    e0:75:ef:6d:77:cb:44:f2:ed:16:08:f9:c8:e8:0e:
                    90:e9:6d:a3:af:66:53:f3:56:e1:90:81:d4:54:c9:
                    77:ac:63:58:a9:da:f7:e2:8a:10:11:4b:fc:39:eb:
                    0d:29:f3:d0:85:80:81:bf:3f:7d:ac:1e:7f:96:ed:
                    11:12:5b:9b:79:e4:48:9c:21:44:1d:5e:88:6b:24:
                    13:2a:40:5a:b8:19:4a:b5:d2:7c:0e:af:c8:1c:2d:
                    92:1c:2f:ab:05:ac:d8:5b:39:ea:ce:82:a5:25:67:
                    42:e0:40:91:e1:70:57:dd:29:4c:78:4e:72:96:5f:
                    b2:dc:b8:2e:e0:57:95:f5:7d:21:b4:b9:0e:2b:c2:
                    10:73:2f:12:c6:1d:af:72:a0:1c:be:e2:2e:75:bc:
                    42:da:a8:2e:ef:95:d8:a3:60:f6:19:69:56:5b:e8:
                    fc:2a:35:55:3e:2b:df:7c:9a:39:01:0c:fc:38:3c:
                    90:95:0e:5b:ca:f7:eb:a4:f8:14:94:e5:5f:ba:a4:
                    84:95:07:c5:92:48:24:e2:56:bb:f8:92:6e:b2:3e:
                    e3:2c:db:6d:c1:68:59:04:4c:b8:9a:78:e8:64:f1:
                    11:1a:6f:c2:ba:a8:da:6f:f3:41:55:d7:15:c7:d6:
                    26:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B6:F3:F7:93:6F:FC:F7:98:3D:B5:5F:DF:D8:E4:89:A0:87:8A:09
            X509v3 Authority Key Identifier:
                keyid:2F:A0:8B:97:0B:C8:CB:D0:E4:45:3C:89:6B:DB:82:2A:A7:1C:A2:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:6b:50:51:84:2b:7a:e4:00:32:54:5f:da:d2:12:f3:66:74:
         02:e5:be:9a:86:74:a5:de:6f:dd:13:a1:2a:e4:88:8a:41:0c:
         8e:fb:48:70:58:fb:75:63:73:0e:26:a2:3b:20:07:7a:9f:56:
         ae:49:10:40:d0:8b:fd:3f:58:9d:62:1d:22:34:a7:84:1f:1c:
         77:e6:29:3d:5d:02:24:be:af:af:9a:5a:c2:9a:2f:9d:65:53:
         42:c7:e5:d1:42:55:fe:ae:3f:f8:6a:16:7c:5c:31:ff:7b:36:
         72:f4:90:fd:ec:c0:06:2e:46:17:73:9d:77:93:2e:c3:2f:19:
         e2:33:8f:72:50:45:10:a0:d9:98:e8:b9:ed:b2:9c:7b:00:68:
         50:6b:89:c6:5f:da:2a:19:16:37:1e:e9:ca:30:4b:03:1b:cd:
         f4:80:fc:10:0d:aa:f6:19:ea:77:71:84:d2:15:5b:c1:6b:1a:
         19:45:97:b7:b8:33:ac:3a:2f:88:97:78:a7:70:41:a2:f3:5e:
         1c:86:39:3c:17:8c:60:3a:10:1d:cc:e6:0b:97:da:79:8a:8b:
         2a:80:f8:25:39:89:73:77:9a:b2:a9:38:ae:ae:67:9d:06:cb:
         49:5e:85:39:70:46:28:52:ec:d2:e8:89:e5:a2:69:a1:56:8a:
         cc:e6:19:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLRVvPPJXMeDKUQXAgNQo9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTA4Yjk3MGJjOGNiZDBlNDQ1M2M4OTZiZGI4MjJhYTcx
Y2EyNmYwHhcNMjUwODA4MjAwMDM1WhcNMjUwODA5MjAwMDM1WjAzMTEwLwYDVQQD
Eyg0M2I2ZjNmNzkzNmZmY2Y3OTgzZGI1NWZkZmQ4ZTQ4OWEwODc4YTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWHqJbvfUgRlUxtkpRzgde9td8tE
8u0WCPnI6A6Q6W2jr2ZT81bhkIHUVMl3rGNYqdr34ooQEUv8OesNKfPQhYCBvz99
rB5/lu0RElubeeRInCFEHV6IayQTKkBauBlKtdJ8Dq/IHC2SHC+rBazYWznqzoKl
JWdC4ECR4XBX3SlMeE5yll+y3Lgu4FeV9X0htLkOK8IQcy8Sxh2vcqAcvuIudbxC
2qgu75XYo2D2GWlWW+j8KjVVPivffJo5AQz8ODyQlQ5byvfrpPgUlOVfuqSElQfF
kkgk4la7+JJusj7jLNttwWhZBEy4mnjoZPERGm/Cuqjab/NBVdcVx9YmSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEO28/eTb/z3mD21X9/Y5Imgh4oJMB8GA1UdIwQY
MBaAFC+gi5cLyMvQ5EU8iWvbgiqnHKJvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZDTGx3dkl5OURrUlR5SmE5dUNLcWNjb204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC80NmFiNDItYzEzNy00YmRlLWEzMmEt
YTQ0ZGQ5NjZjZTUwLzEvTDZDTGx3dkl5OURrUlR5SmE5dUNLcWNjb204Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC80NmFiNDItYzEzNy00YmRlLWEzMmEtYTQ0ZGQ5NjZjZTUw
LzEvTDZDTGx3dkl5OURrUlR5SmE5dUNLcWNjb204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmtQUYQr
euQAMlRf2tIS82Z0AuW+moZ0pd5v3ROhKuSIikEMjvtIcFj7dWNzDiaiOyAHep9W
rkkQQNCL/T9YnWIdIjSnhB8cd+YpPV0CJL6vr5pawpovnWVTQsfl0UJV/q4/+GoW
fFwx/3s2cvSQ/ezABi5GF3Odd5Muwy8Z4jOPclBFEKDZmOi57bKcewBoUGuJxl/a
KhkWNx7pyjBLAxvN9ID8EA2q9hnqd3GE0hVbwWsaGUWXt7gzrDoviJd4p3BBovNe
HIY5PBeMYDoQHczmC5faeYqLKoD4JTmJc3easqk4rq5nnQbLSV6FOXBGKFLs0uiJ
5aJpoVaKzOYZtQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:49 2025 by rpki-client