Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
File:                     L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft (raw, json)
Hash identifier:          f/jBmbnbaq1dMWN/I7Cix3nAa07IsIz9saKsXaHORHE=
Subject key identifier:   74:C4:C3:50:9B:A8:E5:1B:2E:75:84:F8:F5:EE:DF:7C:73:AB:E9:F0
Authority key identifier: 2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC
Certificate issuer:       /CN=2f57a34b058aafa0a763124a7d5d4187f4faabac
Certificate serial:       019A4EF4CBD89FC0F1D8BD6EDE2B9B205314
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
Manifest number:          170E
Signing time:             Tue 04 Nov 2025 13:00:57 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:57 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:57 +0000
Files and hashes:         1: L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl (hash: V1yQacE/RlyEA/MG/P2yzOvwDCnxham0U1rcpKr9Gcw=)
                          2: Vec_C6RiaudIxR6DQyYXgE_U-TY.roa (hash: MAwYc1OA3xQJeom5DQYcF+PCN/vQZIWajJ/StbTU5Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:cb:d8:9f:c0:f1:d8:bd:6e:de:2b:9b:20:53:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f57a34b058aafa0a763124a7d5d4187f4faabac
        Validity
            Not Before: Nov  4 13:00:57 2025 GMT
            Not After : Nov  5 13:00:57 2025 GMT
        Subject: CN=74c4c3509ba8e51b2e7584f8f5eedf7c73abe9f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fc:9b:9b:d3:92:80:56:e2:9e:cd:64:7f:9c:
                    71:9e:12:9a:c5:de:60:93:10:59:7a:c3:61:ce:56:
                    6f:ed:aa:cc:5c:58:a3:1a:85:fe:da:a6:9c:c9:7f:
                    74:e0:3f:e7:4e:0d:b8:0b:35:91:90:91:7a:f8:dc:
                    d1:c7:85:1d:63:04:0a:95:76:54:84:00:4b:3d:87:
                    99:24:6d:e4:02:14:43:ec:68:78:2c:9b:01:d0:f7:
                    a2:59:f9:a8:60:93:c6:d0:66:d1:e7:08:35:92:97:
                    ad:a2:f2:f3:ef:85:79:9d:7f:bc:1f:67:80:18:f1:
                    82:6c:0e:57:bf:27:d7:8f:f3:9a:f7:b2:64:1f:fe:
                    e5:08:9f:ea:71:f7:7e:62:1f:d6:fa:a9:fc:3e:a5:
                    9f:c6:cb:ef:e2:15:91:38:05:f7:f6:86:02:3f:4a:
                    dd:4c:42:72:71:02:51:07:21:05:a8:01:22:e0:13:
                    9d:c0:e5:4b:80:7e:fd:43:3d:82:89:cd:8e:6b:ad:
                    ec:d1:64:a6:4a:ab:52:39:21:7e:31:4d:88:05:00:
                    7d:57:bc:3c:8a:e3:87:b3:0f:b2:ae:a0:4f:6b:9c:
                    75:e6:87:7b:09:c0:0f:c8:4c:95:37:6e:dc:4f:26:
                    e0:61:8d:f2:b7:5f:e1:e5:3c:b0:b6:c2:3a:87:86:
                    5a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C4:C3:50:9B:A8:E5:1B:2E:75:84:F8:F5:EE:DF:7C:73:AB:E9:F0
            X509v3 Authority Key Identifier:
                keyid:2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:1a:26:9f:dd:56:f8:ca:de:f2:ab:ea:6e:ff:a2:6b:0a:24:
         6c:98:b3:fd:a9:3d:d5:24:56:35:f2:19:73:2a:49:75:cb:00:
         8c:bb:7f:ae:89:ce:71:17:31:9b:3e:48:30:62:2e:4a:66:1e:
         6f:27:5c:b4:c1:5e:dd:6c:fe:3f:2f:1d:00:7f:ce:cc:d7:6d:
         42:f2:1d:fa:6e:f9:69:3e:ce:83:f2:7d:e8:f6:37:63:df:c8:
         fe:24:8a:bc:81:39:03:e0:5f:6a:da:54:e8:77:67:7c:42:98:
         1c:31:fc:b8:2a:bc:84:6e:e1:00:7b:4f:7d:f0:de:13:e7:dd:
         d4:1b:77:5d:7e:d2:ba:f5:1a:70:49:bb:d6:12:6a:fc:14:2f:
         1d:17:ef:93:b9:ff:6c:5a:1a:21:6f:b3:8b:9b:72:e5:c5:2a:
         c1:bf:2b:17:9a:88:e9:b5:75:83:1f:0b:a8:98:b8:19:5b:b2:
         13:19:2d:c5:8b:77:4a:56:ff:ed:62:b8:e6:28:63:f8:3d:ee:
         ac:c3:02:88:f1:76:3a:b5:e9:ab:73:b5:91:ac:ea:30:47:bf:
         87:c1:19:6e:c0:c0:4e:f9:f0:6e:a1:f0:e2:4a:d5:38:27:c6:
         1a:66:89:9a:4d:ba:d5:7b:15:b3:ff:c3:03:53:a1:49:be:fc:
         d6:46:35:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9MvYn8Dx2L1u3iubIFMUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNTdhMzRiMDU4YWFmYTBhNzYzMTI0YTdkNWQ0MTg3ZjRm
YWFiYWMwHhcNMjUxMTA0MTMwMDU3WhcNMjUxMTA1MTMwMDU3WjAzMTEwLwYDVQQD
Eyg3NGM0YzM1MDliYThlNTFiMmU3NTg0ZjhmNWVlZGY3YzczYWJlOWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Pybm9OSgFbins1kf5xxnhKaxd5g
kxBZesNhzlZv7arMXFijGoX+2qacyX904D/nTg24CzWRkJF6+NzRx4UdYwQKlXZU
hABLPYeZJG3kAhRD7Gh4LJsB0PeiWfmoYJPG0GbR5wg1kpetovLz74V5nX+8H2eA
GPGCbA5XvyfXj/Oa97JkH/7lCJ/qcfd+Yh/W+qn8PqWfxsvv4hWROAX39oYCP0rd
TEJycQJRByEFqAEi4BOdwOVLgH79Qz2Cic2Oa63s0WSmSqtSOSF+MU2IBQB9V7w8
iuOHsw+yrqBPa5x15od7CcAPyEyVN27cTybgYY3yt1/h5TywtsI6h4Za7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTEw1CbqOUbLnWE+PXu33xzq+nwMB8GA1UdIwQY
MBaAFC9Xo0sFiq+gp2MSSn1dQYf0+qusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDFlalN3V0tyNkNuWXhKS2ZWMUJoX1Q2cTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83ZjM1NmEtYTI1MS00YjdhLTkwNjIt
MmRjZDZhMDBjYTEyLzEvTDFlalN3V0tyNkNuWXhKS2ZWMUJoX1Q2cTZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83ZjM1NmEtYTI1MS00YjdhLTkwNjItMmRjZDZhMDBjYTEy
LzEvTDFlalN3V0tyNkNuWXhKS2ZWMUJoX1Q2cTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmRomn91W
+Mre8qvqbv+iawokbJiz/ak91SRWNfIZcypJdcsAjLt/ronOcRcxmz5IMGIuSmYe
bydctMFe3Wz+Py8dAH/OzNdtQvId+m75aT7Og/J96PY3Y9/I/iSKvIE5A+BfatpU
6HdnfEKYHDH8uCq8hG7hAHtPffDeE+fd1Bt3XX7SuvUacEm71hJq/BQvHRfvk7n/
bFoaIW+zi5ty5cUqwb8rF5qI6bV1gx8LqJi4GVuyExktxYt3Slb/7WK45ihj+D3u
rMMCiPF2OrXpq3O1kazqMEe/h8EZbsDATvnwbqHw4krVOCfGGmaJmk261XsVs//D
A1OhSb781kY1SA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:11 2025 by rpki-client