Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
File:                     L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft (raw, json)
Hash identifier:          fgX2ngtgNUc+ZIWl2UM7OCak+oFpQVueVFn2OeuBf00=
Subject key identifier:   8C:ED:66:93:84:E6:C2:23:4D:3F:2F:BD:8F:9D:7A:EE:D3:02:E4:FA
Authority key identifier: 2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85
Certificate issuer:       /CN=2f593b254a9c3fac81652502f1c43c2201c16a85
Certificate serial:       0198808B959CA644871EBDFB871642AEED11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
Manifest number:          0A20
Signing time:             Wed 06 Aug 2025 18:01:28 +0000
Manifest this update:     Wed 06 Aug 2025 18:01:28 +0000
Manifest next update:     Thu 07 Aug 2025 18:01:28 +0000
Files and hashes:         1: L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl (hash: DcGAM/bRWo2Q4PEe0bb1cQaVEpubkXg+Ic5DnzowCqk=)
                          2: vWKAelL_NB0Uv3QL4eiyHgV8KWE.roa (hash: 8Qqsv2KL8HLbO42iXxI9f+63WUGpq4hCsqW23tu/9Xg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:8b:95:9c:a6:44:87:1e:bd:fb:87:16:42:ae:ed:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f593b254a9c3fac81652502f1c43c2201c16a85
        Validity
            Not Before: Aug  6 18:01:28 2025 GMT
            Not After : Aug  7 18:01:28 2025 GMT
        Subject: CN=8ced669384e6c2234d3f2fbd8f9d7aeed302e4fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:32:52:4c:5d:fc:2e:c5:96:75:81:c9:ea:5c:
                    22:65:86:6b:64:b0:f0:a7:e3:b9:67:9f:77:e5:42:
                    dd:8b:d7:17:fa:d6:d1:ec:50:25:8a:9e:3d:88:5e:
                    71:c0:cd:f8:81:08:52:52:a9:cf:e2:3c:e9:1d:1d:
                    b4:b8:15:24:7d:bb:9a:fe:76:48:ee:fe:e9:73:46:
                    38:c6:92:59:8c:3e:80:97:53:eb:b0:bd:1b:ab:93:
                    a9:98:38:12:aa:95:8e:62:0c:7e:f1:9e:11:b9:74:
                    ef:fa:26:23:09:84:a1:48:f0:89:24:65:67:d1:ba:
                    8a:71:91:e5:b7:45:ae:b9:46:47:c1:9c:76:f6:97:
                    af:18:4c:24:5e:73:df:c9:f1:fb:43:83:e0:79:a2:
                    04:23:f3:21:da:97:f9:9a:2b:33:fb:65:4a:b5:f8:
                    b7:75:99:32:5e:c5:e1:59:c6:83:42:ef:48:88:7f:
                    cf:c9:23:e0:8b:de:6a:ef:d3:24:51:50:de:14:71:
                    2e:46:57:a9:c1:ef:23:62:ec:a4:58:9c:f6:4b:e0:
                    31:6e:93:cb:62:ae:d5:7b:15:49:aa:e8:26:e7:ad:
                    4a:c4:88:8d:08:aa:f4:6c:13:48:81:2c:59:81:61:
                    39:ad:f3:37:4a:37:33:ca:7b:2f:e7:78:1d:4c:ac:
                    99:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:ED:66:93:84:E6:C2:23:4D:3F:2F:BD:8F:9D:7A:EE:D3:02:E4:FA
            X509v3 Authority Key Identifier:
                keyid:2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:c3:0b:7c:01:7d:92:75:91:a0:d5:61:9f:84:4e:d0:26:ef:
         de:e6:d8:9f:4b:42:e8:d8:dd:5c:03:73:84:cd:66:25:18:d3:
         49:c1:c1:1b:05:b6:fe:4e:a3:8c:03:12:d9:9a:9a:62:46:64:
         d1:6e:4e:f2:65:2f:33:c6:50:d3:9c:4f:3d:dc:5e:45:73:62:
         7a:68:cf:31:2e:ac:9d:05:a2:f8:46:f9:1b:fe:66:6d:2d:f4:
         13:a4:04:64:ca:b8:d9:4f:4c:ae:1c:af:10:e2:f2:ae:af:97:
         9e:55:0f:04:c8:fe:bc:e3:ec:86:b2:96:47:09:ff:b3:48:8c:
         19:d4:92:53:77:86:2a:55:8a:34:a4:d9:11:63:41:c2:17:ca:
         97:9d:bd:21:d0:88:25:d0:e5:0d:a0:5b:86:69:07:40:ea:60:
         a7:a4:ab:0e:1c:f8:54:f1:77:77:89:5b:ba:5d:22:6b:ce:74:
         f9:a2:c1:ce:e9:b1:4d:70:7d:d8:1a:bb:10:9b:76:14:a4:7e:
         49:65:44:2b:e1:4b:1f:e1:17:f6:2f:ad:63:88:56:fe:16:9a:
         8a:e4:d2:0d:e8:3e:14:fd:3f:8b:53:d7:e3:7c:c1:89:57:ec:
         d6:f2:ce:22:28:d9:92:20:0a:08:fb:f5:63:f6:e6:45:9b:2d:
         e6:cc:68:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:07:59 2025 by rpki-client