Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
File:                     LJl56ji5293KdLe_pzdotXv_wS8.mft (raw, json)
Hash identifier:          H9MXpmkihv7meqDuMFAVy04/tebvjf+5xLXAAIRk6Ts=
Subject key identifier:   39:91:68:CE:FE:9F:C7:C0:51:BE:7B:FF:47:DF:C8:91:1A:3E:2E:23
Authority key identifier: 2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
Certificate issuer:       /CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Certificate serial:       019883FA654660E35ED83D1DED2EB1633EB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
Manifest number:          08A7
Signing time:             Thu 07 Aug 2025 10:01:21 +0000
Manifest this update:     Thu 07 Aug 2025 10:01:21 +0000
Manifest next update:     Fri 08 Aug 2025 10:01:21 +0000
Files and hashes:         1: LJl56ji5293KdLe_pzdotXv_wS8.crl (hash: dXXmCyUN4nN7uhKbBfkG36fw91WoX/N+ALh5UjzVqng=)
                          2: VkqCgv7KNS6e1PhzxHv9intvH9s.roa (hash: UPK71sxaCRmFF2DDfT2tfgKHGZFs8344I8c3t19Opag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:fa:65:46:60:e3:5e:d8:3d:1d:ed:2e:b1:63:3e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
        Validity
            Not Before: Aug  7 10:01:21 2025 GMT
            Not After : Aug  8 10:01:21 2025 GMT
        Subject: CN=399168cefe9fc7c051be7bff47dfc8911a3e2e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ad:44:75:6b:9d:02:19:e8:dd:8d:e2:fb:0b:
                    80:0c:70:8d:0a:92:74:58:4c:fb:95:42:b0:96:1b:
                    7f:da:01:c7:e0:b0:ff:1a:24:5a:ba:11:59:68:ab:
                    06:be:1a:0a:cb:88:39:d6:13:7e:93:bb:16:ce:92:
                    89:72:b5:2b:cd:34:66:35:a9:92:44:0e:87:9b:78:
                    c3:bf:b0:2b:d7:f3:cb:be:47:38:1c:ca:8b:21:79:
                    76:9b:76:12:5e:b9:a0:87:77:f1:36:6d:66:f8:4e:
                    4e:79:5b:96:8b:7b:0a:da:ed:7c:85:66:91:f3:2e:
                    ed:e2:cf:54:d2:ea:cc:51:55:77:3e:08:c2:cf:18:
                    81:59:82:4e:69:42:e0:f5:5b:01:22:2c:93:e4:88:
                    73:6b:cf:c9:d0:a1:95:c9:40:91:9b:22:42:06:61:
                    fc:1c:14:60:22:e4:8e:b1:8c:cb:17:a9:de:d9:97:
                    3f:62:71:62:36:d0:e5:8f:48:55:7a:6b:cb:d1:cd:
                    3c:23:eb:91:97:04:25:76:0d:55:2f:44:d4:de:bc:
                    07:9c:6c:80:88:92:d9:40:f7:14:27:82:af:8e:35:
                    68:c1:3c:10:39:51:77:3c:77:d9:26:90:6a:eb:2a:
                    28:3b:84:ef:88:b6:2f:9f:f1:2a:d9:33:f4:bc:ee:
                    ec:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:91:68:CE:FE:9F:C7:C0:51:BE:7B:FF:47:DF:C8:91:1A:3E:2E:23
            X509v3 Authority Key Identifier:
                keyid:2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:79:60:50:97:f9:90:84:fd:81:d3:bf:a7:46:de:2f:91:c9:
         e9:28:98:6f:3d:0d:cf:02:3a:82:9c:e6:99:67:6b:17:86:a1:
         93:7b:82:30:6b:74:e9:40:8c:c8:d1:d0:82:85:97:46:a6:4f:
         2b:95:98:28:1f:8f:9d:68:cf:00:8b:11:fb:59:0f:e6:a3:1d:
         69:42:f8:07:14:91:f2:a8:7c:30:db:13:c9:3d:a3:3f:b8:b7:
         f6:79:f8:23:4e:22:9c:ec:c8:7c:16:a5:cc:72:aa:bc:7f:87:
         39:0d:f5:94:be:28:a6:01:f7:b2:0c:f6:50:66:3b:88:e7:73:
         63:68:11:c6:8e:41:e6:d5:01:26:49:c0:70:51:79:e6:41:4b:
         4f:55:42:c0:95:73:8f:9e:73:8a:76:6c:e8:ca:43:11:6b:2b:
         5d:ea:9e:85:07:2a:78:48:68:38:ba:0c:4a:46:40:86:64:aa:
         a0:55:58:8c:cf:fe:39:47:9a:30:85:d5:ee:12:3c:ff:ff:d2:
         96:82:5c:8a:98:ca:b2:de:5a:e3:5d:ec:5a:66:6f:32:c3:1a:
         8c:63:95:e3:b7:a4:b6:65:b6:d1:f1:3c:7b:db:fd:1a:72:34:
         9f:10:f8:cd:3f:bf:07:a6:22:9d:2b:5d:7d:ec:03:96:33:6d:
         9f:21:54:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:31:18 2025 by rpki-client