Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.mft
File:                     L6dldTzv6BbTiyUDeclXZqlvBtc.mft (raw, json)
Hash identifier:          tIWSpjISyXG/3gdIKKTcbhG+o5PBtxEmQ6tz9RbJ6Iw=
Subject key identifier:   92:68:C9:73:88:BF:98:B2:AA:B6:16:A9:50:07:DA:0D:C0:A2:42:34
Authority key identifier: 2F:A7:65:75:3C:EF:E8:16:D3:8B:25:03:79:C9:57:66:A9:6F:06:D7
Certificate issuer:       /CN=2fa765753cefe816d38b250379c95766a96f06d7
Certificate serial:       019873066DAEE4DA3E34D4EE91DC1B8BDF7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6dldTzv6BbTiyUDeclXZqlvBtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.mft
Manifest number:          124D
Signing time:             Mon 04 Aug 2025 03:00:57 +0000
Manifest this update:     Mon 04 Aug 2025 03:00:57 +0000
Manifest next update:     Tue 05 Aug 2025 03:00:57 +0000
Files and hashes:         1: L6dldTzv6BbTiyUDeclXZqlvBtc.crl (hash: /JzjZTYS1Mp5ILV+68xsa0hYDGROI4fXvVXHcfmQIQs=)
                          2: Voo3pzf4LD_DIb5LDnvARIWMy1I.roa (hash: uawaflHMP9u/AC/5na8UCpQ318svPIstKaBGatZyWFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6dldTzv6BbTiyUDeclXZqlvBtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:6d:ae:e4:da:3e:34:d4:ee:91:dc:1b:8b:df:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa765753cefe816d38b250379c95766a96f06d7
        Validity
            Not Before: Aug  4 03:00:57 2025 GMT
            Not After : Aug  5 03:00:57 2025 GMT
        Subject: CN=9268c97388bf98b2aab616a95007da0dc0a24234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c0:ca:af:28:d4:48:8b:bc:ae:30:b2:9d:4f:
                    74:00:49:2a:20:63:79:2e:6f:83:c4:99:44:d0:79:
                    96:2e:fe:0b:2c:d1:40:ac:6e:08:76:ac:96:81:e2:
                    c3:23:23:97:ae:82:54:ae:4c:00:90:ea:fa:b4:fd:
                    e8:14:ed:d8:3f:32:3b:bb:85:8a:30:81:da:4d:a6:
                    8b:33:5b:00:a6:d8:5b:65:1c:02:04:a2:e8:f0:4b:
                    ae:e6:c5:19:83:12:f3:c4:de:ea:97:94:e9:d9:df:
                    54:a6:c3:b3:69:6e:78:55:fa:07:e4:a7:5d:3b:8f:
                    86:40:07:3e:e0:0a:c8:9a:64:9d:e1:c1:4f:fc:4d:
                    b9:f4:78:37:43:92:1d:27:33:c4:44:43:76:eb:ec:
                    7d:0f:86:8c:08:9b:9a:6f:48:b3:e6:c6:58:b7:54:
                    a8:70:fd:0f:d7:1d:fa:11:22:a1:e4:af:f4:6e:8f:
                    53:68:7f:1d:b5:e2:b7:a9:1b:ed:92:d5:41:c6:e3:
                    7c:bf:3f:87:cc:89:a1:f1:f0:24:8e:5a:6e:ba:1e:
                    c6:87:8d:82:65:ea:7c:21:25:74:da:69:56:ca:f5:
                    7e:51:8b:1d:59:fa:01:8c:68:af:08:fc:c0:32:db:
                    cb:63:0d:cc:63:ed:45:c6:8e:b1:59:6e:c9:50:20:
                    2d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:68:C9:73:88:BF:98:B2:AA:B6:16:A9:50:07:DA:0D:C0:A2:42:34
            X509v3 Authority Key Identifier:
                keyid:2F:A7:65:75:3C:EF:E8:16:D3:8B:25:03:79:C9:57:66:A9:6F:06:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6dldTzv6BbTiyUDeclXZqlvBtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:09:47:80:32:66:8b:70:78:fe:e8:fd:75:00:68:2a:c0:03:
         36:c5:85:27:92:5d:d1:a4:01:ca:f9:07:ca:3c:40:30:a7:ae:
         a2:cb:0e:56:ff:c9:d4:4d:98:03:0c:6f:f9:1e:32:a1:b3:0b:
         82:3a:e9:d0:85:6d:94:6d:f5:52:ea:13:3a:2e:e9:6e:9e:70:
         36:34:48:44:a3:e5:4f:19:3a:0b:e8:9b:f8:64:e0:75:02:30:
         b1:55:cf:f1:1d:b1:77:15:9b:8c:bc:a5:8e:73:79:0d:1e:57:
         89:20:88:5f:27:81:f4:c3:85:6e:40:4a:ff:b1:87:37:a1:65:
         82:97:6c:f3:15:0b:08:ff:c1:27:dc:6d:e8:3c:d4:36:fb:14:
         38:2c:36:1e:f0:50:74:42:4e:a2:2b:31:ef:0b:79:da:4a:10:
         4e:78:93:50:d9:cd:6d:49:7b:54:74:76:f8:4b:79:1b:b3:dc:
         fa:1b:15:d2:f3:c4:0f:c0:ab:11:f0:df:f0:81:40:73:d8:02:
         d7:e7:92:c4:da:36:a4:f8:54:2b:03:fc:4d:da:7b:8c:b0:ed:
         89:5b:2b:bc:94:91:c3:1f:3a:0c:81:3d:42:24:2b:d0:f3:af:
         da:07:02:17:12:25:82:f9:ea:d3:fe:e2:9c:f8:00:93:09:73:
         be:19:49:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:53 2025 by rpki-client