Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
File:                     L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft (raw, json)
Hash identifier:          VkBsP51q5Dw5HXETP8p4GJ6KZEjPKyTw9OVBqxH7eHk=
Subject key identifier:   28:7F:4D:27:39:45:D6:A3:10:6B:56:5E:F8:A9:80:6A:52:97:72:A9
Authority key identifier: 2F:EC:10:D0:08:8B:2D:DB:8A:4D:15:15:BF:06:B4:C0:01:2A:E0:46
Certificate issuer:       /CN=2fec10d0088b2ddb8a4d1515bf06b4c0012ae046
Certificate serial:       019896A6030AFFEE81106C720453BB4DEC11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
Manifest number:          1295
Signing time:             Mon 11 Aug 2025 01:01:58 +0000
Manifest this update:     Mon 11 Aug 2025 01:01:58 +0000
Manifest next update:     Tue 12 Aug 2025 01:01:58 +0000
Files and hashes:         1: L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl (hash: wfkX0Jf4pznevTHhahdreQYR/dinfWpQNuUzizCrRr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:a6:03:0a:ff:ee:81:10:6c:72:04:53:bb:4d:ec:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fec10d0088b2ddb8a4d1515bf06b4c0012ae046
        Validity
            Not Before: Aug 11 01:01:58 2025 GMT
            Not After : Aug 12 01:01:58 2025 GMT
        Subject: CN=287f4d273945d6a3106b565ef8a9806a529772a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0b:ba:ad:d2:3e:20:3f:5e:4d:5e:d1:70:f5:
                    bc:d8:a1:cb:c2:bd:6d:57:d6:f1:d7:cf:7a:95:23:
                    c9:2a:fc:61:7a:62:38:b6:c2:fd:91:af:72:7c:0e:
                    bf:fb:ac:e1:8b:45:79:03:01:43:5a:1b:07:a7:e4:
                    58:c8:9e:0e:67:fd:c1:d4:2d:ad:d2:10:9f:0b:a7:
                    b0:93:93:fa:fe:82:34:b9:f7:94:be:06:73:c3:fe:
                    c2:81:b8:b0:8b:ec:34:dc:ec:28:c7:ae:55:f1:15:
                    ac:ad:fe:f2:96:2e:d8:7d:e8:81:76:50:70:18:5d:
                    89:16:1e:f7:37:a6:e1:bc:25:d8:17:30:fd:1d:e5:
                    d7:da:67:ca:c2:30:9b:a8:15:c7:ae:86:4f:6a:91:
                    92:46:8e:83:ae:88:b2:54:18:13:f6:b7:2d:d6:60:
                    72:c5:40:0a:06:88:52:18:43:78:3c:20:87:e7:28:
                    5f:6f:27:f9:1c:39:9a:3f:5f:74:ef:40:7f:f6:f6:
                    81:97:1b:39:d9:f0:b2:ab:bd:99:12:a8:32:fe:33:
                    7d:99:4d:70:94:f1:b7:53:90:df:0c:17:69:38:93:
                    2e:ee:4c:3c:d9:f3:a4:8e:58:06:00:38:bc:16:aa:
                    86:d2:71:66:fc:c2:28:9c:62:f9:77:6b:46:8c:09:
                    a3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7F:4D:27:39:45:D6:A3:10:6B:56:5E:F8:A9:80:6A:52:97:72:A9
            X509v3 Authority Key Identifier:
                keyid:2F:EC:10:D0:08:8B:2D:DB:8A:4D:15:15:BF:06:B4:C0:01:2A:E0:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:5f:7d:32:bc:a9:dd:fb:92:e4:b7:9e:aa:4d:c0:2a:d1:60:
         92:11:d7:d5:86:0a:cf:0c:bf:02:e8:3e:4a:9c:b4:9d:a0:a2:
         e1:23:67:07:09:c2:e7:cf:d4:4e:4b:ea:9d:f1:2d:c7:70:f3:
         4b:ad:50:d3:64:b5:d5:70:94:13:19:1a:2e:ed:fd:04:4a:53:
         d0:65:e0:bc:e9:07:cb:52:a3:ca:73:4f:ed:6e:a0:fb:ca:42:
         96:55:29:91:2f:fa:a5:37:24:99:f1:c3:a9:7f:c2:b9:ee:dc:
         fc:c3:62:3c:5c:46:5b:62:e6:f8:bf:e8:b9:6f:fb:82:b9:de:
         83:8e:70:a6:3b:30:e2:2e:32:e7:33:b6:dd:cc:10:93:07:fe:
         ec:e1:39:b8:5f:ba:97:cd:eb:4f:5b:77:f4:68:86:6b:44:a8:
         27:e2:ad:a4:2f:28:29:1b:67:72:2c:fa:c7:fd:7c:ce:e8:98:
         72:ce:d7:a5:35:a7:4a:a6:67:2c:3c:88:68:0a:02:b6:1c:52:
         76:22:f1:1d:39:58:74:28:91:76:45:fd:d4:80:bb:e8:43:c4:
         f8:63:c6:c6:a1:f5:09:21:8e:ab:e0:5f:43:af:9e:a2:f2:39:
         f6:d4:95:ce:01:a3:97:a0:81:c3:7e:37:0f:bc:d8:8f:10:9a:
         c6:39:41:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:09:24 2025 by rpki-client