Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
File:                     L65BLP-oy1z7k7sxq16YkDh4TX8.mft (raw, json)
Hash identifier:          /Um31q+kWk5zDkJZvOD7feHS7yDVoj5oZ0MS5gFAWuQ=
Subject key identifier:   BD:97:CD:BE:4C:D1:9D:CC:0D:20:3A:30:47:15:21:DE:88:78:6D:2F
Authority key identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
Certificate issuer:       /CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Certificate serial:       0197808DD2FFDF90E807A4E099DD17C7C54A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
Manifest number:          04F6
Signing time:             Wed 18 Jun 2025 01:01:07 +0000
Manifest this update:     Wed 18 Jun 2025 01:01:07 +0000
Manifest next update:     Thu 19 Jun 2025 01:01:07 +0000
Files and hashes:         1: JnNHu3mBlI4S34lBG5gMe1SKldU.roa (hash: kmsxUGCHTVtHjCmc68XKFbTUU312Q88Sy/CYV55BiQs=)
                          2: L65BLP-oy1z7k7sxq16YkDh4TX8.crl (hash: BH9vXkIANuLGZ88IIQA/8n6TvvgmTYchc7qwLXYL0BY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:80:8d:d2:ff:df:90:e8:07:a4:e0:99:dd:17:c7:c5:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
        Validity
            Not Before: Jun 18 01:01:07 2025 GMT
            Not After : Jun 19 01:01:07 2025 GMT
        Subject: CN=bd97cdbe4cd19dcc0d203a30471521de88786d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e9:ec:a8:70:87:43:e1:99:75:2d:db:95:68:
                    9c:0f:02:5c:35:13:40:a6:16:d5:59:c3:f2:2e:3f:
                    a5:f1:de:c7:7a:f6:ff:de:e8:90:74:00:d7:0d:de:
                    e6:8c:f4:17:3e:15:10:50:72:4b:ee:1a:d6:3a:a5:
                    e0:20:ba:88:07:18:c0:8a:81:6f:5a:17:89:6e:e4:
                    60:6a:b4:23:77:53:d8:a4:e9:4d:8d:cd:d7:a2:2b:
                    3a:73:5a:7a:4c:6e:89:11:81:cc:36:60:f4:76:29:
                    0b:b9:f7:97:56:d9:cb:5b:1c:ec:52:f6:f1:30:fa:
                    a7:64:e5:31:a2:dc:2f:90:9c:79:d0:16:f1:95:0c:
                    1d:e4:9e:29:5c:e6:0b:ac:51:38:04:a3:ab:e6:4d:
                    4d:1e:a1:3a:57:28:40:2b:74:64:e4:ee:ad:f2:32:
                    0c:11:a2:08:d4:12:84:d7:98:8e:96:95:a2:6d:5b:
                    e6:b8:36:47:36:fa:79:bd:cc:71:b6:69:6f:4d:ff:
                    c0:53:c1:09:66:69:a1:59:f1:8c:90:41:f1:ef:71:
                    c1:87:ef:43:d3:7b:44:a6:0e:00:8f:81:ef:7c:1f:
                    76:a9:53:1d:7e:67:0c:ce:67:51:aa:4b:29:cd:7c:
                    36:7e:49:98:42:41:4d:5f:8a:0e:be:1a:2e:dc:9c:
                    57:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:97:CD:BE:4C:D1:9D:CC:0D:20:3A:30:47:15:21:DE:88:78:6D:2F
            X509v3 Authority Key Identifier:
                keyid:2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:3c:14:e9:5b:a4:88:5e:fe:00:1e:8e:09:00:86:7f:49:d0:
         ce:e5:8a:f7:17:ba:3e:3b:5a:a4:40:84:a6:ad:7a:e3:b6:6c:
         e6:22:19:5e:fd:5b:f0:d9:16:90:1e:2a:e4:61:97:7e:b6:ca:
         fb:9e:d9:a2:36:09:0f:92:1a:b0:d5:36:d3:25:33:e6:24:7a:
         c4:55:9b:7e:86:6e:bf:67:3c:13:b1:90:53:d2:ac:d9:60:6f:
         68:74:a0:79:7a:22:52:5d:40:22:0f:a9:88:0d:8f:fe:f3:c9:
         5c:c3:de:6b:91:5e:bc:88:cd:76:3f:47:f6:a1:bf:cd:13:35:
         bd:73:97:5e:ea:d8:ce:35:58:cc:e2:67:de:5a:5d:32:f3:f6:
         e3:74:6c:f5:40:b7:b6:f5:33:1a:92:0a:6e:b4:93:1c:e4:ea:
         8c:9d:15:15:fc:33:e5:c8:64:2b:c5:e8:25:59:d0:c7:40:9f:
         18:ee:0f:c3:86:1f:9a:01:0d:ce:db:f2:4c:0e:eb:79:7a:84:
         a1:f2:56:03:1f:5b:56:68:f7:b4:ce:e4:99:26:d6:be:83:b0:
         51:06:11:d6:c1:55:99:77:fb:f1:ca:dc:44:2d:39:65:12:a9:
         f2:76:07:28:7d:2a:6f:5e:81:c4:97:64:5e:c9:03:b5:a7:38:
         2d:97:e7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 07:55:19 2025 by rpki-client