Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
File:                     L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft (raw, json)
Hash identifier:          alE/4UKXDFZHf/IkIRfzJIWG1XNek+BzikPNp7v6IPo=
Subject key identifier:   26:98:05:96:B6:81:6C:D2:A5:CB:A1:06:63:CE:94:25:ED:21:61:38
Authority key identifier: 2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC
Certificate issuer:       /CN=2f57a34b058aafa0a763124a7d5d4187f4faabac
Certificate serial:       01984B544D2A413120E685C65E78F524D6B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
Manifest number:          1603
Signing time:             Sun 27 Jul 2025 10:01:12 +0000
Manifest this update:     Sun 27 Jul 2025 10:01:12 +0000
Manifest next update:     Mon 28 Jul 2025 10:01:12 +0000
Files and hashes:         1: L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl (hash: YuR1DdhAzFNMKmkiSfGUrnLze1C12Ah+6y2NCeU4u1Q=)
                          2: Vec_C6RiaudIxR6DQyYXgE_U-TY.roa (hash: MAwYc1OA3xQJeom5DQYcF+PCN/vQZIWajJ/StbTU5Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:54:4d:2a:41:31:20:e6:85:c6:5e:78:f5:24:d6:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f57a34b058aafa0a763124a7d5d4187f4faabac
        Validity
            Not Before: Jul 27 10:01:12 2025 GMT
            Not After : Jul 28 10:01:12 2025 GMT
        Subject: CN=26980596b6816cd2a5cba10663ce9425ed216138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:30:80:6e:34:d6:05:c9:39:c1:87:04:46:f9:
                    83:af:58:1c:52:1a:de:11:0f:50:2b:9e:2c:9e:ad:
                    cd:d8:b1:fb:ef:09:ae:2b:bf:6f:f3:44:44:34:5c:
                    04:35:fd:3e:ba:e7:ea:8a:ed:bf:6e:52:23:8a:f8:
                    76:a5:01:27:de:da:fa:bf:2e:5c:2d:17:7f:68:31:
                    66:ed:27:60:a6:4e:07:c7:9a:91:44:3a:71:98:b1:
                    9c:4f:08:3c:05:ea:9c:86:3a:15:ad:ef:e5:cc:b3:
                    f6:cf:d0:b1:08:22:d8:35:9f:49:40:34:61:1e:65:
                    23:7d:8c:13:8f:3a:1d:1b:df:fa:7f:f0:f4:d1:da:
                    96:87:08:f9:13:4e:42:c4:80:15:23:b1:ae:3b:36:
                    59:4c:96:64:13:d7:5b:85:c9:63:48:9d:a9:10:33:
                    e9:10:57:7e:98:cb:13:8f:c9:43:f3:40:98:57:5f:
                    21:89:1a:f0:51:cf:2f:2e:a7:01:76:77:d3:2c:17:
                    16:5c:95:0b:69:a7:cf:10:13:d1:58:2f:32:c7:5d:
                    89:e6:c2:60:de:7e:1c:5d:a9:c7:2e:97:26:13:6f:
                    e1:99:97:bf:54:e7:51:7d:5f:b0:51:47:26:40:43:
                    0d:b0:79:74:99:40:31:60:86:3e:1d:62:0d:c5:78:
                    7b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:98:05:96:B6:81:6C:D2:A5:CB:A1:06:63:CE:94:25:ED:21:61:38
            X509v3 Authority Key Identifier:
                keyid:2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:e9:bb:e5:13:d3:ca:91:d9:47:6a:69:c3:0e:41:26:db:85:
         17:ca:e3:b6:66:0a:8f:76:52:31:4b:4c:91:83:53:06:77:2d:
         6f:c1:9f:2a:a9:34:eb:dc:73:73:9c:f6:d7:ba:e2:a7:48:26:
         77:b7:47:05:98:68:9b:75:56:22:5e:f5:37:f8:02:1c:8c:28:
         e6:eb:52:00:bf:f8:ce:47:f7:76:bd:fd:55:b8:8c:43:ab:ca:
         0a:4a:20:0c:0a:cc:eb:70:69:93:b9:8f:42:9f:a7:47:19:fb:
         68:84:51:49:b3:56:11:39:b6:86:e9:be:0f:d6:20:1d:7e:98:
         22:80:f9:73:42:c1:9c:e9:b1:40:35:da:c3:be:35:de:86:52:
         85:58:4f:5a:f8:a1:21:b5:36:ad:ed:2c:60:97:a6:a3:9e:cd:
         89:a8:f8:2f:cf:c8:e5:e5:c9:4f:18:9e:95:6b:8b:49:ee:84:
         a0:9e:a7:77:2c:90:1e:0e:f9:8b:5e:9f:04:8d:cf:28:bc:44:
         96:89:06:a4:39:9c:52:93:6d:e9:66:9e:9e:43:c0:bb:bd:55:
         39:a3:be:a3:1f:f8:2b:fc:5a:7d:96:1d:b4:15:79:f9:fe:86:
         8d:97:66:9f:e9:6f:7f:91:31:6f:83:fd:52:87:50:f1:a4:c5:
         05:62:e5:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVE0qQTEg5oXGXnj1JNayMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNTdhMzRiMDU4YWFmYTBhNzYzMTI0YTdkNWQ0MTg3ZjRm
YWFiYWMwHhcNMjUwNzI3MTAwMTEyWhcNMjUwNzI4MTAwMTEyWjAzMTEwLwYDVQQD
EygyNjk4MDU5NmI2ODE2Y2QyYTVjYmExMDY2M2NlOTQyNWVkMjE2MTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zCAbjTWBck5wYcERvmDr1gcUhre
EQ9QK54snq3N2LH77wmuK79v80RENFwENf0+uufqiu2/blIjivh2pQEn3tr6vy5c
LRd/aDFm7Sdgpk4Hx5qRRDpxmLGcTwg8BeqchjoVre/lzLP2z9CxCCLYNZ9JQDRh
HmUjfYwTjzodG9/6f/D00dqWhwj5E05CxIAVI7GuOzZZTJZkE9dbhcljSJ2pEDPp
EFd+mMsTj8lD80CYV18hiRrwUc8vLqcBdnfTLBcWXJULaafPEBPRWC8yx12J5sJg
3n4cXanHLpcmE2/hmZe/VOdRfV+wUUcmQEMNsHl0mUAxYIY+HWINxXh7xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaYBZa2gWzSpcuhBmPOlCXtIWE4MB8GA1UdIwQY
MBaAFC9Xo0sFiq+gp2MSSn1dQYf0+qusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDFlalN3V0tyNkNuWXhKS2ZWMUJoX1Q2cTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83ZjM1NmEtYTI1MS00YjdhLTkwNjIt
MmRjZDZhMDBjYTEyLzEvTDFlalN3V0tyNkNuWXhKS2ZWMUJoX1Q2cTZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83ZjM1NmEtYTI1MS00YjdhLTkwNjItMmRjZDZhMDBjYTEy
LzEvTDFlalN3V0tyNkNuWXhKS2ZWMUJoX1Q2cTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOm75RPT
ypHZR2ppww5BJtuFF8rjtmYKj3ZSMUtMkYNTBnctb8GfKqk069xzc5z217rip0gm
d7dHBZhom3VWIl71N/gCHIwo5utSAL/4zkf3dr39VbiMQ6vKCkogDArM63Bpk7mP
Qp+nRxn7aIRRSbNWETm2hum+D9YgHX6YIoD5c0LBnOmxQDXaw7413oZShVhPWvih
IbU2re0sYJemo57Niaj4L8/I5eXJTxielWuLSe6EoJ6ndyyQHg75i16fBI3PKLxE
lokGpDmcUpNt6WaenkPAu71VOaO+ox/4K/xafZYdtBV5+f6GjZdmn+lvf5Exb4P9
UodQ8aTFBWLl9Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 15:30:15 2025 by rpki-client