Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
File:                     2n_WDMjnu2KTIE8woibgCHUksLU.mft (raw, json)
Hash identifier:          Tk+aYR4rnhdxMJrWb2LxSCJfa59zk6NvueCK9X8sKiQ=
Subject key identifier:   2F:1A:3E:D1:34:CA:38:C7:F2:22:5B:3F:59:E4:93:D8:C7:CE:56:A3
Authority key identifier: DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
Certificate issuer:       /CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Certificate serial:       019849D337007C49CAD1CB16BD4C835B2EA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
Manifest number:          15FD
Signing time:             Sun 27 Jul 2025 03:00:35 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:35 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:35 +0000
Files and hashes:         1: 2n_WDMjnu2KTIE8woibgCHUksLU.crl (hash: LBcm51fyyYXApPVB+dcn41pv44ApC2rKYKqe8obMHic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:37:00:7c:49:ca:d1:cb:16:bd:4c:83:5b:2e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
        Validity
            Not Before: Jul 27 03:00:35 2025 GMT
            Not After : Jul 28 03:00:35 2025 GMT
        Subject: CN=2f1a3ed134ca38c7f2225b3f59e493d8c7ce56a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c8:f3:25:ab:d6:be:00:fa:00:84:ab:6e:cb:
                    4d:6b:71:c0:6c:b8:cc:84:0b:b6:a6:87:7d:c8:95:
                    04:c1:01:0b:24:a3:a1:c6:fc:89:08:99:49:7b:f2:
                    1e:dd:f5:31:48:5a:50:67:0d:21:c8:0c:98:9c:3c:
                    bf:07:bc:c8:e0:b1:e8:09:50:78:e5:eb:64:1c:d2:
                    b3:73:8f:a8:31:75:4d:13:b8:10:b4:eb:ca:d9:66:
                    03:ea:1f:4b:f2:e8:fe:2b:78:88:f6:e9:a4:9b:a8:
                    71:ae:9a:85:d0:48:fc:de:5a:35:f7:71:35:0f:c6:
                    00:20:38:70:6f:95:93:58:56:9b:de:88:cf:ef:16:
                    fb:18:04:ff:72:ba:96:d9:97:78:83:fa:bb:60:ea:
                    d1:93:89:25:c2:4b:dd:59:3b:4b:01:bc:a1:dd:6a:
                    93:e5:b6:14:8f:0c:6d:59:73:46:b5:34:af:30:6d:
                    e3:d9:85:58:67:0c:ba:d3:01:f5:c1:c9:45:d5:54:
                    90:2a:05:9c:59:7f:3a:77:21:96:44:26:61:6f:4a:
                    9d:ac:73:88:4d:20:94:cd:81:fd:b5:99:d6:7f:0e:
                    31:de:3b:46:8d:e9:9b:09:1d:2d:14:96:20:61:f8:
                    f5:f6:fd:4f:3f:e2:77:04:bb:0d:07:52:c2:52:45:
                    d2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1A:3E:D1:34:CA:38:C7:F2:22:5B:3F:59:E4:93:D8:C7:CE:56:A3
            X509v3 Authority Key Identifier:
                keyid:DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:43:2a:03:8d:fd:84:fa:10:ee:92:ac:dd:9c:5b:68:5d:7b:
         35:47:9a:bd:bf:91:2a:57:f8:b2:f2:14:b3:54:4b:67:70:65:
         ef:0b:bb:d3:44:c0:a8:a7:cb:ca:18:45:41:99:53:ec:ec:46:
         65:bd:3a:9b:9a:e1:98:30:2e:f9:91:e7:56:58:dd:29:b0:48:
         ab:19:52:0f:a5:bc:e1:a7:f0:bf:8d:5f:6a:a1:32:a7:8f:11:
         6f:e2:c1:c0:e7:8f:6c:f1:eb:29:6d:84:02:ff:c7:70:9d:f7:
         86:25:39:19:2f:55:6b:ff:5f:2f:80:70:16:71:91:08:66:79:
         72:76:78:b6:c5:47:ef:81:ad:eb:01:5c:23:51:b4:14:29:01:
         7f:4b:54:f3:dd:97:06:a4:de:98:28:22:17:ea:3f:cc:a9:74:
         64:41:27:37:70:c6:69:9a:c4:a7:85:c5:36:d4:23:ae:71:df:
         16:1f:05:66:9f:c0:6f:cf:d6:9c:72:f2:bb:34:8b:c2:ff:f5:
         6e:2b:25:1e:be:28:8a:00:f1:79:f1:39:5e:20:96:50:d4:b1:
         03:5c:83:ed:23:37:1e:fd:4f:94:e9:82:62:2a:40:da:0e:95:
         20:82:4b:77:c0:83:be:04:df:6c:00:a4:f0:ee:02:cf:dc:87:
         d0:50:b3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:56:08 2025 by rpki-client