Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
File:                     L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft (raw, json)
Hash identifier:          sbrhZwmq6ekjc5uFf2wSwp6+wrhqrUI3h7Hx8Cy7Rw8=
Subject key identifier:   AA:7A:16:C9:D3:D8:C3:D8:24:9B:B6:4F:F8:7E:78:FA:AE:FE:56:2F
Authority key identifier: 2F:C5:15:B7:1F:91:C6:E5:6A:14:AF:B4:EE:FD:95:06:1D:EC:49:D4
Certificate issuer:       /CN=2fc515b71f91c6e56a14afb4eefd95061dec49d4
Certificate serial:       0198499BDF53E318B6F5C9A4AE0D3E9FC650
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
Manifest number:          1016
Signing time:             Sun 27 Jul 2025 02:00:08 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:08 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:08 +0000
Files and hashes:         1: DLJprIPgvCAnO7QSJdl3zR0anWU.roa (hash: G99IKFXpxSMbCkWEKl23+BBs+CPi7iUKXtQNR3AhKak=)
                          2: L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl (hash: Qg5E1uwXhV+yDsc4s8o23J2bxaXRZXLP4G1M6mENzos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 02:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9b:df:53:e3:18:b6:f5:c9:a4:ae:0d:3e:9f:c6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fc515b71f91c6e56a14afb4eefd95061dec49d4
        Validity
            Not Before: Jul 27 02:00:08 2025 GMT
            Not After : Jul 28 02:00:08 2025 GMT
        Subject: CN=aa7a16c9d3d8c3d8249bb64ff87e78faaefe562f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ed:f2:70:2b:d4:8c:d3:58:ac:e1:b5:83:ec:
                    22:09:6d:f1:79:b2:27:7f:69:a1:ab:08:4d:1c:1b:
                    1a:fe:16:e5:b2:28:b3:6e:97:f6:c1:d7:c2:9f:84:
                    1d:c1:73:46:1a:78:ec:90:0c:79:17:ee:7a:7e:f6:
                    0d:f4:56:b1:41:cc:21:80:9c:f8:f8:18:90:df:e7:
                    e8:f4:80:78:7f:1d:e3:79:bc:43:94:3d:ec:4e:70:
                    a5:18:0c:19:11:10:84:22:f0:15:0b:8d:e9:e0:4b:
                    77:bf:b1:84:43:32:77:f1:c3:3c:a5:e3:99:30:52:
                    06:c0:06:7e:e9:4c:74:7b:86:c6:56:2c:4f:6b:93:
                    62:93:64:06:e4:3c:8c:5a:29:67:e0:9a:e1:be:7a:
                    9f:8c:d4:5a:b7:dc:f6:40:d3:56:da:f8:f8:a2:3b:
                    9d:c3:9e:b8:11:bc:ba:86:86:b8:94:56:6d:e6:54:
                    28:fa:7e:b4:34:f2:e3:4b:5e:ac:f9:4b:e1:3d:11:
                    d4:05:f1:1d:0f:a6:cf:69:f2:ca:3a:a5:c5:7e:ae:
                    2d:49:79:f9:68:c2:c2:d7:e7:9b:10:5e:b8:08:45:
                    25:8f:5e:cf:ee:4c:e6:63:d5:38:6b:a0:83:da:86:
                    cc:de:d8:04:87:c4:41:cb:6a:09:44:ce:e7:4f:25:
                    a0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7A:16:C9:D3:D8:C3:D8:24:9B:B6:4F:F8:7E:78:FA:AE:FE:56:2F
            X509v3 Authority Key Identifier:
                keyid:2F:C5:15:B7:1F:91:C6:E5:6A:14:AF:B4:EE:FD:95:06:1D:EC:49:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:3a:c9:ce:3f:11:75:3d:ba:f7:03:fa:d8:05:ef:e0:11:49:
         3e:f4:4c:dd:de:4e:c2:57:9e:eb:bf:cc:62:0a:4b:4c:db:3f:
         b5:a5:4b:fe:6a:ae:d3:82:ed:97:9c:83:9c:68:e3:75:6d:36:
         f5:59:39:fd:1d:86:8f:6a:c8:66:55:13:30:1e:03:32:88:c9:
         19:c8:84:f1:3e:ea:14:c1:bd:d4:f8:53:83:a6:2a:2e:df:80:
         22:6d:65:be:89:d5:d0:4e:16:45:c1:07:23:5c:db:59:6f:d0:
         4f:93:63:96:7e:61:1c:f0:54:71:45:76:84:d5:c4:21:ee:c4:
         92:64:d1:f3:1f:17:71:9f:a6:f5:a7:28:aa:6e:ed:d4:18:02:
         c4:0f:c0:2a:cb:d6:5c:35:6f:1b:bf:e8:0d:07:fe:ca:65:c4:
         24:69:b1:02:90:33:10:f9:90:0f:a7:61:a6:3c:5f:fb:e0:89:
         d5:56:8d:43:22:12:9a:9f:ed:96:5b:e6:49:06:87:cd:de:b9:
         c0:7d:f0:07:80:6a:d2:ec:6c:8b:5d:67:7f:9c:9f:81:ac:27:
         b8:94:8c:98:e0:7a:df:91:07:f6:94:a6:88:47:11:23:47:bc:
         03:6c:b6:ad:eb:94:93:32:30:93:96:c7:98:e7:53:ae:76:34:
         67:73:c1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:26:19 2025 by rpki-client