Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
File:                     L6CLlwvIy9DkRTyJa9uCKqccom8.mft (raw, json)
Hash identifier:          Vi20mDNUqCtO6wppSlsGmlODBCfoYhAc5XbDO6OqKZY=
Subject key identifier:   80:91:F4:14:6F:01:22:9B:A9:E6:FF:A5:78:31:2B:84:21:03:CA:CC
Authority key identifier: 2F:A0:8B:97:0B:C8:CB:D0:E4:45:3C:89:6B:DB:82:2A:A7:1C:A2:6F
Certificate issuer:       /CN=2fa08b970bc8cbd0e4453c896bdb822aa71ca26f
Certificate serial:       019A71EEA254B112785E239A7A5E9E0E48AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
Manifest number:          0410
Signing time:             Tue 11 Nov 2025 08:00:55 +0000
Manifest this update:     Tue 11 Nov 2025 08:00:55 +0000
Manifest next update:     Wed 12 Nov 2025 08:00:55 +0000
Files and hashes:         1: L6CLlwvIy9DkRTyJa9uCKqccom8.crl (hash: TftfGy4mJbV08T4BbOLsstMe+jWxD9i25BFqPZLv6aE=)
                          2: dp6ZCuRIqo4YLa9gbgLjmyAheBM.roa (hash: yf/5qE0uY00EXj7opiLq6SkYzRlB8nAZTXaYic2R17w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:ee:a2:54:b1:12:78:5e:23:9a:7a:5e:9e:0e:48:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa08b970bc8cbd0e4453c896bdb822aa71ca26f
        Validity
            Not Before: Nov 11 08:00:55 2025 GMT
            Not After : Nov 12 08:00:55 2025 GMT
        Subject: CN=8091f4146f01229ba9e6ffa578312b842103cacc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4f:ad:b2:fa:29:2c:a2:27:b6:37:34:06:79:
                    cd:10:59:ff:13:22:2a:be:5a:44:53:cb:f4:40:99:
                    0f:8d:15:e6:92:f8:d3:06:b1:01:93:b1:a3:3c:00:
                    98:d2:6f:af:3e:c7:9c:41:f9:69:1c:a8:98:fb:e7:
                    75:9b:ab:ca:51:37:0c:cf:80:35:79:a5:6b:5d:10:
                    1f:f8:9a:5f:a0:56:ca:a0:63:20:0e:67:b3:4b:fa:
                    d4:4b:aa:2f:54:00:65:e8:a2:3c:bd:b9:d7:b8:c0:
                    b1:9a:d8:38:9e:a7:2c:ff:c8:92:6a:84:09:dd:1b:
                    29:4e:68:23:a7:65:a9:8b:02:5e:98:ca:c8:68:8b:
                    ac:b4:48:61:c3:37:df:89:7e:79:35:64:36:ac:64:
                    da:94:5b:7f:00:c3:fa:5d:c9:60:35:b7:0b:5d:fe:
                    c8:4f:4c:21:fd:4f:94:c8:18:26:9f:77:e0:48:10:
                    d2:6a:0f:51:1a:f4:11:0f:96:65:94:08:e3:ec:7c:
                    66:6a:e9:df:35:24:6a:63:22:fe:3c:a6:31:cb:35:
                    7f:02:cf:bc:b5:01:e6:1c:fe:97:ab:7c:76:d5:d9:
                    62:7d:bb:8c:39:e7:61:de:ad:7a:c3:77:eb:22:ce:
                    b5:5f:06:7b:12:48:28:07:e3:f7:00:52:19:71:ba:
                    f9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:91:F4:14:6F:01:22:9B:A9:E6:FF:A5:78:31:2B:84:21:03:CA:CC
            X509v3 Authority Key Identifier:
                keyid:2F:A0:8B:97:0B:C8:CB:D0:E4:45:3C:89:6B:DB:82:2A:A7:1C:A2:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:46:4e:ee:21:16:fc:a7:ab:5e:f4:44:a5:1b:5e:4f:3d:78:
         df:fd:cc:2d:99:e9:da:3d:73:f5:8d:2e:5d:6c:64:ff:26:3e:
         f7:9e:de:7c:65:ef:08:76:0d:7a:af:e0:3b:6b:c9:06:28:74:
         0c:38:64:3f:8e:db:0b:c2:ba:63:76:22:4f:c3:7a:0e:37:65:
         18:c6:98:d3:e7:a6:1f:44:a4:9f:4b:9a:57:35:9f:b1:34:0e:
         b6:31:6e:46:98:1a:51:b5:dd:46:c5:5e:fc:c8:d1:80:08:fb:
         5a:b8:12:72:d2:97:97:58:30:0a:69:ca:87:e6:3a:d6:d8:d5:
         99:54:04:60:5d:93:92:34:69:d9:d8:84:ed:51:f2:18:eb:74:
         39:f3:3f:de:2d:e7:c6:44:fe:8f:05:21:91:48:fd:b3:d4:84:
         f2:4b:6f:39:49:17:5a:30:2f:09:ac:8a:fe:f0:eb:95:3b:c6:
         b5:d6:90:a6:90:cc:63:3d:08:2a:7c:7f:32:d4:2e:10:15:8e:
         9b:c0:1a:89:07:26:05:f1:94:fd:ec:de:ed:03:78:b2:ea:2c:
         c7:ff:e0:75:70:a5:1e:7a:db:08:67:61:97:5f:be:bc:8c:35:
         b3:ba:2f:06:3f:28:6a:18:92:3e:b9:9f:d6:d0:92:19:7b:e6:
         bc:14:50:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:27 2025 by rpki-client