Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
File:                     L6CLlwvIy9DkRTyJa9uCKqccom8.mft (raw, json)
Hash identifier:          p7u7gEviiZJCsRtnU/KgFZkaS4ZXwSaIyuaPaDcASMI=
Subject key identifier:   98:19:B4:87:E4:DB:1A:7F:DE:CE:69:4C:8D:43:F7:78:20:5C:57:08
Authority key identifier: 2F:A0:8B:97:0B:C8:CB:D0:E4:45:3C:89:6B:DB:82:2A:A7:1C:A2:6F
Certificate issuer:       /CN=2fa08b970bc8cbd0e4453c896bdb822aa71ca26f
Certificate serial:       019748C2F005FA5279ECAD422E07C8C786B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
Manifest number:          026D
Signing time:             Sat 07 Jun 2025 05:00:24 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:24 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:24 +0000
Files and hashes:         1: L6CLlwvIy9DkRTyJa9uCKqccom8.crl (hash: 4Gl3eMUVBkFC86XyObQlUIIhxCCxLMQHI2ciLG2bDl8=)
                          2: dp6ZCuRIqo4YLa9gbgLjmyAheBM.roa (hash: yf/5qE0uY00EXj7opiLq6SkYzRlB8nAZTXaYic2R17w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c2:f0:05:fa:52:79:ec:ad:42:2e:07:c8:c7:86:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa08b970bc8cbd0e4453c896bdb822aa71ca26f
        Validity
            Not Before: Jun  7 05:00:24 2025 GMT
            Not After : Jun  8 05:00:24 2025 GMT
        Subject: CN=9819b487e4db1a7fdece694c8d43f778205c5708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:99:53:75:e7:c2:0d:d1:29:6a:7a:c8:aa:ea:
                    91:ee:f0:57:81:4b:e4:3c:c5:de:32:6e:3b:02:d7:
                    7b:2c:1e:ee:88:d8:82:28:9b:d9:f3:b9:fa:69:ca:
                    a3:b4:7b:bd:23:d0:83:02:15:73:7d:b8:f4:37:10:
                    aa:92:2c:79:30:ef:a7:f5:f7:c3:b9:ee:b6:6a:28:
                    ef:ca:3e:a5:a7:1d:7f:c9:e1:ea:90:09:fb:9c:71:
                    f7:f9:8d:2c:69:04:4f:c4:dd:35:a3:53:85:08:22:
                    96:0b:ce:d0:8e:a0:8e:f2:0f:13:68:74:36:f4:6b:
                    1f:10:36:ed:bc:6b:15:ac:cb:16:d9:86:29:1d:6f:
                    d6:52:c5:fc:0b:1d:8f:89:f9:5a:ae:63:99:13:3b:
                    f2:8a:64:29:a8:82:e3:80:c9:77:1d:37:af:99:a1:
                    2a:fb:e0:80:b8:fc:27:af:01:68:30:1a:42:9f:3b:
                    a0:e5:0a:11:d9:9d:e2:9c:94:8e:30:2d:f9:78:44:
                    df:f8:62:84:96:d8:a7:54:a1:77:f5:69:ab:94:b0:
                    b5:e1:69:4d:4f:eb:73:88:e3:e2:bd:47:ca:55:d7:
                    cc:30:65:56:4e:a5:c0:08:78:77:cd:b1:e1:b0:08:
                    66:32:5e:b4:73:d6:c0:1b:4c:db:55:19:9b:52:16:
                    12:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:19:B4:87:E4:DB:1A:7F:DE:CE:69:4C:8D:43:F7:78:20:5C:57:08
            X509v3 Authority Key Identifier:
                keyid:2F:A0:8B:97:0B:C8:CB:D0:E4:45:3C:89:6B:DB:82:2A:A7:1C:A2:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:cb:1e:cf:b3:48:a6:3e:21:fb:0f:1b:09:ec:35:b8:97:21:
         f3:53:ad:02:0f:7e:ac:ce:16:be:cc:41:95:e6:71:ef:fc:90:
         eb:88:b5:83:76:ca:66:dd:87:bd:d2:4a:fe:86:35:5d:74:95:
         5d:b6:cd:bb:b3:12:97:2f:f4:00:cf:00:75:f9:3a:eb:e3:d8:
         21:5d:e8:f2:2e:e2:38:09:37:33:df:78:fd:39:24:07:1d:42:
         be:89:b1:43:81:5b:0b:75:78:ba:ce:d3:07:da:d5:8d:7d:c2:
         64:cc:ae:d5:ed:a0:21:8c:49:da:33:35:7c:5c:4a:9d:8e:ef:
         40:95:92:bb:ba:c5:33:bc:dd:4d:08:78:33:3a:17:8f:86:be:
         e9:86:61:6c:b6:76:61:87:1e:55:13:ca:ee:4d:76:de:7b:06:
         83:fd:36:42:ea:0c:d2:f6:28:fd:5e:99:fb:db:37:b6:fc:83:
         b1:81:a1:e8:43:ed:6d:96:74:79:70:6d:31:b2:ad:e8:8f:91:
         4c:42:f9:1d:6d:b6:38:6a:fc:d2:4e:3f:dc:ae:40:49:62:2c:
         69:a7:65:e9:4b:f9:56:ab:2d:16:ad:9b:8f:d6:8e:7a:80:c7:
         7f:ec:7c:d2:3f:d3:4a:5d:78:43:3e:79:42:ff:f6:85:88:c1:
         a8:6b:ba:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:52:17 2025 by rpki-client