Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.mft
File:                     L761tTgJwKseTgF9tL9QeIFa5mo.mft (raw, json)
Hash identifier:          BNThvXq57lNBF2N+fI8MT0DTN53sm3U4zaBVnD4AQzQ=
Subject key identifier:   27:E5:1F:6C:56:E4:44:8F:49:51:89:1E:49:62:AD:4A:C5:05:29:96
Authority key identifier: 2F:BE:B5:B5:38:09:C0:AB:1E:4E:01:7D:B4:BF:50:78:81:5A:E6:6A
Certificate issuer:       /CN=2fbeb5b53809c0ab1e4e017db4bf5078815ae66a
Certificate serial:       019922C36F9DFF77A12641B50127E8CD3C31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L761tTgJwKseTgF9tL9QeIFa5mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.mft
Manifest number:          0127
Signing time:             Sun 07 Sep 2025 06:00:57 +0000
Manifest this update:     Sun 07 Sep 2025 06:00:57 +0000
Manifest next update:     Mon 08 Sep 2025 06:00:57 +0000
Files and hashes:         1: L761tTgJwKseTgF9tL9QeIFa5mo.crl (hash: 15PHFdi6qbKPNzDH2QJNvH+t6TeBSATt4o+59weLoFE=)
                          2: bi2rgr1mwihMTviNCzdJhqMEHIE.roa (hash: 9YBEOHgs2y2rTJyOfEqp4CwAwfBA0dewuMGVkGf2YyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L761tTgJwKseTgF9tL9QeIFa5mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:6f:9d:ff:77:a1:26:41:b5:01:27:e8:cd:3c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fbeb5b53809c0ab1e4e017db4bf5078815ae66a
        Validity
            Not Before: Sep  7 06:00:57 2025 GMT
            Not After : Sep  8 06:00:57 2025 GMT
        Subject: CN=27e51f6c56e4448f4951891e4962ad4ac5052996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5c:b4:ac:1f:31:04:2f:6d:7e:87:40:e6:ce:
                    a4:1f:0c:c4:bc:28:b1:00:5c:b5:4e:17:ad:90:2a:
                    60:9a:83:5f:31:08:14:1c:db:4a:65:f5:1a:3c:fb:
                    10:48:33:8a:bc:7b:d1:b3:ca:56:8e:69:47:d2:a7:
                    a5:7e:06:08:4e:4b:c9:e5:75:b0:7b:ef:7e:7f:23:
                    33:f3:66:08:bb:5d:ec:1c:51:4d:a8:c7:df:53:2c:
                    57:d7:62:24:08:2c:7a:a3:4a:16:95:1f:50:a7:e8:
                    e3:08:d6:c6:a6:b2:31:4e:94:f0:b6:9a:bc:5e:f5:
                    da:d3:e5:e6:ca:74:a4:33:ae:57:80:4c:1e:bd:26:
                    0b:d0:2e:eb:9a:5b:18:e7:77:49:6c:cb:fb:97:10:
                    65:21:59:50:4d:fd:c5:94:45:bb:4c:75:a7:b8:e5:
                    a2:a1:81:f6:4b:33:6a:71:58:38:96:d7:85:80:0f:
                    7e:28:b4:15:f5:3f:80:f8:3e:90:55:55:e7:53:a7:
                    1c:43:b5:2d:7f:ae:3d:48:84:8f:63:e5:93:99:90:
                    b7:de:e8:81:10:e5:79:da:92:fe:d8:f0:36:78:2c:
                    eb:66:e2:f7:b5:a3:ac:3f:31:57:b7:28:c1:3a:dc:
                    d4:14:83:a8:54:35:ec:76:fc:0e:fa:22:06:1b:8b:
                    d2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E5:1F:6C:56:E4:44:8F:49:51:89:1E:49:62:AD:4A:C5:05:29:96
            X509v3 Authority Key Identifier:
                keyid:2F:BE:B5:B5:38:09:C0:AB:1E:4E:01:7D:B4:BF:50:78:81:5A:E6:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L761tTgJwKseTgF9tL9QeIFa5mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:39:39:03:79:64:8b:f2:54:fa:9a:b2:f8:76:e1:fa:80:d6:
         33:84:67:17:07:46:cb:ec:e8:b4:17:28:b9:b6:a7:15:49:2f:
         27:55:37:2d:37:dd:5e:a2:d5:39:d9:e6:4d:a7:c5:53:8e:65:
         a2:cb:da:46:99:08:ad:0d:03:6b:2b:f9:74:77:51:ca:03:ad:
         9f:05:5b:5b:8f:2c:59:e4:ba:06:8b:02:66:5f:ed:4a:07:48:
         71:68:f4:08:5b:47:3f:61:7b:f3:0b:83:e5:71:b0:81:5a:fe:
         2a:71:ff:e4:26:1d:f2:39:1f:5c:47:d0:98:b3:09:5b:38:6a:
         55:7f:e9:ff:a9:39:fc:dc:47:78:b9:b5:82:99:af:9a:f4:9e:
         0f:f5:5a:2b:b1:1e:ef:90:d2:17:7d:e6:3b:2a:cc:12:42:92:
         b0:48:c6:47:b8:7f:51:e4:1b:de:16:81:25:e2:a7:f2:32:a7:
         a5:c3:68:fd:64:8d:c8:d4:16:d7:1e:73:56:30:de:67:2f:76:
         8a:9e:68:cb:b7:ee:85:99:92:68:07:db:dc:7c:95:1a:4c:0d:
         9b:86:05:fc:c1:ca:1f:73:a1:56:32:e1:0d:6f:58:d0:fb:07:
         1c:33:de:cf:10:9e:7f:e2:63:d1:bb:37:13:6c:ca:bc:af:60:
         3f:03:cc:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw2+d/3ehJkG1ASfozTwxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYmViNWI1MzgwOWMwYWIxZTRlMDE3ZGI0YmY1MDc4ODE1
YWU2NmEwHhcNMjUwOTA3MDYwMDU3WhcNMjUwOTA4MDYwMDU3WjAzMTEwLwYDVQQD
EygyN2U1MWY2YzU2ZTQ0NDhmNDk1MTg5MWU0OTYyYWQ0YWM1MDUyOTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1y0rB8xBC9tfodA5s6kHwzEvCix
AFy1ThetkCpgmoNfMQgUHNtKZfUaPPsQSDOKvHvRs8pWjmlH0qelfgYITkvJ5XWw
e+9+fyMz82YIu13sHFFNqMffUyxX12IkCCx6o0oWlR9Qp+jjCNbGprIxTpTwtpq8
XvXa0+XmynSkM65XgEwevSYL0C7rmlsY53dJbMv7lxBlIVlQTf3FlEW7THWnuOWi
oYH2SzNqcVg4lteFgA9+KLQV9T+A+D6QVVXnU6ccQ7Utf649SISPY+WTmZC33uiB
EOV52pL+2PA2eCzrZuL3taOsPzFXtyjBOtzUFIOoVDXsdvwO+iIGG4vS+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCflH2xW5ESPSVGJHklirUrFBSmWMB8GA1UdIwQY
MBaAFC++tbU4CcCrHk4BfbS/UHiBWuZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDc2MXRUZ0p3S3NlVGdGOXRMOVFlSUZhNW1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS84ZjliYjgtOTBiYy00OTU4LThmOTMt
ODcwMDA3ODU1MmEzLzEvTDc2MXRUZ0p3S3NlVGdGOXRMOVFlSUZhNW1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS84ZjliYjgtOTBiYy00OTU4LThmOTMtODcwMDA3ODU1MmEz
LzEvTDc2MXRUZ0p3S3NlVGdGOXRMOVFlSUZhNW1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxTk5A3lk
i/JU+pqy+Hbh+oDWM4RnFwdGy+zotBcoubanFUkvJ1U3LTfdXqLVOdnmTafFU45l
osvaRpkIrQ0Dayv5dHdRygOtnwVbW48sWeS6BosCZl/tSgdIcWj0CFtHP2F78wuD
5XGwgVr+KnH/5CYd8jkfXEfQmLMJWzhqVX/p/6k5/NxHeLm1gpmvmvSeD/VaK7Ee
75DSF33mOyrMEkKSsEjGR7h/UeQb3haBJeKn8jKnpcNo/WSNyNQW1x5zVjDeZy92
ip5oy7fuhZmSaAfb3HyVGkwNm4YF/MHKH3OhVjLhDW9Y0PsHHDPezxCef+Jj0bs3
E2zKvK9gPwPMNw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:12 2025 by rpki-client