Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
File:                     L_jPdWH81tdmt6rTHb94XwKRSfA.mft (raw, json)
Hash identifier:          9oHV/tlUg35LjJRtYIz3ZQpUOMcuj0QtLoPppO6cJos=
Subject key identifier:   A5:79:94:8A:3E:DD:81:4D:D3:01:37:44:AF:5C:DB:85:3D:D0:B5:3F
Authority key identifier: 2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0
Certificate issuer:       /CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
Certificate serial:       01974967CFE70C0A48FDDD8C6583C1370AB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
Manifest number:          157B
Signing time:             Sat 07 Jun 2025 08:00:29 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:29 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:29 +0000
Files and hashes:         1: L_jPdWH81tdmt6rTHb94XwKRSfA.crl (hash: O3s1ccVgmcRf2kZY5VHNZ5zuEonP3tvGdLOlxxhA9Rs=)
                          2: xluZlF8Y4lWty9UIZc07EvSCNPk.roa (hash: HE/HrixCaKLjFQb4O8UjaXRfk5ZIsq5yeFLDR8AlCNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:cf:e7:0c:0a:48:fd:dd:8c:65:83:c1:37:0a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
        Validity
            Not Before: Jun  7 08:00:29 2025 GMT
            Not After : Jun  8 08:00:29 2025 GMT
        Subject: CN=a579948a3edd814dd3013744af5cdb853dd0b53f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:71:27:67:48:e4:b8:d8:64:d2:7f:c9:1c:37:
                    db:40:df:1f:e9:a6:23:6e:46:a8:b0:31:06:5d:d8:
                    3f:62:85:d6:17:e6:83:1a:8f:95:d9:c4:a2:8a:e6:
                    d1:cb:c9:a6:dc:5d:68:7e:c0:28:c1:9a:ab:96:b3:
                    a2:c5:e3:e6:41:23:40:d5:d2:72:84:a7:d3:13:67:
                    35:1b:e6:c2:a3:5e:91:5c:27:37:e3:60:f2:c3:b0:
                    bc:f0:8b:bd:2b:3d:28:b1:01:cf:f3:af:fe:e1:29:
                    37:2b:13:20:34:57:39:e7:81:a7:ab:b3:4a:cd:9e:
                    e9:9e:24:41:a4:44:f3:d5:f4:ff:cc:6e:b3:9f:68:
                    80:9f:56:4a:a7:ce:f0:28:a1:34:48:18:f9:47:04:
                    62:d4:a9:1e:89:34:28:07:41:d6:e9:07:dc:06:64:
                    74:21:2f:00:7a:24:20:87:4a:75:1e:cb:43:43:bf:
                    34:46:93:bb:1f:1f:a9:bf:e8:c5:fa:18:04:7c:15:
                    03:1b:4d:c6:4f:ab:c9:56:42:15:ed:ca:87:fa:25:
                    47:97:e2:15:18:5b:62:da:e4:7f:42:f0:92:6b:46:
                    3f:83:14:a5:93:b8:1a:fc:2c:20:5c:04:5e:44:27:
                    33:a9:dc:5f:f8:05:41:3c:03:d2:c9:9f:eb:ee:96:
                    c5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:79:94:8A:3E:DD:81:4D:D3:01:37:44:AF:5C:DB:85:3D:D0:B5:3F
            X509v3 Authority Key Identifier:
                keyid:2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:36:fe:c8:77:e8:2a:ab:46:22:f4:5d:fa:c6:f4:50:67:bf:
         4e:7b:b9:dc:44:3a:51:79:53:9d:ac:dc:7b:fb:8b:87:56:8b:
         b6:a7:82:4e:f0:2b:5f:dc:a2:74:53:95:4a:14:98:84:30:fa:
         96:ad:da:e0:fd:54:bc:66:03:b4:af:d4:7b:3d:ad:13:60:78:
         36:45:a9:84:cb:e1:47:f1:fb:38:56:8f:4a:fa:47:17:d8:5a:
         ef:76:b3:51:b0:ac:91:e9:85:e8:cd:86:e9:b2:50:8d:7a:aa:
         75:f8:81:11:e1:8e:59:45:ea:be:0a:20:68:4e:13:c0:f8:23:
         2d:9c:bf:89:67:96:84:dd:33:c7:66:65:45:c2:4b:b9:d8:e6:
         72:d4:2d:57:b6:e4:8a:1a:a0:4f:b4:11:ce:51:a5:c5:c4:50:
         5a:81:db:5c:f5:cd:e0:53:be:60:b7:75:e2:2d:36:94:95:21:
         cf:ff:15:f0:6f:ec:22:d8:0c:10:99:83:42:cd:01:39:0b:98:
         0d:23:21:16:e1:b1:e2:47:cf:15:75:2a:a3:33:34:4f:cd:6f:
         72:44:7e:63:f5:a5:ba:2c:91:27:63:a7:ea:1d:28:1a:e1:ff:
         20:d0:fe:28:05:ce:88:2b:f0:ef:67:67:98:ef:ab:09:4d:f7:
         0d:b0:2f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:01:40 2025 by rpki-client