Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
File:                     L8VFWRk_6APSh01pjzQpKPdjKgU.mft (raw, json)
Hash identifier:          wIf1srpAft6U3mCxlEJM6hYCjVg9hQgGNxkLWuAlAbE=
Subject key identifier:   AD:5E:CE:39:79:EC:65:B2:BA:83:D1:0D:C2:CF:79:7D:E0:BA:4D:07
Authority key identifier: 2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05
Certificate issuer:       /CN=2fc54559193fe803d2874d698f342928f7632a05
Certificate serial:       01992255323DFABC99CBA5C34BE6901D7AC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
Manifest number:          166D
Signing time:             Sun 07 Sep 2025 04:00:32 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:32 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:32 +0000
Files and hashes:         1: L8VFWRk_6APSh01pjzQpKPdjKgU.crl (hash: aUlqpbAuLoZzVrohTdNF0h6I9pQCcZpiKbn8Nm/h1do=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:32:3d:fa:bc:99:cb:a5:c3:4b:e6:90:1d:7a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fc54559193fe803d2874d698f342928f7632a05
        Validity
            Not Before: Sep  7 04:00:32 2025 GMT
            Not After : Sep  8 04:00:32 2025 GMT
        Subject: CN=ad5ece3979ec65b2ba83d10dc2cf797de0ba4d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ee:e2:88:61:fc:61:55:99:c2:1b:90:7c:07:
                    f1:86:27:a9:c3:fa:4f:ea:3d:1f:c9:10:e5:c3:b2:
                    de:db:28:38:ce:a6:a5:42:7a:bb:4d:f6:43:07:4d:
                    3b:8e:76:94:41:ed:f5:43:7b:12:52:9c:b2:85:03:
                    49:09:c7:fa:00:a8:75:41:89:3c:bb:a8:05:3b:d1:
                    43:95:85:66:c1:55:ef:c3:cf:ab:b6:00:4c:d4:fa:
                    2e:eb:45:68:12:d5:0d:58:1e:ea:2e:ff:d6:51:63:
                    0b:16:9c:cf:07:38:12:ba:2c:1f:e3:18:5b:1d:e0:
                    58:b2:48:bf:4e:60:b8:cf:4c:7e:98:c1:2b:ef:05:
                    ea:ad:60:56:7e:6d:dc:62:d2:cf:2c:68:ec:c1:8e:
                    4f:37:ef:1c:0b:e3:32:f3:52:26:89:66:69:0d:70:
                    df:3c:f8:5e:e9:40:64:a7:0b:53:34:9f:35:aa:1c:
                    3e:c5:3f:12:4d:8e:6e:f9:30:7b:07:a0:e4:a6:71:
                    2d:38:48:81:3e:9e:fe:d1:f4:e0:07:c6:e7:49:37:
                    be:dc:49:dd:39:9b:76:cd:78:e1:34:ff:e0:74:b5:
                    f4:c2:e8:f7:77:e2:38:2d:0c:34:d9:81:74:a5:9a:
                    c2:4f:20:89:15:ec:bb:f8:c1:ef:0b:7d:17:53:c1:
                    37:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5E:CE:39:79:EC:65:B2:BA:83:D1:0D:C2:CF:79:7D:E0:BA:4D:07
            X509v3 Authority Key Identifier:
                keyid:2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:c1:c2:f9:08:a2:5e:ae:9d:af:35:4c:12:9f:ae:9e:2c:38:
         1f:dd:77:4c:9e:6d:f8:f9:61:46:a8:fb:72:e3:83:40:3d:2d:
         29:df:6d:41:57:63:7a:90:ab:50:3c:c1:bb:3a:01:a4:6f:96:
         96:a8:8a:8d:0a:ba:cf:f3:a0:d6:cc:3c:d5:62:a4:dd:91:15:
         42:b2:b1:00:b1:3c:a7:58:ba:17:e4:09:11:a1:7b:12:4c:db:
         67:4b:44:cf:f9:fa:e9:cb:0f:45:98:5c:c0:1e:0b:b4:b1:56:
         c3:d4:13:7b:5b:98:8e:b4:13:25:76:76:d0:e8:fc:11:0c:99:
         c0:d5:c9:cd:e2:81:30:b5:72:c6:4b:92:61:4b:a3:bb:5b:d6:
         d5:89:ba:29:06:b8:bf:63:9f:40:de:64:81:a2:e2:1a:c4:7e:
         85:6f:0c:eb:86:43:39:c9:b8:19:86:9f:91:cc:e8:ba:a4:3b:
         b6:07:c8:28:5b:fd:dd:9e:25:29:9f:9e:b9:91:be:4a:98:19:
         12:73:cb:ba:0a:51:a1:cd:b7:a8:ec:b0:ed:bc:24:97:11:ec:
         af:7a:fb:66:e4:23:0a:35:e4:13:60:80:ad:81:a6:fe:42:65:
         ea:69:65:c6:2c:03:e6:6c:e7:2c:90:b5:04:8d:6f:94:24:f1:
         12:d8:e7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:15 2025 by rpki-client