Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
File:                     L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft (raw, json)
Hash identifier:          AsnCgXkkDNCDHM/g7rUBAJAAvoxQDz4IP32oOfUBkqY=
Subject key identifier:   E6:8D:DC:8A:21:09:58:F8:57:E5:AD:E8:99:F3:8B:C7:B7:E1:E1:14
Authority key identifier: 2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
Certificate issuer:       /CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
Certificate serial:       0198CACA062639C30D1A64E107C5F9C17AE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
Manifest number:          1644
Signing time:             Thu 21 Aug 2025 04:01:34 +0000
Manifest this update:     Thu 21 Aug 2025 04:01:34 +0000
Manifest next update:     Fri 22 Aug 2025 04:01:34 +0000
Files and hashes:         1: L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl (hash: wSIljiycOWxKZ/yIwiOHTsdiCJ5EncEkPavgoQWb/og=)
                          2: fVFqHVP_QiliJMl-kIcrOxmuCro.roa (hash: GkKxdagAYy+CINxI1Dp6ck9rxu8bkF9hmUyqgByM5jo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Aug 2025 04:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:ca:ca:06:26:39:c3:0d:1a:64:e1:07:c5:f9:c1:7a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
        Validity
            Not Before: Aug 21 04:01:34 2025 GMT
            Not After : Aug 22 04:01:34 2025 GMT
        Subject: CN=e68ddc8a210958f857e5ade899f38bc7b7e1e114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:67:14:2f:73:f7:59:aa:3b:5c:12:0e:eb:ef:
                    35:52:fb:53:d4:50:a2:6b:50:6b:57:61:ec:f0:74:
                    ec:ae:0e:e4:fa:1e:f6:79:ff:9f:84:b8:fd:19:85:
                    e3:8d:f1:e0:2e:40:75:28:d6:90:64:ef:f9:28:69:
                    cd:da:c1:9e:58:b0:6f:93:8e:14:7a:d6:65:1e:fb:
                    6f:f7:5f:60:b6:9e:d7:32:25:2c:80:e9:25:3f:a3:
                    79:7e:f7:8c:70:b6:0e:23:76:aa:d8:fc:41:b2:9d:
                    b7:12:7c:d2:15:29:e8:6c:ff:73:1e:e7:44:ab:41:
                    2f:9e:a5:56:2a:2e:7c:7b:ea:87:f7:73:8b:a6:a5:
                    c1:33:c1:c1:0d:92:cd:eb:37:72:41:52:07:10:c9:
                    91:55:a9:bc:02:8a:7b:5d:a4:8e:72:04:b1:6e:e0:
                    d2:bb:d0:bb:51:79:e2:2b:3a:d5:d0:4d:eb:8d:0b:
                    ef:57:b3:91:dc:b2:83:0c:0f:df:22:42:62:bf:b0:
                    8a:7b:f8:b8:4e:c0:1f:a6:e0:60:f1:d8:9b:4b:74:
                    47:c6:34:af:2a:49:09:70:8f:e3:29:4e:d6:02:c3:
                    c3:76:c2:a2:86:ac:44:47:4b:e4:18:7d:45:52:6e:
                    93:c5:29:a2:30:ef:4e:5f:c4:b4:53:89:a0:12:52:
                    bf:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8D:DC:8A:21:09:58:F8:57:E5:AD:E8:99:F3:8B:C7:B7:E1:E1:14
            X509v3 Authority Key Identifier:
                keyid:2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:91:0c:3b:ef:2f:e4:71:8c:14:ac:eb:8c:28:f1:ca:5b:58:
         0d:0a:f1:f3:72:93:42:04:a7:f8:68:d3:0a:e4:ec:6c:3c:00:
         6d:e0:8e:44:f9:6b:68:6f:45:89:81:b3:f2:2b:ab:0a:0f:1b:
         5d:4a:72:48:b6:87:55:ec:53:eb:28:6e:db:e6:2c:b3:0c:c4:
         d4:49:e1:ac:e6:98:f8:0f:9b:0c:de:ea:cd:68:f1:5c:44:0d:
         5d:58:61:64:2c:d2:ed:e9:8b:75:4d:76:36:1e:18:b9:1b:51:
         99:94:2b:2c:8c:b7:f6:36:27:85:fe:fd:32:ea:1c:c5:21:b0:
         e8:ef:bf:b0:16:2b:b9:c2:83:da:21:43:b3:d8:df:09:98:8d:
         a9:68:ff:0b:20:5f:87:c7:7f:a2:3c:0d:ba:28:dc:2f:0c:f7:
         64:ee:fe:65:28:61:0a:6c:c3:a9:b9:db:80:8f:75:96:b7:2d:
         fd:86:2f:99:b4:a3:48:f5:27:80:35:1a:46:9e:bc:9d:2c:9e:
         e4:7b:a6:a9:1e:9f:71:23:38:25:7f:48:c8:29:b0:0e:f0:db:
         cb:92:e2:c8:42:2e:46:32:9b:51:f7:fc:0c:80:c7:29:07:7b:
         91:5a:de:0b:f7:75:4c:34:68:03:3d:9b:3d:56:e7:4b:9c:70:
         f8:f9:b5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 13:44:28 2025 by rpki-client