Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
File:                     L46D7v5_FLnkSQo27r2IHhY8zBs.mft (raw, json)
Hash identifier:          NMxl7egJq4MxeuzuvYJuPMrH2qXV5EUuLu3fhyHchQc=
Subject key identifier:   14:70:77:F8:4C:22:A3:87:E9:3D:D3:F3:44:EE:5A:46:08:CE:C3:5D
Authority key identifier: 2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B
Certificate issuer:       /CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
Certificate serial:       01974AE8F8AC9360ABB74A1C7B7652090396
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
Manifest number:          12C3
Signing time:             Sat 07 Jun 2025 15:01:11 +0000
Manifest this update:     Sat 07 Jun 2025 15:01:11 +0000
Manifest next update:     Sun 08 Jun 2025 15:01:11 +0000
Files and hashes:         1: L46D7v5_FLnkSQo27r2IHhY8zBs.crl (hash: 7S/6P1ZH7yVN0+843nSBZk0ejEjHrm5zIVU5M5G5ezM=)
                          2: ou7kmfNJPTUTO_ZY5p4au0cZuog.roa (hash: 10vYhF0nx+k3pDi2pZX1tYjYlLEGelMx798hFv/wUiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:f8:ac:93:60:ab:b7:4a:1c:7b:76:52:09:03:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
        Validity
            Not Before: Jun  7 15:01:11 2025 GMT
            Not After : Jun  8 15:01:11 2025 GMT
        Subject: CN=147077f84c22a387e93dd3f344ee5a4608cec35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:05:58:90:4c:f2:57:03:be:a1:82:a2:c2:71:
                    af:82:25:b6:7f:49:eb:96:53:fb:0d:19:c8:a9:31:
                    a6:39:00:c5:95:52:5b:a1:1e:96:f7:ae:ca:cb:3c:
                    a5:fb:e8:c5:94:e3:b6:95:c5:fb:95:cf:ff:03:c3:
                    be:b9:ef:96:f2:d0:9b:54:3c:f1:aa:ee:39:ca:34:
                    1f:6e:9f:ce:8d:bd:e0:32:a9:e9:f5:0c:74:c0:4c:
                    6e:93:2f:56:08:a6:32:fa:8a:c7:08:0d:38:81:76:
                    06:29:8a:cd:1b:93:e5:23:45:94:83:d6:b4:6e:5e:
                    74:6e:9c:5c:04:64:af:bb:ea:bc:aa:27:53:94:d4:
                    42:90:b8:bd:82:a6:63:1d:61:33:82:35:38:cd:07:
                    2f:dd:a0:1d:78:c2:18:8c:fa:6a:b5:1f:d7:e4:fa:
                    a7:0f:0b:d3:63:5c:52:8e:44:bf:d4:88:de:9a:d9:
                    f5:c9:ab:60:59:02:48:35:51:ed:d0:70:ef:bc:75:
                    8d:0d:3b:e0:da:95:33:b1:a7:d5:7f:f7:16:ff:1f:
                    33:3c:cd:21:e5:b9:21:9b:4b:ae:b5:22:b7:ab:a4:
                    f5:c2:75:86:60:6b:e9:9e:50:f4:1f:23:a2:20:d6:
                    0b:ad:0a:36:0d:76:b1:3e:29:0a:2a:b9:16:fb:87:
                    a5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:70:77:F8:4C:22:A3:87:E9:3D:D3:F3:44:EE:5A:46:08:CE:C3:5D
            X509v3 Authority Key Identifier:
                keyid:2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f5:5e:2d:ba:31:00:0d:15:2b:0a:a4:76:20:29:52:b2:cd:
         23:cc:19:d7:2b:fc:6c:4a:8f:af:48:ef:53:35:c7:d5:f3:2d:
         0c:e9:1f:a9:c1:8e:d0:2b:8f:c4:af:ec:ba:a9:b9:e4:04:51:
         78:21:07:d3:a8:6c:9a:c2:bc:94:9c:db:af:bf:15:9c:81:be:
         be:24:13:96:b3:db:b2:51:1a:9e:1f:92:e0:7b:cf:21:48:24:
         08:41:e4:c0:b5:07:38:3b:26:29:ed:32:87:3d:17:3d:3f:89:
         16:30:57:9d:46:84:8a:35:9b:9c:92:48:57:fc:da:39:a4:f4:
         ba:45:9b:9b:08:7e:01:13:85:c4:44:ba:55:2d:4a:d3:c2:72:
         f0:01:13:40:25:9c:9b:29:f4:d0:d2:8c:22:31:16:cf:b2:df:
         33:df:4e:9e:96:32:fd:3a:03:4d:5c:4c:8b:42:f8:23:c9:32:
         90:72:59:a9:bd:81:79:60:6f:90:eb:05:f6:60:76:e1:a9:38:
         9c:4f:5a:8d:13:c6:f0:77:e5:8c:79:b6:e1:ea:de:e7:2b:f9:
         82:88:2e:b5:90:92:1e:2d:2f:02:ff:57:d0:a2:98:08:f7:90:
         0d:3c:cc:e9:4a:dd:d1:86:c5:83:b5:46:c1:08:6c:e1:67:8a:
         50:11:39:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:20:11 2025 by rpki-client