Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
File:                     L5FDTuFsYTNOwnDfVox3oLXeBSo.mft (raw, json)
Hash identifier:          4RYBLCcHGsaFm9GnolxxFBP2oPjOa7xRZI62/h3Uqcg=
Subject key identifier:   E7:8A:55:62:5D:DC:C7:F8:16:15:FF:85:3B:73:72:2E:3F:8E:06:89
Authority key identifier: 2F:91:43:4E:E1:6C:61:33:4E:C2:70:DF:56:8C:77:A0:B5:DE:05:2A
Certificate issuer:       /CN=2f91434ee16c61334ec270df568c77a0b5de052a
Certificate serial:       0199221E89535903942614EFDA15E343DC46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
Manifest number:          0D56
Signing time:             Sun 07 Sep 2025 03:00:50 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:50 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:50 +0000
Files and hashes:         1: L5FDTuFsYTNOwnDfVox3oLXeBSo.crl (hash: QgSuX83C6nFgnzPP/lxzAZW/ffx0ncsGNPPSvpzulhQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:89:53:59:03:94:26:14:ef:da:15:e3:43:dc:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f91434ee16c61334ec270df568c77a0b5de052a
        Validity
            Not Before: Sep  7 03:00:50 2025 GMT
            Not After : Sep  8 03:00:50 2025 GMT
        Subject: CN=e78a55625ddcc7f81615ff853b73722e3f8e0689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9f:88:f0:75:d0:e3:98:0c:de:0f:54:2a:2c:
                    78:2a:3c:27:84:71:d1:ad:fb:ae:35:6f:b8:c9:b9:
                    d4:06:f5:c0:df:02:02:4a:a9:43:ca:04:e5:3d:50:
                    31:5b:59:15:45:58:1a:2b:93:86:62:57:af:84:3b:
                    ca:4a:e5:79:f6:d7:48:6c:90:23:98:ba:d3:68:27:
                    91:a6:ec:45:23:7c:e3:b7:08:47:23:39:1f:ce:c1:
                    d7:2b:52:8f:0e:ca:9b:21:11:1b:08:81:c4:a9:f3:
                    29:6c:3a:a5:52:a5:b2:07:9e:e1:f8:67:12:4b:d4:
                    e9:20:8d:4c:79:bf:7a:c9:18:8c:6b:85:16:16:39:
                    c8:4a:06:bd:53:a3:42:0b:57:6a:71:22:7c:b7:75:
                    7f:70:62:b0:60:89:d9:01:4b:71:3a:a1:31:d6:5a:
                    94:eb:3f:a0:40:09:13:dd:9b:b2:79:66:53:5a:07:
                    bc:f1:6e:fa:b1:3b:c3:1b:4c:7b:58:72:26:40:56:
                    22:63:48:cc:94:dd:f7:28:75:b3:85:b2:9b:2a:13:
                    3c:ee:a3:d9:b4:f6:df:16:4d:65:2f:00:d1:c5:ec:
                    11:ad:af:3d:bb:23:e4:b8:2d:0d:e5:a6:4e:a0:52:
                    c3:49:98:99:8a:99:69:ee:3e:33:d5:a6:7c:4b:70:
                    63:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8A:55:62:5D:DC:C7:F8:16:15:FF:85:3B:73:72:2E:3F:8E:06:89
            X509v3 Authority Key Identifier:
                keyid:2F:91:43:4E:E1:6C:61:33:4E:C2:70:DF:56:8C:77:A0:B5:DE:05:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:88:4b:71:c2:9f:7d:b0:b1:a4:69:6c:20:0b:d1:ab:fb:fa:
         dc:02:5e:6f:3e:82:e9:48:f5:3d:95:c2:a0:e8:4d:20:31:9f:
         8c:d4:f5:97:7b:d1:c8:0d:4f:17:a0:85:cf:89:f1:df:4b:8b:
         fd:c5:2b:b6:08:33:05:b0:29:e4:15:f1:92:06:49:4c:2f:a1:
         03:2d:21:c0:84:fc:c2:2c:0a:cc:d1:c3:4f:bc:4d:bf:e6:e3:
         64:ce:c3:e1:28:7f:87:27:ff:94:b0:30:c4:12:9d:c4:3e:17:
         35:ae:bd:bc:7f:0a:e2:1e:9d:2d:8e:ad:ed:87:2e:7f:22:9a:
         76:8e:7b:78:48:56:aa:88:1e:66:ca:80:5a:71:9d:ab:56:ca:
         9a:9f:85:e0:26:ce:77:02:77:1c:27:ac:01:ba:59:0a:42:e0:
         7d:5c:34:f1:91:c8:88:33:f0:76:26:a8:10:1f:5e:db:57:20:
         14:98:40:79:fc:a6:89:73:6a:c5:9e:83:f6:e3:3a:b3:fc:01:
         15:4b:e0:48:7f:9c:de:c7:e7:f1:c8:02:e8:e1:6a:81:76:53:
         fd:48:17:d5:4e:3e:63:c7:b9:95:2f:96:9d:c3:b8:39:8f:10:
         49:d3:80:8e:c2:97:05:e9:b1:fb:ae:55:16:1e:59:14:76:84:
         05:ea:93:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:41 2025 by rpki-client