Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
File:                     L9XGHpMiaUuHL10yzB-lwbu6sbY.mft (raw, json)
Hash identifier:          F8JYSoYBMlBLli6sKEoXIjIcY6qcTOqnigEra9+Ot5M=
Subject key identifier:   C6:82:19:A9:0C:72:52:07:D6:A4:C6:E7:4A:75:B6:39:20:B5:05:49
Authority key identifier: 2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
Certificate issuer:       /CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Certificate serial:       01977007780EC826907893CAB63592511B77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
Manifest number:          05A2
Signing time:             Sat 14 Jun 2025 20:00:26 +0000
Manifest this update:     Sat 14 Jun 2025 20:00:26 +0000
Manifest next update:     Sun 15 Jun 2025 20:00:26 +0000
Files and hashes:         1: L9XGHpMiaUuHL10yzB-lwbu6sbY.crl (hash: zVLcr3D00TMmG7bjS1x0DwirikDkCMddVBJweUc2nAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:07:78:0e:c8:26:90:78:93:ca:b6:35:92:51:1b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
        Validity
            Not Before: Jun 14 20:00:26 2025 GMT
            Not After : Jun 15 20:00:26 2025 GMT
        Subject: CN=c68219a90c725207d6a4c6e74a75b63920b50549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e6:ea:99:55:92:b3:0f:a6:d1:91:0f:93:a2:
                    fa:73:ff:f9:0f:38:05:f4:49:dc:6d:81:8b:58:b4:
                    2f:8a:11:6a:0b:c9:c8:b6:a3:7d:5e:11:f0:67:af:
                    9b:bb:ee:cd:85:9b:0e:fc:02:b5:b4:aa:8b:07:65:
                    1c:61:d5:ae:59:af:96:2a:2b:08:8d:c2:4f:12:60:
                    b7:e8:b7:f1:0b:32:1f:2c:85:81:d7:f6:08:c5:5f:
                    88:61:75:e9:3d:dd:65:1d:a5:c0:8d:18:31:63:fe:
                    eb:7f:47:ee:6c:00:ca:7f:44:ef:4e:b5:18:18:30:
                    9f:ea:4c:6f:d3:2e:55:3e:97:bc:28:10:d6:20:57:
                    af:5d:5a:26:6e:64:ab:18:96:fd:28:57:69:d3:3c:
                    ea:d7:ae:db:a8:b7:dd:00:37:66:4c:d6:5a:23:87:
                    fe:d1:03:58:c7:4d:98:4c:d5:0c:e0:de:99:c3:fb:
                    11:ef:e3:c4:11:5b:dc:76:bb:f4:68:0f:0e:cc:11:
                    86:16:30:c0:11:53:80:75:57:12:fd:5b:20:af:a2:
                    23:b1:69:2d:d4:56:09:9b:6c:48:fe:6b:f1:5a:3e:
                    66:f0:b6:23:b3:75:12:2f:9c:60:20:bf:e6:47:83:
                    7a:bd:36:96:34:7f:bc:4f:ca:44:47:da:a7:74:e9:
                    47:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:82:19:A9:0C:72:52:07:D6:A4:C6:E7:4A:75:B6:39:20:B5:05:49
            X509v3 Authority Key Identifier:
                keyid:2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b9:0f:df:e1:6d:59:cb:56:e2:89:03:a6:e4:42:a8:bb:6b:
         1a:7f:2b:aa:be:3a:b7:58:46:4a:da:ba:b6:7c:8d:0c:35:5f:
         fa:c8:d8:51:92:34:f3:6a:79:d5:ab:55:d3:86:b1:d1:1a:68:
         4b:8d:f4:be:e7:77:ef:f0:5d:45:f8:cc:7e:fb:3e:96:c1:99:
         7d:6d:ff:52:a7:71:b6:c7:73:21:2e:0d:2d:ae:2c:09:d4:04:
         34:c7:11:22:99:be:2a:f7:0d:d9:75:7e:4a:dd:78:59:23:66:
         60:67:98:73:b7:db:f9:f0:30:7a:c5:7d:a3:30:e8:fd:fa:f9:
         8a:21:f8:de:c0:1c:fa:6f:68:ac:79:6e:12:f2:5a:eb:06:17:
         3c:23:4a:68:ea:40:f1:f2:a3:d7:2c:f6:c4:a0:4f:28:a6:0d:
         8a:66:e6:f7:1a:37:5d:44:d8:46:6b:bf:47:fc:10:85:97:b8:
         b3:40:00:cb:c7:fe:82:c5:cc:ff:42:7a:2f:8d:0e:3c:1c:3a:
         8b:7a:f7:a5:c5:f5:48:7e:ef:2a:15:36:91:26:31:69:39:5d:
         64:6d:1b:47:1f:2e:62:81:e7:89:22:8a:d8:01:1c:a4:ae:aa:
         95:41:13:43:24:0a:31:0b:df:a8:83:65:ba:3e:5c:4f:2e:f2:
         1f:7a:5d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:22:55 2025 by rpki-client