Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
File:                     L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft (raw, json)
Hash identifier:          FizANTyJfMDKtgUN0p26NdyG8HoBQYWXMhL6wLWzyFk=
Subject key identifier:   DA:A3:5E:FA:ED:8F:1A:EC:A0:B2:DA:C5:3A:00:B6:8A:E5:A5:45:0B
Authority key identifier: 2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20
Certificate issuer:       /CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120
Certificate serial:       0198D4729130E96C3394525EADFFC5A8326E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
Manifest number:          1644
Signing time:             Sat 23 Aug 2025 01:02:14 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:14 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:14 +0000
Files and hashes:         1: L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl (hash: 44nYNtySuTbaBkVitrFXkCZiwSPeLcTfZryv0yVoOy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:91:30:e9:6c:33:94:52:5e:ad:ff:c5:a8:32:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120
        Validity
            Not Before: Aug 23 01:02:14 2025 GMT
            Not After : Aug 24 01:02:14 2025 GMT
        Subject: CN=daa35efaed8f1aeca0b2dac53a00b68ae5a5450b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b9:99:97:eb:a4:68:ac:68:84:64:dc:ca:f6:
                    91:a3:3c:42:b9:f0:14:ad:8a:17:ea:b5:c9:e3:61:
                    23:16:15:3b:14:ad:c9:d6:f7:4e:59:70:88:ed:8c:
                    b1:7e:67:c7:21:17:62:6c:cb:11:bc:69:86:d1:62:
                    bd:ac:f6:a3:03:3b:10:96:68:8b:dd:7a:ea:3a:a1:
                    0f:68:23:66:2a:35:f6:e7:ce:b1:49:28:48:bc:dd:
                    cb:1e:95:9d:a9:ce:d0:4c:ef:33:5f:a0:19:9a:1d:
                    a3:26:67:8e:f2:45:31:f1:37:8e:83:84:ee:2e:65:
                    34:47:53:da:64:6e:f8:3b:65:98:d8:d8:44:78:e9:
                    e2:a4:45:33:11:ee:4f:d6:e6:99:27:f8:cc:cd:4c:
                    bb:10:72:83:1e:d9:c6:e2:f5:2f:3a:6d:bf:3a:26:
                    16:6f:43:65:b6:fb:d3:36:78:95:b8:02:5a:a2:e6:
                    78:c4:e9:8e:70:57:04:25:09:90:1e:87:7e:0b:d3:
                    f0:c0:b8:22:74:11:7c:f9:7e:14:f1:61:5e:e8:da:
                    ca:db:f6:97:5b:66:d8:8c:7a:bf:e1:6d:10:85:d6:
                    3e:ba:90:e7:f1:97:25:9d:de:b0:52:a7:7c:e6:32:
                    2a:06:92:01:05:4e:b0:05:1f:8c:af:b7:28:b3:ec:
                    8c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A3:5E:FA:ED:8F:1A:EC:A0:B2:DA:C5:3A:00:B6:8A:E5:A5:45:0B
            X509v3 Authority Key Identifier:
                keyid:2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:80:f2:ee:64:df:34:fd:2a:f7:69:9e:86:bf:42:62:e2:6a:
         b9:8b:44:92:67:da:e2:54:a0:fc:1c:4a:bf:6c:8e:40:d7:bd:
         be:2c:e3:49:46:96:d7:68:10:5f:68:84:63:f8:6d:49:16:ee:
         73:b5:af:44:4a:85:24:ac:17:f6:07:f7:2a:82:c1:ff:12:09:
         36:a0:62:78:72:89:ba:de:dc:3d:c0:29:48:a0:b5:4c:bc:5f:
         ab:76:65:10:13:95:50:a2:c5:d2:03:49:0f:e3:86:91:fd:ca:
         75:52:fa:cf:6a:cb:b0:64:fd:d2:1e:fd:86:6d:61:1e:03:ac:
         0a:81:5d:9c:d6:a2:b2:ab:4e:c1:b1:bf:6e:4e:65:71:e3:1d:
         a9:ee:c2:cd:ce:ee:65:58:48:e8:e7:fe:b4:1c:db:30:3c:0a:
         ff:00:69:93:21:56:33:ec:b2:53:9f:f7:8a:83:7e:62:da:77:
         23:07:46:4c:44:08:68:b9:b5:8c:26:6a:9c:df:a0:d7:80:eb:
         b2:cc:44:2a:8c:98:46:41:ab:3b:79:0f:e5:d5:14:ce:4d:5c:
         59:84:9a:6c:b8:b3:b1:ae:9b:05:02:5e:c3:ec:1a:ee:14:30:
         46:f1:b2:3a:ae:0b:11:34:2e:0a:47:19:b6:6b:c6:eb:99:20:
         ed:70:8e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:38 2025 by rpki-client