Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
File:                     L_vZ3o2JUmxaSadmwfSF8J9akWY.mft (raw, json)
Hash identifier:          2BZjzw6Bhs1IyHLfl6Z8fV9JIQ57T1ujLJg4Rv534R8=
Subject key identifier:   2B:D7:A0:C6:D2:E8:79:C2:E3:8C:21:CD:39:01:55:34:AA:25:7A:4F
Authority key identifier: 2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66
Certificate issuer:       /CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166
Certificate serial:       0198D5F1A7F5ABC27EE1C6755DD6B49168D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
Manifest number:          0903
Signing time:             Sat 23 Aug 2025 08:00:40 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:40 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:40 +0000
Files and hashes:         1: L_vZ3o2JUmxaSadmwfSF8J9akWY.crl (hash: Clihhn+7NUdmyWwIFywyGzqW4mGB8oWEPGg3304cDCo=)
                          2: mXwM3P_PQQyVSERAjNUZUTUhWjg.roa (hash: 4+JoMMio3r7vvH6PXd1vvlGKdXZmMUa4KFkXT7FGKzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:a7:f5:ab:c2:7e:e1:c6:75:5d:d6:b4:91:68:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166
        Validity
            Not Before: Aug 23 08:00:40 2025 GMT
            Not After : Aug 24 08:00:40 2025 GMT
        Subject: CN=2bd7a0c6d2e879c2e38c21cd39015534aa257a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:95:3b:17:7d:cb:75:95:7f:80:ec:be:cc:1d:
                    03:b5:7d:29:45:9c:c5:95:30:fc:9f:d0:26:5b:c3:
                    70:7a:33:48:31:08:c8:00:bb:01:d6:78:10:25:27:
                    12:47:66:48:e9:90:39:64:7c:55:0c:ce:59:87:f7:
                    29:9c:9b:99:b1:13:3a:0c:dc:fc:4e:af:8c:45:40:
                    41:84:63:fc:77:67:82:bf:63:3b:ab:c4:37:e5:79:
                    15:36:fc:ef:c7:aa:46:c4:c8:c1:4e:17:e3:81:23:
                    d3:d6:de:2c:02:20:b3:28:2d:e2:ca:84:23:da:97:
                    03:75:12:3c:8b:34:09:ce:82:71:b6:a4:21:8b:73:
                    d8:52:64:39:3e:05:39:9a:26:db:db:8b:dd:1c:97:
                    a3:e9:9b:0c:42:96:58:3a:59:5a:a7:83:c6:09:d1:
                    cb:40:29:fc:53:fc:7b:e5:60:75:cb:3c:bc:7d:84:
                    ca:85:44:33:65:ce:b2:d5:4f:9b:c5:31:f5:f4:2e:
                    e9:31:a7:c2:9d:14:99:6b:08:3b:91:21:0a:31:73:
                    06:b5:45:8e:46:59:5b:c3:78:0e:cb:29:85:03:72:
                    08:fe:ba:99:48:42:9b:8f:3f:70:20:24:05:45:2c:
                    0d:b4:c8:8e:21:46:ba:95:bb:a1:c1:ed:7b:b2:4d:
                    79:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D7:A0:C6:D2:E8:79:C2:E3:8C:21:CD:39:01:55:34:AA:25:7A:4F
            X509v3 Authority Key Identifier:
                keyid:2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:de:0a:0d:1d:18:b3:49:c3:6f:75:c2:b9:f1:0c:d4:93:6f:
         94:07:73:43:33:25:7d:aa:bc:68:87:c7:2f:4f:6b:8e:6a:2c:
         bd:da:50:05:89:9d:e7:52:71:0e:44:74:61:d9:e9:3e:65:05:
         af:e4:62:fd:ee:4e:1b:3a:27:fb:b1:1b:1a:97:cd:b0:79:7b:
         08:3e:42:f3:e2:b0:8f:22:26:57:bc:ca:29:ed:da:c6:85:4f:
         b2:f2:11:e4:c2:24:55:d6:46:c3:1e:b2:8e:81:80:d5:08:eb:
         55:bf:ef:8e:ac:8c:51:ce:60:ad:df:b3:2d:57:b0:57:19:7b:
         41:e1:e6:18:45:81:b8:82:37:ec:c8:28:07:19:27:05:21:bb:
         f8:af:c1:c6:dd:a5:ec:da:6f:1c:e4:8b:4a:88:f6:5a:c4:75:
         04:79:81:32:7a:5c:69:bd:b0:b5:6a:46:71:ac:68:32:aa:45:
         8a:68:16:30:b4:a2:37:ba:e5:10:a4:17:e8:20:86:4d:24:7a:
         99:69:82:4a:2c:1a:d3:64:54:68:f9:9f:46:e4:2d:4b:51:f8:
         e0:77:1a:54:bf:0c:10:44:d1:31:0f:d8:24:77:2a:67:66:6b:
         ea:92:c6:eb:15:e1:cc:48:fb:d5:8c:ac:4e:80:6d:e0:25:23:
         24:ee:8e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:37:47 2025 by rpki-client