Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
File:                     L_vZ3o2JUmxaSadmwfSF8J9akWY.mft (raw, json)
Hash identifier:          c1NUYmC3++659VDHtyiAv0HQbqrAKQ7LisVfZiR/oAY=
Subject key identifier:   DD:D9:79:18:8E:95:91:76:B5:F6:9A:65:55:5A:9A:DC:C9:5D:85:AD
Authority key identifier: 2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66
Certificate issuer:       /CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166
Certificate serial:       0197B6330766B6D9F54908134242B7146459
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
Manifest number:          086E
Signing time:             Sat 28 Jun 2025 11:01:26 +0000
Manifest this update:     Sat 28 Jun 2025 11:01:26 +0000
Manifest next update:     Sun 29 Jun 2025 11:01:26 +0000
Files and hashes:         1: L_vZ3o2JUmxaSadmwfSF8J9akWY.crl (hash: 4uiBXzVupHAdVY9OGA60w0elCSKf7y2ByyuY+OoSGgE=)
                          2: mXwM3P_PQQyVSERAjNUZUTUhWjg.roa (hash: 4+JoMMio3r7vvH6PXd1vvlGKdXZmMUa4KFkXT7FGKzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:33:07:66:b6:d9:f5:49:08:13:42:42:b7:14:64:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166
        Validity
            Not Before: Jun 28 11:01:26 2025 GMT
            Not After : Jun 29 11:01:26 2025 GMT
        Subject: CN=ddd979188e959176b5f69a65555a9adcc95d85ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:21:44:84:dc:5f:be:ec:e6:0f:93:00:89:a5:
                    40:e9:76:2b:4d:98:aa:25:14:0e:ce:6d:1c:5d:92:
                    a9:fc:d9:a0:bd:3e:76:31:27:a4:dd:51:2d:b5:f5:
                    59:c9:e9:94:61:07:16:7f:2a:fc:03:60:2d:c7:ae:
                    12:2f:13:b0:b7:89:50:10:a3:80:2b:41:86:18:de:
                    8a:b6:b3:ff:f3:5d:b8:f3:7f:5c:4a:5b:6f:ab:4a:
                    17:bb:e1:80:02:3c:a4:ed:07:9d:5e:b4:bf:d0:73:
                    bd:a1:d1:76:b1:8a:2f:5f:79:bc:12:5e:a6:a5:8c:
                    10:24:7b:54:fe:12:26:07:4a:b8:ab:69:20:06:a4:
                    fd:0f:71:cd:99:66:02:4b:d2:6e:c0:ba:a4:5f:17:
                    b4:d9:df:48:1d:ba:a9:a1:09:7f:bb:2f:b4:8e:d7:
                    f0:90:4a:96:e2:37:be:4d:aa:11:5b:a1:f3:e7:68:
                    be:34:18:34:b9:18:23:a5:27:dc:1d:4a:03:74:3d:
                    ba:13:57:bb:dd:fa:18:85:61:d3:df:ed:16:e8:5f:
                    2c:d1:be:ab:b2:b4:f9:02:74:f6:95:b8:bf:18:d6:
                    03:f1:59:7c:0b:28:56:7c:2d:d9:ed:56:03:f6:07:
                    95:7a:b8:da:40:bc:55:66:9d:7b:a3:b0:50:b9:c6:
                    5d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D9:79:18:8E:95:91:76:B5:F6:9A:65:55:5A:9A:DC:C9:5D:85:AD
            X509v3 Authority Key Identifier:
                keyid:2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:87:0b:73:6c:42:54:fb:9e:66:f0:25:19:43:dd:34:63:b5:
         2c:5f:f9:ea:51:d8:4d:dc:c8:c0:ae:a3:de:a9:5a:ec:03:c2:
         27:0c:c2:19:64:15:88:e9:bd:8c:0b:75:0e:19:b9:28:4e:53:
         cd:3b:90:98:0b:2a:49:74:42:96:5e:06:a1:39:01:f9:c0:14:
         d7:e8:87:8d:f7:5d:7d:08:f8:d8:09:71:9d:ef:3d:75:3b:d9:
         6f:c0:64:30:5c:9c:0e:92:f8:df:c8:2c:63:52:10:39:7e:05:
         3d:85:ae:09:2c:c6:66:62:ac:d4:bf:77:24:06:18:3c:90:09:
         87:d5:81:9a:f6:66:76:3c:ce:5b:18:19:82:ff:b2:be:6b:9f:
         37:d1:99:61:8e:b5:90:65:d5:a8:d5:1a:1b:af:42:a1:75:63:
         5d:ee:d9:cb:a6:d4:e3:75:46:da:a6:bc:90:9c:f1:8e:35:21:
         7f:be:14:24:43:0f:15:7e:a2:a5:02:41:b1:12:49:a6:b7:ab:
         1e:26:e4:c7:49:fa:92:40:8f:13:27:01:96:57:3d:eb:9e:b5:
         bb:f3:31:92:c9:db:01:f8:31:e0:c2:4d:45:59:67:6e:e5:e7:
         36:d4:47:8d:b3:a8:e9:f4:31:7e:3d:2d:b1:59:bc:05:e2:a0:
         9f:5f:f7:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2Mwdmttn1SQgTQkK3FGRZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZmJkOWRlOGQ4OTUyNmM1YTQ5YTc2NmMxZjQ4NWYwOWY1
YTkxNjYwHhcNMjUwNjI4MTEwMTI2WhcNMjUwNjI5MTEwMTI2WjAzMTEwLwYDVQQD
EyhkZGQ5NzkxODhlOTU5MTc2YjVmNjlhNjU1NTVhOWFkY2M5NWQ4NWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSFEhNxfvuzmD5MAiaVA6XYrTZiq
JRQOzm0cXZKp/NmgvT52MSek3VEttfVZyemUYQcWfyr8A2Atx64SLxOwt4lQEKOA
K0GGGN6KtrP/8124839cSltvq0oXu+GAAjyk7QedXrS/0HO9odF2sYovX3m8El6m
pYwQJHtU/hImB0q4q2kgBqT9D3HNmWYCS9JuwLqkXxe02d9IHbqpoQl/uy+0jtfw
kEqW4je+TaoRW6Hz52i+NBg0uRgjpSfcHUoDdD26E1e73foYhWHT3+0W6F8s0b6r
srT5AnT2lbi/GNYD8Vl8CyhWfC3Z7VYD9geVerjaQLxVZp17o7BQucZd/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3ZeRiOlZF2tfaaZVVamtzJXYWtMB8GA1UdIwQY
MBaAFC/72d6NiVJsWkmnZsH0hfCfWpFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTF92WjNvMkpVbXhhU2FkbXdmU0Y4Sjlha1dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zMjA0OWMtNjM5My00MTA2LWIzMGUt
MWZjMWU3M2YwNjA3LzEvTF92WjNvMkpVbXhhU2FkbXdmU0Y4Sjlha1dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8zMjA0OWMtNjM5My00MTA2LWIzMGUtMWZjMWU3M2YwNjA3
LzEvTF92WjNvMkpVbXhhU2FkbXdmU0Y4Sjlha1dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4cLc2xC
VPueZvAlGUPdNGO1LF/56lHYTdzIwK6j3qla7APCJwzCGWQViOm9jAt1Dhm5KE5T
zTuQmAsqSXRCll4GoTkB+cAU1+iHjfddfQj42Alxne89dTvZb8BkMFycDpL438gs
Y1IQOX4FPYWuCSzGZmKs1L93JAYYPJAJh9WBmvZmdjzOWxgZgv+yvmufN9GZYY61
kGXVqNUaG69CoXVjXe7Zy6bU43VG2qa8kJzxjjUhf74UJEMPFX6ipQJBsRJJprer
Hibkx0n6kkCPEycBllc96561u/MxksnbAfgx4MJNRVlnbuXnNtRHjbOo6fQxfj0t
sVm8BeKgn1/3bw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:37 2025 by rpki-client