Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
File:                     L_jPdWH81tdmt6rTHb94XwKRSfA.mft (raw, json)
Hash identifier:          xocnLL50LLgsu7oIkDltfAbC7sYtHS8V3O5YAKtTEyk=
Subject key identifier:   2F:EA:B5:79:02:8C:DB:E7:DE:43:68:89:27:08:F2:48:05:C1:44:45
Authority key identifier: 2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0
Certificate issuer:       /CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
Certificate serial:       0199FEB4FC7A2835A5F81F05297DCDB7CC5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 23:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:37 +0000
Files and hashes:         1: L_jPdWH81tdmt6rTHb94XwKRSfA.crl (hash: Xub9orRNVYeoHqZtU7TCweRqVSTI687w0qnXOYf6rnw=)
                          2: xluZlF8Y4lWty9UIZc07EvSCNPk.roa (hash: HE/HrixCaKLjFQb4O8UjaXRfk5ZIsq5yeFLDR8AlCNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:fc:7a:28:35:a5:f8:1f:05:29:7d:cd:b7:cc:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
        Validity
            Not Before: Oct 19 23:01:37 2025 GMT
            Not After : Oct 20 23:01:37 2025 GMT
        Subject: CN=2feab579028cdbe7de4368892708f24805c14445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:91:cd:bd:44:da:2e:cb:7a:34:1d:90:63:28:
                    4e:21:84:33:71:7b:fa:41:0c:a3:b8:a9:e9:3a:1e:
                    27:36:3f:5f:13:ac:4c:3b:56:64:3a:23:59:58:25:
                    b8:d8:32:6b:37:38:37:f8:c4:c3:6a:e8:0b:3e:85:
                    f4:24:39:c4:d5:28:0b:5b:af:46:4b:56:db:6f:c1:
                    33:6b:c7:b6:f5:e8:19:8e:a1:2d:71:fb:12:03:a8:
                    a1:9c:6d:cf:46:90:66:f5:86:10:20:4c:86:ff:ba:
                    17:d4:e6:07:13:a3:69:ae:e2:30:77:56:1f:92:fe:
                    f0:4e:00:4c:41:01:c1:c5:f7:6e:c7:ab:76:bf:74:
                    b9:39:3a:8d:ee:a2:30:96:33:fa:d2:36:02:54:db:
                    c3:de:84:19:52:a8:2f:90:02:80:7b:b9:a4:78:b6:
                    ef:3f:4f:b3:ce:3d:0d:fe:ba:a2:8a:02:92:9e:33:
                    8a:d0:f2:37:62:2a:77:e0:36:b0:e7:e9:46:f9:24:
                    21:82:90:c7:f1:0d:fb:b4:39:b3:04:83:ae:8d:30:
                    58:b1:70:6e:6e:e4:4e:33:7a:33:fa:25:ba:e2:46:
                    df:09:0f:01:8b:3d:50:fe:34:18:71:35:3d:3a:cd:
                    8f:8d:21:86:cf:93:fc:a3:da:c0:89:90:dd:6c:07:
                    10:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EA:B5:79:02:8C:DB:E7:DE:43:68:89:27:08:F2:48:05:C1:44:45
            X509v3 Authority Key Identifier:
                keyid:2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:7f:d4:68:c5:df:ed:85:8f:e9:d1:91:43:07:76:aa:9e:54:
         8e:73:39:fd:4f:42:13:7d:2b:ef:35:a5:ce:eb:5e:17:01:f8:
         a9:23:d2:ca:81:ed:5e:a9:e7:d0:6d:64:fb:9d:8d:e1:f0:43:
         d4:92:c8:8a:b7:a4:aa:bd:4f:31:cc:90:59:92:9c:e6:3d:6c:
         96:0e:cb:0f:47:47:52:71:a3:4f:82:35:29:32:fd:f0:b9:ce:
         fc:7d:21:c5:0d:be:48:d1:90:8e:57:85:4a:a5:30:35:ee:27:
         cd:5e:3a:28:e2:07:70:f1:94:c4:f6:94:6c:3c:02:e9:6d:9b:
         bb:42:af:54:98:49:a4:d6:c3:a8:c3:44:f4:d2:39:55:e6:0a:
         01:ac:4f:af:a5:a9:79:09:d1:38:7a:52:c5:f7:49:76:d8:90:
         86:1c:fa:e7:22:d9:03:12:3c:95:f0:5d:28:91:cc:37:0b:1e:
         cf:20:63:ed:8f:6e:65:49:0d:8b:9e:d7:f4:33:cd:b2:da:8b:
         63:fd:f8:06:fd:6a:4d:56:bb:55:81:12:a9:52:ca:81:97:63:
         ec:d2:9e:86:dd:f8:c1:c4:04:a5:a8:73:64:c5:7a:46:18:69:
         9f:12:95:e0:2c:31:c2:9c:7b:7c:27:eb:26:7e:bc:96:f4:bb:
         bc:7c:29:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:10:47 2025 by rpki-client