Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
File:                     L_jPdWH81tdmt6rTHb94XwKRSfA.mft (raw, json)
Hash identifier:          Wm3C8ujCQZJgm6CuCWuLz2WapoMZmRhRfz9QWGCkBzk=
Subject key identifier:   25:54:E0:3E:FA:51:23:2D:A3:4F:8B:C8:FD:AD:1C:BF:71:C8:1B:07
Authority key identifier: 2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0
Certificate issuer:       /CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
Certificate serial:       0198D73B18EE9664D8C7800BE99920E9E77E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 14:00:31 +0000
Manifest this update:     Sat 23 Aug 2025 14:00:31 +0000
Manifest next update:     Sun 24 Aug 2025 14:00:31 +0000
Files and hashes:         1: L_jPdWH81tdmt6rTHb94XwKRSfA.crl (hash: yYTkC/y/HSD0HC2g2tXOX5YbhEI7Nx64V//U7suMZrQ=)
                          2: xluZlF8Y4lWty9UIZc07EvSCNPk.roa (hash: HE/HrixCaKLjFQb4O8UjaXRfk5ZIsq5yeFLDR8AlCNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:18:ee:96:64:d8:c7:80:0b:e9:99:20:e9:e7:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
        Validity
            Not Before: Aug 23 14:00:31 2025 GMT
            Not After : Aug 24 14:00:31 2025 GMT
        Subject: CN=2554e03efa51232da34f8bc8fdad1cbf71c81b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f9:7d:a9:8f:05:d1:7a:80:1b:a3:ad:92:94:
                    8c:4d:f3:fd:31:b2:ae:e7:01:f9:cf:12:78:a9:89:
                    94:f3:dd:47:ff:45:fd:cf:36:f2:1d:23:2c:b9:02:
                    9a:9d:0c:12:00:6b:bb:b7:f1:94:12:70:ce:7a:42:
                    44:c3:0a:c8:fd:0f:37:26:a1:88:61:82:01:cf:ac:
                    b7:dc:03:19:50:56:99:b7:11:d0:36:ce:25:38:35:
                    ef:c8:e3:34:14:a6:0f:b0:eb:1e:36:9a:8b:3f:c4:
                    5b:ff:a5:72:ce:7c:0e:40:39:3e:0c:fc:58:43:ff:
                    4a:45:ac:6d:98:a5:31:24:16:93:79:b0:dc:c2:51:
                    64:e5:8b:81:38:fd:fb:aa:77:48:c1:38:73:f7:a4:
                    a4:54:6e:a4:35:4b:14:fd:f1:dd:79:29:db:ed:29:
                    1d:f6:d9:a2:f8:20:44:f9:cd:ab:70:84:94:b9:47:
                    9f:fd:60:0a:73:d5:b1:40:a9:f1:d7:62:e5:3b:36:
                    31:07:89:d9:c6:67:4e:f2:c4:37:c4:d1:34:86:bb:
                    20:89:74:03:90:09:a1:d1:4f:ca:29:b0:d7:ee:aa:
                    40:36:77:bd:4b:a1:d6:46:e4:2d:63:6f:a6:74:73:
                    d9:d2:88:92:5e:36:fa:3f:5c:4d:5b:94:6f:03:c7:
                    76:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:54:E0:3E:FA:51:23:2D:A3:4F:8B:C8:FD:AD:1C:BF:71:C8:1B:07
            X509v3 Authority Key Identifier:
                keyid:2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e6:dd:e6:01:84:9d:88:ce:eb:20:91:23:7b:fc:83:37:aa:
         10:a4:7d:32:3f:4a:db:45:d6:a5:46:95:b8:59:8c:4f:2b:24:
         4a:bc:f1:13:e7:3d:2c:8c:40:18:7e:96:e9:f7:f6:19:82:18:
         84:71:55:15:f7:b7:2f:a3:05:d9:1a:55:f3:b5:d4:f4:70:a6:
         56:59:c6:34:7c:85:cc:8d:af:58:b1:bc:44:e0:0e:30:86:3e:
         9e:9e:3f:b4:74:26:8b:6e:fe:d9:ca:40:de:ea:a4:df:72:32:
         2c:ba:56:f1:a3:17:9b:18:c5:35:b6:12:92:9f:72:a8:5b:cc:
         c5:9b:ea:73:92:4d:30:79:df:1e:b8:c3:2d:5c:5e:5a:be:16:
         98:43:d7:a3:23:62:c3:31:04:09:22:6e:7b:4d:44:c7:21:65:
         03:bd:34:a6:a1:f1:57:a5:5e:e0:0e:e5:65:20:87:23:5c:7b:
         1d:e2:03:c6:fc:c4:d2:8e:2c:2d:e6:38:80:2f:b2:73:88:dd:
         a6:68:8f:12:21:fb:19:ed:05:13:46:bd:29:09:d8:e7:dd:cb:
         ae:78:56:01:11:7f:fb:03:cb:b7:20:62:a3:d5:67:1f:2c:f9:
         23:1a:c8:6b:26:6f:af:e9:ec:f5:33:e4:11:c1:eb:94:39:74:
         97:f7:05:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:37:56 2025 by rpki-client