Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
File:                     L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft (raw, json)
Hash identifier:          pzZ0VgrhWw/qlPos/YAVSsGaMV+M0bE5Gqt91r33JHk=
Subject key identifier:   3D:78:B3:D6:0D:99:48:56:E5:F0:E3:02:94:73:D3:32:37:D6:14:50
Authority key identifier: 2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC
Certificate issuer:       /CN=2f57a34b058aafa0a763124a7d5d4187f4faabac
Certificate serial:       0198D66070A91AB6EE3E26F52A73979CD663
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 10:01:41 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:41 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:41 +0000
Files and hashes:         1: L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl (hash: MTx0Ad0gkj4qEaVVFy0e6hVlFHH2JvtVMtuvga7YSlc=)
                          2: Vec_C6RiaudIxR6DQyYXgE_U-TY.roa (hash: MAwYc1OA3xQJeom5DQYcF+PCN/vQZIWajJ/StbTU5Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:70:a9:1a:b6:ee:3e:26:f5:2a:73:97:9c:d6:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f57a34b058aafa0a763124a7d5d4187f4faabac
        Validity
            Not Before: Aug 23 10:01:41 2025 GMT
            Not After : Aug 24 10:01:41 2025 GMT
        Subject: CN=3d78b3d60d994856e5f0e3029473d33237d61450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7a:19:92:94:5a:7d:ed:84:c0:98:4b:4c:af:
                    8c:a3:3d:ff:1a:bc:a7:2d:af:18:f3:e3:2a:f9:1f:
                    f8:cd:a8:63:5f:64:2e:5c:83:2c:1e:82:fd:13:21:
                    8b:93:1a:69:2c:1c:97:8a:a6:b3:25:87:9e:ed:ac:
                    e3:1b:12:37:a7:80:4b:50:2d:04:cc:70:1a:15:30:
                    e2:da:10:2c:ff:d2:c8:7b:7a:56:b8:a6:0a:cd:98:
                    2b:71:dc:b5:80:4a:e3:be:e7:a0:b7:b4:f4:f1:9d:
                    61:db:e4:77:26:99:f9:ab:c7:32:c7:da:3c:de:44:
                    a6:e9:bc:2c:eb:80:bc:3a:b5:6d:03:df:13:b0:04:
                    e3:0f:0a:ff:80:c0:0f:23:5d:6c:00:c2:f3:2c:55:
                    58:f9:f7:54:a0:60:67:a6:7d:95:fc:96:1d:4d:12:
                    d5:3d:ac:47:36:7a:97:31:ec:17:63:06:b8:fd:5c:
                    7c:70:df:86:f8:06:47:35:fd:0c:93:5a:a1:05:f8:
                    28:43:73:38:3c:35:d3:f6:9d:85:f6:21:4c:3e:e8:
                    3b:b1:35:11:02:ce:db:23:1f:c7:ca:d8:8b:ae:d3:
                    32:0f:d2:a9:6e:8b:54:b5:63:68:d3:f9:9e:c2:bd:
                    06:40:e5:c7:22:c1:04:6f:fc:f9:ba:27:2f:5c:3a:
                    f5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:78:B3:D6:0D:99:48:56:E5:F0:E3:02:94:73:D3:32:37:D6:14:50
            X509v3 Authority Key Identifier:
                keyid:2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:e5:91:89:15:1a:75:a3:f7:d7:79:1d:66:4f:b0:63:1f:fb:
         0a:3f:fa:b1:3d:22:0a:01:ca:3c:ed:a8:50:91:91:b4:a5:d8:
         0f:89:a2:02:c9:c1:df:75:ec:b8:f9:6b:e6:f6:ad:b9:7d:b0:
         bd:4c:94:a7:fa:42:62:32:de:31:02:64:d0:7d:19:2c:0f:a8:
         ac:38:6c:c5:c3:92:ff:04:31:cd:aa:96:38:f3:cb:20:de:a8:
         dd:67:49:c7:6f:25:4d:20:c3:1c:da:50:e0:91:60:aa:0b:f2:
         e1:02:41:d5:82:c7:48:19:67:7c:b8:3a:83:c4:d3:97:7f:51:
         ac:0d:89:2f:50:8b:2c:be:21:61:eb:25:3e:dd:7b:8e:f6:4f:
         1d:ab:0e:80:6d:7a:47:2a:16:b6:d1:68:a8:11:b5:b2:cb:4a:
         2b:d1:51:0a:92:4e:b8:ef:ea:dc:86:e5:a5:5a:98:8c:1d:7f:
         eb:d2:3f:bb:b9:3b:9b:22:12:e1:49:03:4c:e6:9c:c0:2e:14:
         a2:d0:f7:79:58:52:2e:1f:50:e4:a7:fb:68:8a:e8:6b:7a:3e:
         bc:e3:88:a6:2a:07:18:47:5f:d4:2e:c7:9b:d1:e6:78:b5:7b:
         f3:23:b5:d9:ab:60:98:59:a3:9f:c7:34:ac:ac:5a:2e:71:29:
         56:07:64:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:45 2025 by rpki-client