Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
File:                     L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft (raw, json)
Hash identifier:          ferirpbvloFJYRrVDtd/SRdhTGaPD/702phIEFDSeO0=
Subject key identifier:   49:31:B2:C8:E8:DF:77:F3:41:57:FC:E2:E7:1E:18:78:6C:81:AB:A5
Authority key identifier: 2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
Certificate issuer:       /CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
Certificate serial:       0198D473800955A57B5F12365E804199E5B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 01:03:15 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:15 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:15 +0000
Files and hashes:         1: L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl (hash: L1F79iDkGz4QePqj5KCgNWHyCWNaTgggyu2YHl7meds=)
                          2: fVFqHVP_QiliJMl-kIcrOxmuCro.roa (hash: GkKxdagAYy+CINxI1Dp6ck9rxu8bkF9hmUyqgByM5jo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:80:09:55:a5:7b:5f:12:36:5e:80:41:99:e5:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
        Validity
            Not Before: Aug 23 01:03:15 2025 GMT
            Not After : Aug 24 01:03:15 2025 GMT
        Subject: CN=4931b2c8e8df77f34157fce2e71e18786c81aba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d1:aa:92:0e:65:09:65:0b:b2:9d:eb:73:cb:
                    15:40:d8:77:3e:6f:07:be:cd:8f:f4:ee:06:c8:15:
                    6d:14:03:25:8d:71:ed:24:48:c4:4d:bb:fa:c8:71:
                    9f:dc:3d:15:90:9d:1f:97:03:6c:c2:99:6f:f0:3c:
                    fe:be:33:af:3a:85:e6:d3:9a:59:2a:9e:c1:7a:45:
                    c7:ca:4b:a9:3b:83:2b:ea:1c:43:b1:f3:d2:c1:6a:
                    c4:57:77:53:2e:89:15:eb:54:bb:ae:10:9c:10:79:
                    0a:9b:f5:a6:82:b4:ce:f5:e9:da:a5:e1:a7:b5:e1:
                    83:0a:eb:ee:af:bc:ec:e1:8e:ed:fb:e2:f2:74:58:
                    bf:ed:98:65:9e:df:28:98:25:77:b6:aa:46:f5:65:
                    c0:52:e4:13:35:53:3d:17:81:a0:64:4d:aa:30:87:
                    d2:24:df:16:ce:7a:85:2a:b0:b3:d7:fd:8d:ce:77:
                    6a:ae:5a:1e:31:99:7b:a2:18:49:c3:6f:f9:6e:68:
                    51:2d:2c:cb:55:92:df:c5:a8:56:4c:b2:92:48:a3:
                    c9:ea:30:b2:49:34:67:3b:62:05:07:c4:fb:1e:aa:
                    35:2f:ff:b7:43:0a:53:d2:23:bb:99:5b:fa:a0:c8:
                    e6:2f:c9:4a:33:27:3e:83:c5:36:db:ce:90:9d:36:
                    ce:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:31:B2:C8:E8:DF:77:F3:41:57:FC:E2:E7:1E:18:78:6C:81:AB:A5
            X509v3 Authority Key Identifier:
                keyid:2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:cf:a0:6f:dd:1b:92:70:1e:78:f3:d1:f2:8d:13:07:e7:5c:
         73:cf:fd:0f:16:be:58:0f:22:a3:c9:c9:b0:b5:48:8f:38:92:
         1c:ec:da:f3:bf:81:28:71:b5:f1:b7:0b:a6:04:14:b7:b3:84:
         c2:6f:0c:f3:5a:c5:66:9e:f3:9d:a1:e3:66:4b:bb:ce:32:93:
         f6:d1:f4:28:c8:1e:d4:cf:f2:4d:88:b6:70:13:83:31:b8:7c:
         cd:20:f0:2a:83:f9:ff:80:d1:0e:a0:0c:e2:ef:d5:16:87:32:
         cf:58:e0:d9:b3:07:92:70:84:f4:3b:6e:3d:a4:65:d8:3d:d4:
         7b:b7:23:14:dc:f7:59:5e:f5:6e:bb:d9:93:4b:c8:5d:04:18:
         d4:a5:2b:c4:94:8f:35:04:f5:04:2a:aa:02:5b:a7:3b:bc:84:
         65:65:ca:b1:52:50:93:fe:8a:4a:27:75:90:ae:ac:dc:0c:e0:
         08:76:9f:a6:66:3f:67:f7:68:bc:eb:c9:b1:8d:bd:54:b1:13:
         8e:c9:53:33:80:36:93:86:4c:a3:e1:16:1b:12:9a:53:a2:fc:
         5f:fd:ca:99:77:e2:89:37:92:1a:03:cc:88:4a:bd:5e:ef:c4:
         ec:3e:e4:f7:0e:ba:d2:15:ed:72:b7:ea:2d:ac:d7:50:77:71:
         24:ac:70:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:55 2025 by rpki-client