Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
File:                     L28OoBJ6bjkhlWljgL5bsEdLAd8.mft (raw, json)
Hash identifier:          LGZfUbSy+jRA5KnHmeMOLHB/Dr/TrzWRXoUJ+JETvKI=
Subject key identifier:   59:1E:45:37:F7:BA:B5:F1:06:E9:9F:CC:22:B4:4D:35:96:A4:C6:48
Authority key identifier: 2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
Certificate issuer:       /CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Certificate serial:       0198D515CBF0A6917996C0C2B7069961D90B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 04:00:32 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:32 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:32 +0000
Files and hashes:         1: L28OoBJ6bjkhlWljgL5bsEdLAd8.crl (hash: HZ0MMoRuOMtvYXzbZJUI4LBgDTk15Gp3zMUbPNABhu8=)
                          2: vqiF7KHwgC4hKANJve3WilTtCaA.roa (hash: ViWg/cb4ZOWXmU8DGPzhe6lMZyYPSAoJx2DnUl9cMUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:cb:f0:a6:91:79:96:c0:c2:b7:06:99:61:d9:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f6f0ea0127a6e392195696380be5bb0474b01df
        Validity
            Not Before: Aug 23 04:00:32 2025 GMT
            Not After : Aug 24 04:00:32 2025 GMT
        Subject: CN=591e4537f7bab5f106e99fcc22b44d3596a4c648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:89:d1:0f:53:bc:47:26:49:96:fa:75:78:
                    5b:08:73:3d:af:31:15:3f:c6:14:33:e7:a1:e3:f5:
                    89:6b:91:7b:79:b1:aa:18:ad:2f:92:59:43:6f:da:
                    49:b2:0b:e7:f1:11:db:d2:fd:1a:d8:3a:58:b2:2d:
                    b5:21:c4:63:68:a8:cd:31:20:e1:fc:62:71:4f:4b:
                    2e:88:31:55:89:2f:56:5b:28:2a:44:2f:27:be:7f:
                    9f:5d:d3:86:55:ff:79:e0:e2:fc:c0:8a:53:7c:1c:
                    a4:3d:cf:c6:32:33:3d:cf:14:15:e7:20:26:4b:5c:
                    14:3c:89:d4:b8:ff:4e:d2:23:e0:80:22:f0:c8:33:
                    94:76:6e:73:76:33:38:c9:85:b2:40:54:8f:96:50:
                    a8:9e:39:96:f6:d4:f5:cf:b1:99:dc:93:27:c7:45:
                    99:4a:d9:b6:23:b9:52:61:3c:ba:15:88:e8:94:e2:
                    22:4c:e0:ef:14:f1:39:73:36:4c:d2:cf:6f:3c:41:
                    67:cd:42:24:1a:f3:9c:4a:cc:3b:9a:6e:72:d9:a1:
                    10:fa:d2:6e:24:c8:ad:59:08:e3:2d:c2:e8:23:17:
                    be:18:37:84:ed:25:37:4a:cc:03:8b:fc:aa:80:11:
                    a7:eb:0b:11:be:4d:11:7e:c9:4a:60:02:da:c9:ca:
                    86:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1E:45:37:F7:BA:B5:F1:06:E9:9F:CC:22:B4:4D:35:96:A4:C6:48
            X509v3 Authority Key Identifier:
                keyid:2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:7b:0e:b3:bb:fc:c0:45:be:4d:8a:f2:58:12:63:26:13:c6:
         b4:e5:87:07:24:bb:fe:cd:e9:e3:8b:2e:79:b1:ea:ad:c7:28:
         82:c1:bd:60:a5:c5:20:eb:05:f0:56:72:e1:fa:5f:b8:19:26:
         fe:af:85:ab:9b:6d:b5:9a:ce:d8:e0:d7:f8:99:1d:4e:6a:86:
         2e:24:85:22:f8:92:61:d4:ad:de:61:85:a4:e5:aa:9c:bb:69:
         cd:e5:10:d2:fa:5a:30:a1:74:29:e8:f4:c4:c8:52:f9:8f:53:
         66:f2:5d:20:12:f1:40:4f:43:48:2e:09:5e:bb:f6:ab:21:1a:
         b6:03:b5:6f:2c:28:00:ee:31:ea:b5:f2:ff:2f:69:fa:56:ed:
         a6:53:3b:2d:84:5f:04:fc:00:46:cc:7e:c2:94:51:7a:36:6e:
         59:e3:1e:03:aa:17:c0:fb:17:32:db:c8:0b:04:2c:44:70:1f:
         0b:33:7f:06:07:c3:6f:9a:4c:b2:19:b1:5e:05:b2:8a:4e:c1:
         68:69:3c:b1:2a:6f:e4:82:9b:0c:64:a0:d7:ee:c8:d2:1f:b3:
         48:84:1b:08:ac:e3:cc:9a:09:06:60:b2:e5:25:92:08:ef:7e:
         aa:a1:a8:15:cf:9d:92:4d:fb:2c:c9:6e:28:05:a1:c3:f8:86:
         f6:8d:bb:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFcvwppF5lsDCtwaZYdkLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNmYwZWEwMTI3YTZlMzkyMTk1Njk2MzgwYmU1YmIwNDc0
YjAxZGYwHhcNMjUwODIzMDQwMDMyWhcNMjUwODI0MDQwMDMyWjAzMTEwLwYDVQQD
Eyg1OTFlNDUzN2Y3YmFiNWYxMDZlOTlmY2MyMmI0NGQzNTk2YTRjNjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRiJ0Q9TvEcmSZb6dXhbCHM9rzEV
P8YUM+eh4/WJa5F7ebGqGK0vkllDb9pJsgvn8RHb0v0a2DpYsi21IcRjaKjNMSDh
/GJxT0suiDFViS9WWygqRC8nvn+fXdOGVf954OL8wIpTfBykPc/GMjM9zxQV5yAm
S1wUPInUuP9O0iPggCLwyDOUdm5zdjM4yYWyQFSPllConjmW9tT1z7GZ3JMnx0WZ
Stm2I7lSYTy6FYjolOIiTODvFPE5czZM0s9vPEFnzUIkGvOcSsw7mm5y2aEQ+tJu
JMitWQjjLcLoIxe+GDeE7SU3SswDi/yqgBGn6wsRvk0RfslKYALaycqGEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkeRTf3urXxBumfzCK0TTWWpMZIMB8GA1UdIwQY
MBaAFC9vDqASem45IZVpY4C+W7BHSwHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDI4T29CSjZiamtobFdsamdMNWJzRWRMQWQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS82MjY0MWYtY2Y5OS00NTE0LWI3ZDct
YjJhMjMyNDZlNjE0LzEvTDI4T29CSjZiamtobFdsamdMNWJzRWRMQWQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS82MjY0MWYtY2Y5OS00NTE0LWI3ZDctYjJhMjMyNDZlNjE0
LzEvTDI4T29CSjZiamtobFdsamdMNWJzRWRMQWQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnsOs7v8
wEW+TYryWBJjJhPGtOWHByS7/s3p44suebHqrccogsG9YKXFIOsF8FZy4fpfuBkm
/q+Fq5tttZrO2ODX+JkdTmqGLiSFIviSYdSt3mGFpOWqnLtpzeUQ0vpaMKF0Kej0
xMhS+Y9TZvJdIBLxQE9DSC4JXrv2qyEatgO1bywoAO4x6rXy/y9p+lbtplM7LYRf
BPwARsx+wpRRejZuWeMeA6oXwPsXMtvICwQsRHAfCzN/BgfDb5pMshmxXgWyik7B
aGk8sSpv5IKbDGSg1+7I0h+zSIQbCKzjzJoJBmCy5SWSCO9+qqGoFc+dkk37LMlu
KAWhw/iG9o27qQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:10 2025 by rpki-client