Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft
File:                     L2VDasUDgzLnA6277_WBTbgqtD8.mft (raw, json)
Hash identifier:          Vy8m1XIQHfIJJkfyY/NB8QVFvri/e+JW0GyiB4qCHuQ=
Subject key identifier:   C1:10:39:9C:AD:14:A5:4D:3B:B0:BE:D5:E7:13:CC:0F:7A:33:89:A1
Authority key identifier: 2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F
Certificate issuer:       /CN=2f65436ac5038332e703adbbeff5814db82ab43f
Certificate serial:       0198D5F194DFAF014E6393B7699F87ADD642
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft
Manifest number:          0F65
Signing time:             Sat 23 Aug 2025 08:00:35 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:35 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:35 +0000
Files and hashes:         1: JwV0QfsSNHG29kGRpDADqSiaDck.roa (hash: KjOMvzGc/F+OfPiH0IzVXvG5nX5kdmCNZ+EIJh+pYl4=)
                          2: L2VDasUDgzLnA6277_WBTbgqtD8.crl (hash: wbEfiuz/e8jpOo0RWAETW6wwlth/zZXXMeuArx0goxs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:94:df:af:01:4e:63:93:b7:69:9f:87:ad:d6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f65436ac5038332e703adbbeff5814db82ab43f
        Validity
            Not Before: Aug 23 08:00:35 2025 GMT
            Not After : Aug 24 08:00:35 2025 GMT
        Subject: CN=c110399cad14a54d3bb0bed5e713cc0f7a3389a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3a:c0:ef:84:da:c8:ab:3c:34:0b:69:73:b5:
                    af:aa:9d:5b:04:86:fb:a2:eb:76:07:be:2d:ba:1f:
                    29:ad:85:3f:0d:ce:cd:71:0e:bc:60:f0:67:1b:d2:
                    47:84:cb:ea:0a:39:9d:40:b1:75:41:32:48:85:4c:
                    c7:bf:f8:d3:e7:15:31:6d:ed:58:fd:d4:d5:6d:61:
                    d9:26:78:16:1e:23:32:fd:2d:ff:30:b1:d3:8d:af:
                    8e:54:bc:3c:a9:21:2f:b9:30:de:26:c7:b8:0a:a5:
                    87:38:7a:7f:6e:04:c0:c9:44:74:43:8d:d3:9c:8c:
                    65:ca:a5:ab:54:6e:02:dd:ce:e8:ab:23:da:5d:5c:
                    a2:4d:0d:ee:83:91:24:c8:f4:fa:f4:11:99:75:03:
                    a2:8c:19:7b:85:67:04:15:d6:8b:c5:e7:8a:29:37:
                    be:f2:65:4f:3d:3e:df:3b:12:2f:69:4c:04:9a:c0:
                    52:14:55:15:0a:74:fa:c9:ed:fc:ba:5c:df:39:ee:
                    91:1f:c2:31:6a:3f:82:14:3c:92:e7:f8:57:cf:3c:
                    86:18:60:e4:f0:e6:a4:a7:51:8d:40:e1:20:f7:f8:
                    8e:15:83:b1:3d:8c:f6:a5:58:45:f3:54:b3:6f:cb:
                    b9:e9:19:36:e6:70:ba:bd:54:2e:53:99:62:53:f8:
                    67:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:10:39:9C:AD:14:A5:4D:3B:B0:BE:D5:E7:13:CC:0F:7A:33:89:A1
            X509v3 Authority Key Identifier:
                keyid:2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:00:3a:31:7a:1e:ba:d3:b5:6e:1f:0e:f8:fe:37:bd:9d:3f:
         7c:fa:ba:60:1d:a1:8f:cd:4c:f1:62:3a:29:ad:21:b5:57:e5:
         b0:30:44:10:fe:0f:c7:73:30:8d:b8:77:b1:be:c8:5d:d5:23:
         0d:ea:d5:84:f9:8b:5d:19:f9:14:5c:c7:80:f4:df:90:84:12:
         44:89:e4:11:19:d2:92:f3:97:bd:bd:70:8b:b1:d0:dd:04:26:
         20:33:f6:9f:79:1c:36:e2:ec:07:f1:94:70:b6:5f:d1:6c:1b:
         26:d4:1a:7b:23:ad:c2:3c:12:05:b6:88:f6:50:14:55:72:6a:
         98:66:b8:0c:ec:6b:b2:81:cf:ab:22:87:ff:58:bb:46:e6:81:
         44:74:41:be:ed:74:0a:24:bb:d4:bd:0c:2d:3f:59:13:39:25:
         ae:6f:03:e4:a1:93:4e:48:04:08:6d:b9:e9:ee:8c:ee:d9:8d:
         c5:01:9a:b3:a2:5d:a2:32:7c:ea:db:f2:2e:5d:67:ee:f7:9d:
         1d:4c:15:9b:e4:5d:15:9a:fd:74:a3:78:8b:ff:fc:b3:7e:d3:
         62:2d:80:be:91:96:48:e9:20:f7:57:f6:ae:b7:21:2f:dc:55:
         a2:47:5f:c2:06:72:5f:b9:a5:7d:6d:6e:59:d5:04:7b:e6:d5:
         7c:98:40:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8ZTfrwFOY5O3aZ+HrdZCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNjU0MzZhYzUwMzgzMzJlNzAzYWRiYmVmZjU4MTRkYjgy
YWI0M2YwHhcNMjUwODIzMDgwMDM1WhcNMjUwODI0MDgwMDM1WjAzMTEwLwYDVQQD
EyhjMTEwMzk5Y2FkMTRhNTRkM2JiMGJlZDVlNzEzY2MwZjdhMzM4OWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTrA74TayKs8NAtpc7Wvqp1bBIb7
out2B74tuh8prYU/Dc7NcQ68YPBnG9JHhMvqCjmdQLF1QTJIhUzHv/jT5xUxbe1Y
/dTVbWHZJngWHiMy/S3/MLHTja+OVLw8qSEvuTDeJse4CqWHOHp/bgTAyUR0Q43T
nIxlyqWrVG4C3c7oqyPaXVyiTQ3ug5EkyPT69BGZdQOijBl7hWcEFdaLxeeKKTe+
8mVPPT7fOxIvaUwEmsBSFFUVCnT6ye38ulzfOe6RH8Ixaj+CFDyS5/hXzzyGGGDk
8Oakp1GNQOEg9/iOFYOxPYz2pVhF81Szb8u56Rk25nC6vVQuU5liU/hnnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEQOZytFKVNO7C+1ecTzA96M4mhMB8GA1UdIwQY
MBaAFC9lQ2rFA4My5wOtu+/1gU24KrQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDJWRGFzVURnekxuQTYyNzdfV0JUYmdxdEQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mZjNjNzktZDYwZi00YjEyLTgxMzEt
OTVkNjBiM2U0NmNjLzEvTDJWRGFzVURnekxuQTYyNzdfV0JUYmdxdEQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mZjNjNzktZDYwZi00YjEyLTgxMzEtOTVkNjBiM2U0NmNj
LzEvTDJWRGFzVURnekxuQTYyNzdfV0JUYmdxdEQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUAA6MXoe
utO1bh8O+P43vZ0/fPq6YB2hj81M8WI6Ka0htVflsDBEEP4Px3Mwjbh3sb7IXdUj
DerVhPmLXRn5FFzHgPTfkIQSRInkERnSkvOXvb1wi7HQ3QQmIDP2n3kcNuLsB/GU
cLZf0WwbJtQaeyOtwjwSBbaI9lAUVXJqmGa4DOxrsoHPqyKH/1i7RuaBRHRBvu10
CiS71L0MLT9ZEzklrm8D5KGTTkgECG256e6M7tmNxQGas6JdojJ86tvyLl1n7ved
HUwVm+RdFZr9dKN4i//8s37TYi2AvpGWSOkg91f2rrchL9xVokdfwgZyX7mlfW1u
WdUEe+bVfJhAzw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:15:11 2025 by rpki-client