Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
File:                     L46D7v5_FLnkSQo27r2IHhY8zBs.mft (raw, json)
Hash identifier:          0Ptb1msp3yhYfplo3kAz2R45T/qdRPKPEr8R/BxcNOQ=
Subject key identifier:   31:15:44:4A:F0:83:64:6B:FD:FE:CA:DE:76:E5:11:2B:80:41:88:EB
Authority key identifier: 2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B
Certificate issuer:       /CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
Certificate serial:       0198D4DFC9ED3155DDB5E466CCB0E839B5C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
Manifest number:          138F
Signing time:             Sat 23 Aug 2025 03:01:32 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:32 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:32 +0000
Files and hashes:         1: L46D7v5_FLnkSQo27r2IHhY8zBs.crl (hash: rsoGMK0SyMTrLHA95BzYkvcOYEDPrHbgPmnMdgeeA/c=)
                          2: ou7kmfNJPTUTO_ZY5p4au0cZuog.roa (hash: 10vYhF0nx+k3pDi2pZX1tYjYlLEGelMx798hFv/wUiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:df:c9:ed:31:55:dd:b5:e4:66:cc:b0:e8:39:b5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
        Validity
            Not Before: Aug 23 03:01:32 2025 GMT
            Not After : Aug 24 03:01:32 2025 GMT
        Subject: CN=3115444af083646bfdfecade76e5112b804188eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e6:3d:d7:a4:0c:bc:1b:f4:fb:41:80:66:1c:
                    57:d0:21:84:69:f2:75:22:a7:72:b1:dc:eb:0a:af:
                    fe:08:a7:6d:c4:52:d7:f7:e9:a2:d3:98:99:87:3e:
                    22:9a:cb:c5:74:8a:40:97:6a:b3:54:af:df:8c:04:
                    f5:ea:cd:52:15:40:31:d3:a6:c8:ab:7e:39:2f:42:
                    02:b4:8c:cc:19:88:25:d5:19:94:ee:8a:f7:29:04:
                    fb:00:f0:2d:d1:1b:e0:fd:1b:db:33:40:bf:b1:27:
                    70:0c:c9:b2:10:96:37:3a:4e:df:27:e6:a2:50:10:
                    28:66:22:84:61:85:22:61:49:ce:5e:82:89:e0:41:
                    55:26:f0:09:b0:24:da:04:97:85:4c:a3:64:a6:6e:
                    b5:b9:12:ea:0f:de:75:2f:b8:78:a5:1e:0d:9c:29:
                    27:e1:45:96:7e:51:cd:33:7d:ae:ab:9e:12:03:57:
                    10:d6:5d:7d:27:56:31:7e:01:ea:17:4a:6e:b3:98:
                    41:dd:cd:20:ff:50:ea:83:22:78:ae:8e:2b:41:ae:
                    b8:71:7a:2d:a6:dd:37:dc:34:0e:c6:f1:f4:58:92:
                    d4:1a:41:c7:78:38:eb:79:6c:5d:06:6e:9e:d8:52:
                    bc:5a:90:42:cd:27:0d:8b:0f:45:7e:20:e0:4e:97:
                    90:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:15:44:4A:F0:83:64:6B:FD:FE:CA:DE:76:E5:11:2B:80:41:88:EB
            X509v3 Authority Key Identifier:
                keyid:2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:d5:98:39:4a:c3:8c:09:49:55:ed:12:b7:49:3c:18:bb:50:
         56:ed:52:92:1a:5e:81:72:36:e9:42:95:8d:89:de:1a:d1:27:
         7b:65:1e:72:b4:1a:94:3e:0d:a2:9d:e5:7f:ac:e0:57:b5:21:
         61:a0:b6:e8:ef:a5:34:29:26:83:b8:6a:62:b7:c3:fe:f2:b9:
         1f:3b:cf:c9:bf:6c:26:46:c1:74:03:2e:af:a4:c5:5f:f5:13:
         a1:80:b9:ec:b2:14:43:42:d4:15:54:cf:25:32:ad:ec:eb:e8:
         7e:fc:99:94:9e:0b:c6:4a:61:db:67:c9:90:f2:8d:76:1f:6a:
         e4:5f:77:8f:94:0c:4b:8f:e4:24:06:6b:e3:d4:80:00:23:ca:
         9c:c5:6f:3f:b8:d6:16:1b:b9:39:43:80:ba:9b:98:39:13:5f:
         d8:91:69:f5:f1:44:27:6d:cd:04:8d:2b:18:b8:d7:0b:ca:89:
         80:42:14:52:3f:9f:d6:07:d4:56:4d:59:a0:56:e0:19:03:48:
         72:b2:9f:fa:c8:2c:52:77:3c:7b:57:3e:84:67:03:f1:00:ae:
         4a:bc:3f:09:a1:48:cc:2f:1c:b7:ec:7e:26:63:43:48:1d:ce:
         e1:07:2a:29:87:ea:e8:4e:2c:d8:f0:f5:0f:7d:07:b8:ca:48:
         a0:38:ef:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:40 2025 by rpki-client