Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.mft
File:                     L74q18xpqV46gHH7M9-a96N5kos.mft (raw, json)
Hash identifier:          mG2M5TsCIs9jcUguxC2X0hHzT6apihDc9sJeMhFXctc=
Subject key identifier:   EE:8E:B4:8B:57:AC:70:D3:55:35:99:F7:A3:0A:24:59:26:57:AD:B7
Authority key identifier: 2F:BE:2A:D7:CC:69:A9:5E:3A:80:71:FB:33:DF:9A:F7:A3:79:92:8B
Certificate issuer:       /CN=2fbe2ad7cc69a95e3a8071fb33df9af7a379928b
Certificate serial:       0198D6CD05B5D57C2530F66C41A1C5034017
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L74q18xpqV46gHH7M9-a96N5kos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.mft
Manifest number:          15EC
Signing time:             Sat 23 Aug 2025 12:00:17 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:17 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:17 +0000
Files and hashes:         1: IDDlMwm9-5ZOz6KG-dVFSUnj-U8.roa (hash: 1Nd8bcLLvnAmE61D+G0tQnrMjss8Eoxbsm1iIYgXgB4=)
                          2: L74q18xpqV46gHH7M9-a96N5kos.crl (hash: okaG+GTAactZsMFzmqlrZ95apABQBk8vLl/A4KRt234=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L74q18xpqV46gHH7M9-a96N5kos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:05:b5:d5:7c:25:30:f6:6c:41:a1:c5:03:40:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fbe2ad7cc69a95e3a8071fb33df9af7a379928b
        Validity
            Not Before: Aug 23 12:00:17 2025 GMT
            Not After : Aug 24 12:00:17 2025 GMT
        Subject: CN=ee8eb48b57ac70d3553599f7a30a24592657adb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8d:3e:a6:56:73:8a:b4:10:a9:84:7e:b4:d5:
                    d0:9d:90:5d:3b:ec:c7:52:0d:33:36:47:74:b4:ac:
                    fd:f9:6b:99:ff:c6:d2:30:7a:57:5b:df:48:54:8c:
                    ff:73:9e:85:ff:31:12:6d:97:29:e5:13:8a:df:3d:
                    ac:9e:dd:a7:b0:cf:95:cc:7f:ba:1a:ca:e4:17:14:
                    68:40:ea:a2:d3:43:11:b1:60:f3:0b:61:a8:ca:fe:
                    52:3b:66:92:7b:3d:2e:d6:09:12:15:67:46:a0:ae:
                    77:d4:c8:9f:cf:2c:18:73:1f:89:2a:41:a4:5a:0f:
                    9a:53:1c:c9:03:cd:3a:aa:ac:27:d9:7b:31:4f:47:
                    05:e6:f7:b0:e4:45:7a:f8:ff:11:51:90:a0:5d:09:
                    a2:f1:ce:04:38:ea:c1:63:a0:4a:fb:77:76:fb:a3:
                    07:81:ec:5d:2a:a9:76:ff:2b:c7:d1:38:47:bb:72:
                    91:dd:a7:e0:e8:73:f7:70:80:dc:2c:e0:aa:9c:9b:
                    6a:f9:a6:69:13:b9:0c:6a:3f:cc:da:7b:bd:3f:25:
                    81:6a:3d:cc:2d:d5:58:11:54:81:45:2e:67:cf:db:
                    2e:24:62:fa:f9:74:32:f6:9e:38:33:59:79:59:79:
                    25:37:5c:fd:2a:28:fa:03:d8:5e:0a:95:b4:7e:3d:
                    8e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8E:B4:8B:57:AC:70:D3:55:35:99:F7:A3:0A:24:59:26:57:AD:B7
            X509v3 Authority Key Identifier:
                keyid:2F:BE:2A:D7:CC:69:A9:5E:3A:80:71:FB:33:DF:9A:F7:A3:79:92:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L74q18xpqV46gHH7M9-a96N5kos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:95:ac:a9:a7:44:88:61:3a:21:72:1d:1b:9f:43:59:b0:16:
         b0:73:e9:4b:38:0d:cf:7b:ec:83:84:4f:7b:b0:a6:c0:4c:7f:
         c4:3f:44:75:e5:09:74:9c:ce:6d:57:ef:f4:db:34:f5:d4:f9:
         bb:04:cd:7e:24:11:f5:f6:51:15:16:2b:b9:3e:b1:da:b9:67:
         42:6c:7e:b9:ec:18:6d:5b:8d:e5:95:30:99:17:3c:65:62:1b:
         ab:4a:34:cb:41:1c:e7:56:fe:e1:fc:99:c8:04:07:b9:0c:ba:
         2d:a0:60:20:30:1c:0a:9b:90:40:01:52:5e:ad:dc:87:d5:8d:
         7a:c7:07:eb:88:18:2d:73:09:ae:7b:16:50:11:66:43:e2:2a:
         82:28:05:f8:97:bc:7b:d1:ba:c9:da:b3:41:9e:26:5f:93:1c:
         bb:81:ce:77:96:06:40:11:7a:a4:8d:de:a5:ff:eb:4c:19:c1:
         1c:98:03:82:56:0b:21:23:dc:61:59:f6:a0:d5:22:46:88:2d:
         d4:34:54:87:e1:7d:28:9b:7c:c3:31:56:57:db:b1:73:68:16:
         ec:bf:b7:9e:8c:bf:00:07:e4:c1:d5:c1:c3:08:69:d1:0f:08:
         03:1e:b5:cb:ea:62:65:ae:25:45:d9:f6:a7:69:c4:e7:1a:87:
         16:68:8b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:52:12 2025 by rpki-client