Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
File:                     L28Hzq0GpPgRVHYAusAvrwzAhMk.mft (raw, json)
Hash identifier:          R0tghb0PLWg2f4EUt9pCFoALiNOXFl78cDasqCcLQkM=
Subject key identifier:   07:5C:F2:38:16:7C:A9:54:BC:BE:FD:CD:BA:37:6A:50:05:69:9E:61
Authority key identifier: 2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
Certificate issuer:       /CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Certificate serial:       0198D5BC47A3C68367617867B78864EB3AC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 07:02:22 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:22 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:22 +0000
Files and hashes:         1: L28Hzq0GpPgRVHYAusAvrwzAhMk.crl (hash: RJ9Xj4QfjVm5gk1y2jdToIqBw5mAR8pV6Qf88SWYWPA=)
                          2: QqgdIg6hSu9l0qkAmT27rSaYEpI.roa (hash: Zj7N5jWJe1MnRgbFLlzVoeaeQcOnvfzk+fyv1HdeicI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:47:a3:c6:83:67:61:78:67:b7:88:64:eb:3a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f6f07cead06a4f811547600bac02faf0cc084c9
        Validity
            Not Before: Aug 23 07:02:22 2025 GMT
            Not After : Aug 24 07:02:22 2025 GMT
        Subject: CN=075cf238167ca954bcbefdcdba376a5005699e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:21:16:43:eb:8d:12:69:53:04:bd:51:8b:a0:
                    80:d4:18:eb:92:b2:5d:2f:e0:10:e6:03:3b:7b:a2:
                    8f:cf:3d:38:d3:fa:46:13:e0:e8:59:05:7b:cc:a2:
                    6f:f5:02:9d:57:7b:b1:13:c1:ec:ef:ae:0d:b2:04:
                    9c:41:f8:53:8b:c3:70:b3:6f:5c:17:35:94:0a:7e:
                    f4:3d:14:10:fc:28:5b:2c:e7:df:64:42:58:4d:30:
                    b7:77:16:37:32:ab:ee:38:e6:fc:7d:0c:cf:e1:bb:
                    30:38:47:a6:db:b8:5d:08:65:e1:92:35:d3:2d:cf:
                    7e:e9:eb:30:bd:36:49:d4:62:cd:bc:6c:3a:5d:7e:
                    31:dc:7b:f5:b0:37:83:e4:5b:7a:8a:00:5e:20:b1:
                    57:a0:74:15:b3:9d:08:9f:c8:97:4b:45:b8:ca:7b:
                    7a:a4:73:bc:7c:0a:28:18:3a:74:27:e9:11:4e:c2:
                    d1:21:41:91:5d:ee:e2:ab:f7:c3:61:78:c1:c6:41:
                    7a:0d:81:1d:de:39:a4:21:16:ea:5b:06:eb:0c:6d:
                    71:b8:d9:a6:54:90:21:9d:d9:2c:13:d4:17:ae:c2:
                    b5:96:fa:fc:60:8f:b0:48:87:2b:64:98:38:a3:01:
                    41:dd:cb:78:2b:de:9d:f9:9b:2c:01:e7:a8:8f:e7:
                    59:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5C:F2:38:16:7C:A9:54:BC:BE:FD:CD:BA:37:6A:50:05:69:9E:61
            X509v3 Authority Key Identifier:
                keyid:2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:89:ee:15:e0:d7:d4:fd:64:b9:f9:05:88:5e:f0:49:6e:d2:
         c0:82:c4:eb:70:ab:6b:fc:c9:fc:88:18:6b:c8:ca:60:56:f5:
         19:66:64:cb:0f:9c:5e:82:50:fa:06:73:d6:9a:05:55:bc:0d:
         a8:f8:09:93:15:58:f0:9f:d2:a0:32:ef:b4:e3:86:60:eb:d0:
         a0:80:ff:cf:99:a1:42:90:a4:05:f8:2c:46:4c:7c:28:3f:87:
         14:c8:5b:06:91:93:2d:1a:98:78:80:25:5a:f6:94:ad:ca:7d:
         4b:ca:a4:ac:09:90:dc:31:23:be:f4:6a:17:d0:df:c7:16:7e:
         a2:99:bd:b5:ee:85:c1:28:76:89:6e:32:f6:e6:ce:22:53:48:
         9a:98:9c:a8:1d:b2:50:b5:05:5d:84:11:32:ce:7d:20:d4:c7:
         79:3b:17:d4:d7:d6:57:53:9a:3f:80:1f:35:a8:8b:c2:56:ea:
         61:60:6a:b2:a0:de:24:9d:fe:26:56:d0:83:03:94:8f:c1:64:
         ff:11:07:94:5a:10:d1:cc:ab:29:2f:d4:db:35:7a:74:ed:7d:
         39:c4:84:d1:b9:24:b5:5d:4b:10:fd:0c:4b:bc:78:00:63:ab:
         51:08:fb:42:d8:41:95:d9:31:d7:97:0c:93:0b:78:0c:af:2c:
         12:7c:74:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:42 2025 by rpki-client