Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft
File:                     L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft (raw, json)
Hash identifier:          zXBQAEYpskADyVEwnMszm62J3YQICju7sRqfEGO7lZE=
Subject key identifier:   DB:7F:6E:3F:44:A1:AD:31:16:83:27:05:8F:D2:62:64:72:D8:4B:59
Authority key identifier: 2F:E1:7B:F8:0E:E1:E2:E7:0D:B3:EA:05:DC:16:F3:04:E7:09:0C:F4
Certificate issuer:       /CN=2fe17bf80ee1e2e70db3ea05dc16f304e7090cf4
Certificate serial:       0197B88F2EA20AF46BDA82BB028EC1F2EE0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 22:01:20 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:20 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:20 +0000
Files and hashes:         1: L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl (hash: 0jJbbW8tYN7s84TSPy3WkxomrKeFMuqZ5IhAEwpI9c8=)
                          2: X4PWvygxBdxI2bPS7qTomVF09pI.roa (hash: 2E6tFW6VfoZTEjVF3J8CP/Q2ZVMLRzmKJIsn7Czdp0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:2e:a2:0a:f4:6b:da:82:bb:02:8e:c1:f2:ee:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe17bf80ee1e2e70db3ea05dc16f304e7090cf4
        Validity
            Not Before: Jun 28 22:01:20 2025 GMT
            Not After : Jun 29 22:01:20 2025 GMT
        Subject: CN=db7f6e3f44a1ad31168327058fd2626472d84b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:10:02:c4:3f:81:c3:ef:f8:01:0d:e4:42:05:
                    71:f0:dd:20:42:70:bf:1c:b5:cb:97:82:36:04:fc:
                    6b:aa:ea:ce:87:bb:df:c8:e1:b3:fb:42:c2:76:9e:
                    89:61:0f:b4:81:47:59:03:ee:db:3f:53:3c:e4:7e:
                    15:0d:3c:44:67:18:48:ae:e0:8d:04:bc:08:d1:f0:
                    d7:1e:e8:c2:db:25:26:e2:03:cf:8c:8b:8d:bc:07:
                    0d:1a:06:84:c5:ce:35:39:38:2d:24:01:60:fb:83:
                    87:01:23:01:8b:9d:09:9b:80:35:7a:f6:36:7d:d7:
                    04:c9:47:46:c1:89:00:45:37:2f:12:e5:b8:d5:82:
                    5c:a3:69:5a:29:b5:de:55:f3:eb:ff:e7:a2:e5:dc:
                    2e:b8:68:16:2b:96:02:d5:9b:e5:8c:d4:21:4c:04:
                    97:26:08:b0:33:78:e5:f1:4c:dc:ff:e8:37:bb:24:
                    96:1a:0b:d7:4e:be:0c:14:b9:58:5f:db:df:52:ed:
                    1b:2b:7e:df:b0:b6:70:4a:e3:27:da:5d:95:17:4e:
                    de:ca:9b:f2:6e:80:78:5b:e2:2a:08:99:72:b0:4e:
                    9c:2a:6f:01:3f:a8:8f:39:d2:e3:67:9a:ab:51:22:
                    d4:fc:d2:5b:7e:67:c3:27:24:36:fb:5f:b2:e0:f5:
                    dc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7F:6E:3F:44:A1:AD:31:16:83:27:05:8F:D2:62:64:72:D8:4B:59
            X509v3 Authority Key Identifier:
                keyid:2F:E1:7B:F8:0E:E1:E2:E7:0D:B3:EA:05:DC:16:F3:04:E7:09:0C:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:21:6f:de:05:b9:52:05:70:fa:89:e5:3d:bf:b5:13:fb:8d:
         83:d0:01:d1:33:39:97:96:79:61:fd:da:0f:79:22:0a:05:50:
         67:4b:dd:55:58:d8:1a:80:50:d6:a9:25:0c:7c:e5:e7:21:d9:
         2c:f4:51:8b:fb:00:19:37:44:ea:9b:72:d0:9a:8b:bf:04:fb:
         8c:b6:5b:d5:ab:15:86:02:d8:d7:85:46:7a:65:ec:4a:c9:38:
         6e:d6:49:85:1a:5c:eb:ec:88:2b:56:20:e9:5f:c1:61:4f:3f:
         8b:03:9b:11:50:01:46:d2:16:c8:01:91:18:cf:58:aa:4c:fd:
         f0:52:2a:4f:c4:78:a8:aa:9f:0f:56:b0:55:37:6c:44:ae:e1:
         f0:f9:fd:4c:94:5c:3b:0a:21:f3:d1:3e:69:de:a6:21:3f:51:
         6e:4c:2a:7b:43:7b:35:99:22:ae:a1:df:d4:ae:c2:0f:2e:ca:
         f2:82:08:4e:25:7a:f8:14:d2:4a:cf:b4:48:51:fa:07:84:8c:
         88:a8:9c:b8:27:af:a3:d6:e6:d2:6f:e3:ba:80:1c:e7:e5:81:
         6d:62:06:db:22:dc:f7:dc:dc:e2:45:49:26:d3:27:c9:53:31:
         48:fa:d1:9b:9f:d7:36:52:54:17:25:ee:5a:8c:b9:3b:95:99:
         0b:7a:31:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:34 2025 by rpki-client