Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
File:                     L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft (raw, json)
Hash identifier:          jQFW0SS99sNa76+u5/9pyS3VQr68QiULMTmtJJnY8jY=
Subject key identifier:   21:04:32:C0:B2:0C:D1:A6:19:10:69:CC:69:A4:CE:9C:38:F1:23:D6
Authority key identifier: 2F:EC:10:D0:08:8B:2D:DB:8A:4D:15:15:BF:06:B4:C0:01:2A:E0:46
Certificate issuer:       /CN=2fec10d0088b2ddb8a4d1515bf06b4c0012ae046
Certificate serial:       0199FFC78A7BDEE5B2671A3962AB3BB72546
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
Manifest number:          1350
Signing time:             Mon 20 Oct 2025 04:01:31 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:31 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:31 +0000
Files and hashes:         1: L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl (hash: aU/9caIoBNUl28rE5T3XHZRHsOguMkqyLomIzj0lByo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:8a:7b:de:e5:b2:67:1a:39:62:ab:3b:b7:25:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fec10d0088b2ddb8a4d1515bf06b4c0012ae046
        Validity
            Not Before: Oct 20 04:01:31 2025 GMT
            Not After : Oct 21 04:01:31 2025 GMT
        Subject: CN=210432c0b20cd1a6191069cc69a4ce9c38f123d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b2:1d:71:6e:32:e7:c3:96:e2:b2:fd:09:bf:
                    85:58:97:eb:f9:a1:08:65:ef:ef:a6:76:6e:b0:ea:
                    55:18:1c:48:26:55:03:c3:ba:ff:b6:65:93:c1:c8:
                    a1:21:28:f1:09:3f:0e:e1:75:41:47:16:69:fe:02:
                    1b:e7:b9:02:cc:a7:48:5f:f9:4e:3f:8e:b3:7c:74:
                    19:be:97:85:d4:18:31:f5:cf:30:4a:04:a5:95:fb:
                    e0:d8:78:0f:12:f0:3c:10:e5:f4:b0:eb:c5:c8:37:
                    ea:53:9c:f7:4f:72:88:e6:b4:ee:24:30:7c:2d:d1:
                    62:59:09:ca:43:81:e7:23:35:82:4b:40:27:65:cb:
                    e7:00:eb:1f:29:d4:d1:eb:45:f1:77:5e:9e:ed:ac:
                    b4:27:2a:c0:45:7f:48:9d:53:9c:44:1f:ca:6f:8e:
                    1a:04:64:9d:0b:52:b9:2b:db:3e:03:ad:a9:18:b8:
                    4d:fe:f5:64:25:e5:f6:63:81:12:7e:12:8d:bd:0c:
                    5f:44:c3:41:89:a0:1c:96:b5:9c:42:cb:09:86:0f:
                    c2:71:be:95:ac:23:43:14:37:71:01:5a:1d:3b:16:
                    5e:d3:0f:28:97:00:ed:41:ee:b5:3b:7c:f2:ea:a9:
                    21:0f:40:33:57:e5:7c:19:1c:7d:81:2d:18:0e:24:
                    bf:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:04:32:C0:B2:0C:D1:A6:19:10:69:CC:69:A4:CE:9C:38:F1:23:D6
            X509v3 Authority Key Identifier:
                keyid:2F:EC:10:D0:08:8B:2D:DB:8A:4D:15:15:BF:06:B4:C0:01:2A:E0:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:d4:ec:5e:60:ce:54:c7:0e:05:4b:ed:43:84:fb:19:71:99:
         d6:b0:77:49:dd:ec:ed:0b:bb:14:2b:41:05:34:e2:17:7a:1f:
         95:1f:08:7d:13:4d:bd:11:ec:32:0b:a4:dc:5f:b5:4a:73:57:
         48:de:d0:c0:a3:e9:58:8d:0b:25:8c:30:ab:a0:ec:e1:2d:4e:
         f7:25:02:e0:24:c2:a4:ea:7d:0c:73:59:f3:ef:11:12:cb:8c:
         7c:6f:66:90:e7:97:a0:cf:e8:e3:61:c6:33:31:f5:e4:df:67:
         4c:2b:ed:36:18:f7:0d:24:92:5b:28:22:b4:62:27:85:1b:3b:
         3d:84:af:b3:ae:bc:66:e9:68:98:6e:7b:04:77:bb:43:df:31:
         09:65:be:10:59:13:43:31:42:7e:6c:6b:42:b9:57:3c:74:36:
         3a:17:f7:c8:8a:e7:fb:19:88:ff:c6:bd:91:63:9a:30:8b:5e:
         2f:43:7d:3e:04:18:95:aa:df:03:37:9b:88:51:11:ec:71:1d:
         53:68:52:e6:9f:9a:43:3d:a1:5f:2c:74:64:ea:5d:23:80:c3:
         6e:90:56:21:f0:41:4f:3a:79:3d:38:54:9f:45:f0:4b:82:3d:
         be:e4:2d:10:8b:01:46:bd:ca:b5:1a:5c:d6:b3:7d:99:32:53:
         81:8c:73:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:29:57 2025 by rpki-client