Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
File:                     L5INmRKzpyi5SBgYjvPj5X-NP5w.mft (raw, json)
Hash identifier:          XitnNYL0YR9hxrNYzSUdlVoRYbfhC5cI6tFXmKOMeD0=
Subject key identifier:   78:9C:2C:7E:81:B4:0C:3F:C9:21:4B:8C:D3:1F:02:48:E8:5B:96:25
Authority key identifier: 2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C
Certificate issuer:       /CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c
Certificate serial:       0198D54E398B146C88637FDF106B2934F2F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
Manifest number:          1385
Signing time:             Sat 23 Aug 2025 05:02:10 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:10 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:10 +0000
Files and hashes:         1: L5INmRKzpyi5SBgYjvPj5X-NP5w.crl (hash: cBQLs49WWwsikcP8SiDHKpCQ53mQqiVPxPD+5OQ5WFI=)
                          2: UHmcnjZPkdlcmPvf9kU9gEvRzu8.roa (hash: o/ZBiu0sM0QxdL8NohBvSpb6XFjAawutUac+NbV8PeM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:39:8b:14:6c:88:63:7f:df:10:6b:29:34:f2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c
        Validity
            Not Before: Aug 23 05:02:10 2025 GMT
            Not After : Aug 24 05:02:10 2025 GMT
        Subject: CN=789c2c7e81b40c3fc9214b8cd31f0248e85b9625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2d:42:cf:93:3e:17:2b:ce:27:10:3a:d4:4e:
                    1a:93:71:8e:4f:17:c2:a6:93:c0:82:9b:82:93:e3:
                    d1:7d:62:a0:34:1d:99:d8:ae:c1:73:1f:70:16:2d:
                    00:c0:dc:5a:1c:03:99:05:3d:66:af:08:77:1c:36:
                    46:11:5c:7d:c3:70:7b:4a:ae:ba:0d:3f:04:fd:52:
                    60:3c:ba:cc:eb:07:94:50:2b:f4:69:26:d7:e9:84:
                    65:e4:3d:07:7c:9d:b3:f5:27:fb:68:42:b1:69:83:
                    91:6f:0d:2e:51:e4:1f:73:28:31:76:fb:af:77:e5:
                    14:4c:95:cd:04:a5:ce:19:10:78:83:b9:56:1b:46:
                    86:b0:43:af:e2:ee:d4:40:97:1d:17:9b:5f:c1:46:
                    34:4b:ab:9a:d7:6a:3f:32:49:a2:bc:25:c6:6f:09:
                    d6:46:32:4a:ec:8d:3c:57:f1:fa:3f:e6:c8:71:e9:
                    66:88:9b:e3:e0:bd:12:15:dc:09:ec:dc:78:ad:29:
                    b7:fd:1b:e3:a6:e0:fe:db:03:74:cc:79:96:76:b0:
                    69:dd:e4:da:63:cb:05:df:ce:3b:9b:81:9a:f4:51:
                    09:87:f4:ce:43:d5:d8:46:de:a2:96:b7:b9:50:4d:
                    95:5f:e6:66:18:cd:13:41:db:9d:b0:21:f7:2c:92:
                    56:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9C:2C:7E:81:B4:0C:3F:C9:21:4B:8C:D3:1F:02:48:E8:5B:96:25
            X509v3 Authority Key Identifier:
                keyid:2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:92:30:6e:85:e7:e0:97:5a:ee:77:ee:90:00:4c:4d:4c:b7:
         95:99:f3:55:6f:f1:db:f1:08:98:87:9f:ef:7e:67:e6:89:90:
         ea:78:50:8a:ce:c5:b2:54:0a:4a:8a:82:46:4c:59:6b:ee:c9:
         e1:6c:d6:42:20:c3:ee:aa:9c:41:66:e6:cc:f9:ed:55:f6:8c:
         9e:f9:34:17:a4:27:fe:01:e6:78:4c:99:96:56:91:7b:c0:d3:
         13:5b:16:be:0e:e3:0a:f7:d2:27:aa:3c:ec:6a:73:ab:52:24:
         46:d0:a5:76:3f:18:bd:74:4b:d5:61:f2:83:64:83:0b:23:81:
         49:29:15:95:5b:c2:41:45:3f:fd:2e:f0:d6:c2:d4:d1:0f:78:
         bb:76:e4:a4:8b:e2:1f:5e:6c:05:aa:3e:cc:a4:4d:cf:da:1d:
         8c:47:72:b5:80:37:23:08:55:63:2b:d0:97:2c:28:8b:2f:79:
         67:28:69:06:6c:ef:1e:e8:1a:7a:f0:04:91:41:fc:b0:ea:d4:
         2a:5d:ab:14:0b:ae:ae:c5:9e:e1:46:07:b7:86:cc:49:86:93:
         86:ea:d5:35:a8:0d:98:61:93:44:a1:1d:3b:d9:29:5a:2a:a3:
         9a:25:00:86:e2:9c:41:4a:1b:be:ec:37:e8:6c:da:c7:47:38:
         73:b4:00:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:18 2025 by rpki-client