Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
File:                     _l1M3gmNHKh_Tgqe64VZKOg9KT4.mft (raw, json)
Hash identifier:          /x+slCYWjgCS2n7cIDazMOUSMoqbc6LRsrUUeAMM0vo=
Subject key identifier:   75:A5:12:52:C3:64:75:28:32:DB:61:57:6C:FA:1C:AB:B4:43:84:DE
Authority key identifier: FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E
Certificate issuer:       /CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e
Certificate serial:       0198D6607836B8F1C36BF65AE121FFB73AAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
Manifest number:          06A3
Signing time:             Sat 23 Aug 2025 10:01:43 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:43 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:43 +0000
Files and hashes:         1: _l1M3gmNHKh_Tgqe64VZKOg9KT4.crl (hash: jP8DHNjAcdmty9iNsZxv3P0moI2P0JfawT44/6+kofQ=)
                          2: utZx0LvAiHOeptZQC75VXrzHyuM.roa (hash: wu5n7/gdVFeYXS3ZTu6uD37jiOfb6f60vWQYmSZ9Xfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:78:36:b8:f1:c3:6b:f6:5a:e1:21:ff:b7:3a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e
        Validity
            Not Before: Aug 23 10:01:43 2025 GMT
            Not After : Aug 24 10:01:43 2025 GMT
        Subject: CN=75a51252c364752832db61576cfa1cabb44384de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a4:b1:cd:19:33:8c:28:dd:de:93:53:d8:99:
                    b4:3c:44:ae:4f:54:06:a6:c5:d1:a5:60:12:1d:c4:
                    9f:46:d4:4d:2d:3f:e5:d4:fd:26:80:f6:31:3e:ec:
                    d1:c1:b3:ef:11:96:69:c6:39:73:88:cf:92:34:db:
                    fb:19:1e:0e:70:2d:9b:02:44:6f:50:86:ae:9a:46:
                    b9:f5:4f:29:5e:c7:f5:7c:e8:59:29:15:83:7a:3c:
                    77:13:87:67:a3:ff:3b:6c:66:d6:22:0b:34:76:66:
                    e7:c6:5f:ae:de:97:b7:0a:33:f4:ed:01:19:10:49:
                    cf:d9:c8:62:6c:3a:3b:11:c1:b2:d7:26:13:7e:7d:
                    47:87:24:09:db:5c:51:d7:58:f3:10:81:0e:01:5b:
                    c2:20:37:48:49:18:85:a6:9c:31:4b:cc:9a:5a:50:
                    fb:10:7e:18:73:76:71:8c:6a:56:7d:ea:ca:a5:51:
                    6a:bd:78:ea:4a:49:01:16:a0:53:28:32:15:f4:7e:
                    ba:a2:58:93:80:80:01:c3:58:c0:51:ef:53:b1:e9:
                    b8:0d:e0:09:4a:c0:3c:d0:3b:10:0e:b6:1e:61:86:
                    b6:82:a1:5b:ed:8b:00:ec:8f:bd:5b:b5:ac:5e:ca:
                    6f:64:27:50:86:d0:e2:08:47:b8:4d:61:30:41:c9:
                    d5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A5:12:52:C3:64:75:28:32:DB:61:57:6C:FA:1C:AB:B4:43:84:DE
            X509v3 Authority Key Identifier:
                keyid:FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:35:74:04:7f:01:1f:e8:f0:3a:5e:eb:0c:b0:6b:7b:f5:3b:
         18:c5:08:c0:df:d3:a3:21:50:78:0d:36:03:96:dd:41:11:19:
         62:10:3e:02:cc:90:7c:cc:2d:90:ad:08:59:79:2f:6d:da:10:
         67:57:74:80:e2:e1:a4:8b:d2:32:54:ca:70:0d:75:a7:ce:88:
         97:64:07:2f:6e:be:34:11:da:db:ab:06:90:e8:b1:a6:88:15:
         e1:72:21:eb:98:85:c9:0e:ab:12:c9:d9:4c:0e:d1:a1:c5:ee:
         6e:71:7d:02:d3:41:c6:35:39:b1:6a:c7:df:dc:8b:94:b7:2a:
         5e:1a:71:3b:d4:eb:d1:6d:1c:45:46:8f:03:78:d4:9e:05:bf:
         c6:fb:1f:c6:52:80:c4:55:6b:95:02:4b:fd:1e:c8:a2:7b:46:
         80:3e:36:73:85:d9:8d:9e:41:c3:73:b6:71:c9:27:7e:f6:6c:
         c4:20:c8:3a:dd:3c:cb:76:dd:8e:94:d5:8f:0e:c9:d1:06:88:
         f0:72:e8:0f:ae:05:ac:22:3a:5f:2e:29:88:f8:02:40:62:b6:
         9a:96:f8:fa:dd:a7:63:cd:8d:b3:c6:2b:26:77:39:d2:de:cc:
         d8:ea:c8:60:e6:ce:0b:a6:1e:29:9d:d4:7f:d1:7b:18:c4:16:
         5d:03:70:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:03 2025 by rpki-client