Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
File:                     IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft (raw, json)
Hash identifier:          aIEFJ+xjb8kBBkKHXNLnj2Mo3ivCs9MaLWUOTal02S0=
Subject key identifier:   75:BE:99:90:BF:51:6D:E6:73:46:C6:D2:08:41:AD:21:CE:AE:4F:30
Authority key identifier: 22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
Certificate issuer:       /CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Certificate serial:       01987D8B5622771A52311106979174B9E5BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
Manifest number:          0AB2
Signing time:             Wed 06 Aug 2025 04:02:20 +0000
Manifest this update:     Wed 06 Aug 2025 04:02:20 +0000
Manifest next update:     Thu 07 Aug 2025 04:02:20 +0000
Files and hashes:         1: 7cHudsbhVZHbppHTF_ntQT5LGaE.roa (hash: gjOnvh/cfHW6KLD8KAndHZd6PiXGNmxJ/xbLzRraSmM=)
                          2: IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl (hash: Yd0v0CEqDjol9dQIi2wtRr+laobncl3BtHetDNPcr6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8b:56:22:77:1a:52:31:11:06:97:91:74:b9:e5:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
        Validity
            Not Before: Aug  6 04:02:20 2025 GMT
            Not After : Aug  7 04:02:20 2025 GMT
        Subject: CN=75be9990bf516de67346c6d20841ad21ceae4f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:69:a2:e6:eb:fe:b0:e0:dd:97:ed:9a:90:c5:
                    28:92:71:3d:39:a3:0b:fa:e6:38:69:e5:0d:c2:62:
                    5c:7f:e5:0c:5f:35:34:58:3b:80:41:37:c5:e3:75:
                    b2:15:1f:bf:40:d9:cd:9a:1b:1d:dd:7e:7d:87:89:
                    a5:7b:61:ba:3b:0d:c2:74:36:78:42:a4:78:56:fa:
                    2f:ca:3b:cb:b6:43:dc:6c:1f:df:08:2f:f0:1e:9b:
                    fd:aa:be:16:cc:b0:bb:37:91:12:80:aa:2a:e8:2f:
                    2e:0a:ca:11:1e:95:bf:41:f4:22:e9:c9:9c:15:aa:
                    49:dc:3e:da:28:41:e3:26:23:c7:fd:79:3f:fb:3e:
                    7e:5a:86:a4:0a:a5:0d:dc:1d:b9:fe:f8:58:df:7d:
                    53:59:c0:76:23:3d:44:4b:1b:9a:f0:b3:48:4c:dc:
                    f2:f9:c4:1a:70:35:8c:21:b4:35:a2:2f:cb:45:11:
                    73:be:3b:04:38:41:c9:9b:4b:45:4c:54:6b:f7:de:
                    f4:32:b2:8d:4b:fd:74:09:a5:03:d3:a8:b6:82:94:
                    54:45:83:75:bb:e3:d9:06:67:2b:92:65:50:ae:48:
                    48:b1:15:11:da:2f:c5:47:59:70:ba:57:59:8d:74:
                    95:2e:19:76:3c:5a:c9:4b:b3:27:93:6d:cb:7a:17:
                    48:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BE:99:90:BF:51:6D:E6:73:46:C6:D2:08:41:AD:21:CE:AE:4F:30
            X509v3 Authority Key Identifier:
                keyid:22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:fc:e7:64:7f:0f:93:8e:06:f7:bd:e4:ae:97:23:d9:98:ea:
         27:32:ab:3f:cc:a8:12:30:48:34:5f:ff:de:6f:4e:24:b2:de:
         a6:0e:2a:c8:7d:ad:23:7e:6d:1a:c1:27:b2:78:f6:f4:dc:bf:
         7d:9f:6b:6d:65:7f:55:d4:c8:ee:e2:7b:12:0c:44:d6:93:7e:
         a2:51:08:82:50:86:29:2c:e0:34:93:70:de:70:67:22:76:ea:
         0a:2f:c3:20:f9:7e:9b:9f:0e:34:35:3a:b0:1a:80:89:60:2f:
         a3:73:10:d8:b0:2f:1c:18:2a:c4:71:b4:2b:d9:c0:56:b6:d8:
         ea:3c:34:25:32:01:89:7a:b3:33:1e:5c:04:d4:37:03:cb:f2:
         a3:6a:37:77:13:9c:71:30:85:4e:4b:62:25:5f:25:69:a8:36:
         6c:16:a9:64:f5:67:62:70:c2:ee:6e:f2:bd:0b:30:7b:6b:6c:
         b5:8b:ae:60:5e:02:4f:ca:8a:29:a8:36:d8:18:11:bf:7c:7d:
         d6:63:28:64:1d:5f:5f:f6:5b:d6:05:96:6a:e5:ad:26:fa:f8:
         5e:c9:fc:be:fa:51:6e:a4:d2:74:93:60:e5:b7:bb:49:0b:c0:
         8f:2d:a8:17:80:70:84:27:de:c9:7f:9a:d4:9e:c3:ea:b6:26:
         dd:3b:e7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:38:30 2025 by rpki-client