Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
File:                     lbmAuBA5WB4NLDelEhbNeXKbDHE.mft (raw, json)
Hash identifier:          34/tUcO6Vua7S9iO4275BO0vVKpuqUa7vIy9K5u6hLw=
Subject key identifier:   D2:8B:C0:E7:2F:AE:56:36:EF:98:20:79:EB:FC:5F:EE:F3:69:05:F7
Authority key identifier: 95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
Certificate issuer:       /CN=95b980b81039581e0d2c37a51216cd79729b0c71
Certificate serial:       01987FE65F1C66295DB9745C3A608A3D98AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
Manifest number:          161D
Signing time:             Wed 06 Aug 2025 15:01:00 +0000
Manifest this update:     Wed 06 Aug 2025 15:01:00 +0000
Manifest next update:     Thu 07 Aug 2025 15:01:00 +0000
Files and hashes:         1: ANSAYrE9HNntD61TvEpJUmG8rgw.roa (hash: 4+iM21UqhAp7nE5c7mZKQw9TVqg+SMBpGm5UpV8V8dc=)
                          2: PJ5ra5RQEPuenhUZKqA-ySi8au4.roa (hash: HAE/ZYsuA8aESklvJ9Rn5+/ozrtEQRVx0jFM8lv6NbI=)
                          3: lbmAuBA5WB4NLDelEhbNeXKbDHE.crl (hash: oFHsec7BlUn1mTtAMAQCzDyJ7Fsb3cw3bY87QgRsaH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 14:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:e6:5f:1c:66:29:5d:b9:74:5c:3a:60:8a:3d:98:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95b980b81039581e0d2c37a51216cd79729b0c71
        Validity
            Not Before: Aug  6 15:01:00 2025 GMT
            Not After : Aug  7 15:01:00 2025 GMT
        Subject: CN=d28bc0e72fae5636ef982079ebfc5feef36905f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:70:31:05:92:fe:18:f6:af:60:8b:14:39:82:
                    14:6a:ef:df:fc:a3:27:62:1a:31:e9:01:05:95:51:
                    96:4f:6d:08:2c:82:13:57:a1:fe:4c:02:2a:08:e3:
                    fb:03:ab:3f:4f:15:0b:5f:59:0c:67:f2:81:16:68:
                    1e:01:59:9d:96:ca:1a:ab:df:b7:2c:36:44:63:e5:
                    87:68:a5:22:40:c8:f8:4a:87:f5:a5:b5:91:12:aa:
                    8d:a0:4d:fa:91:d4:55:f1:be:aa:37:94:da:2f:09:
                    71:0a:5e:67:79:33:ea:b7:12:e1:cb:87:9c:82:b4:
                    55:a0:2f:56:f5:3d:f0:bd:21:94:8a:02:72:a2:cf:
                    42:f4:be:bf:10:8f:f1:48:ca:cf:c8:69:00:06:15:
                    fd:1a:63:c6:1c:c4:a7:06:47:fb:38:10:46:8a:77:
                    30:dd:87:bd:b1:99:30:3c:48:6f:21:da:ad:d2:0a:
                    8c:21:09:80:9b:13:7b:9f:ed:49:5d:6a:4b:b9:b3:
                    dc:27:1e:e4:50:21:81:4c:a8:a6:66:f4:ff:7d:e1:
                    39:a4:22:d6:72:e9:02:b2:ef:a8:52:88:0d:a7:b0:
                    00:5d:3a:57:c9:69:6e:90:13:49:93:40:db:1c:9f:
                    82:d4:72:1d:12:b8:4a:65:26:c3:12:48:1f:ad:f2:
                    11:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8B:C0:E7:2F:AE:56:36:EF:98:20:79:EB:FC:5F:EE:F3:69:05:F7
            X509v3 Authority Key Identifier:
                keyid:95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:48:75:76:28:fb:04:41:db:82:64:5f:d0:1d:72:6c:6b:df:
         3b:cd:66:7c:e3:92:96:b6:b8:a7:47:2c:6e:93:13:41:c6:9e:
         89:ea:a5:f1:0f:39:ec:c9:e5:4a:cd:2f:4b:23:af:56:93:a4:
         9c:0e:cf:99:43:bd:88:81:fe:5c:d0:db:b3:38:ad:91:7a:7d:
         2f:bf:10:c0:a6:be:10:18:48:c4:58:9a:43:0b:62:a1:5d:10:
         e6:8a:cd:55:7e:84:f0:be:77:71:76:00:7a:0b:38:f0:cd:b7:
         06:8b:a2:96:86:8c:29:51:b9:3c:ec:22:65:92:fe:24:98:30:
         6d:d9:ed:79:ec:1d:13:28:c5:eb:c9:4a:d8:79:a9:6f:af:11:
         16:b8:7d:cf:c5:f3:72:ab:04:d9:e3:91:a6:92:c0:a9:f4:d2:
         08:0b:42:5a:62:20:ee:2a:cc:dc:6f:d1:aa:79:19:7d:32:80:
         46:fc:b2:23:fe:0e:17:47:d2:73:e9:c0:64:b2:37:53:a3:0e:
         db:85:2b:bd:3d:43:f3:57:a5:93:eb:64:2f:8d:73:a3:15:6b:
         7e:d2:86:26:9b:e2:7a:a9:9f:a9:8e:3b:e4:38:5c:66:4c:de:
         45:13:e3:04:85:41:ff:8d:08:f8:cb:82:91:a2:94:f3:d3:1b:
         5a:36:ae:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:31:02 2025 by rpki-client