Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
File:                     lpztpb83kB_p5E9ztb-CtoezRXI.mft (raw, json)
Hash identifier:          fIgnx4ZxQv8RJniwrW4JEtt5JpEnbxbz7p/9593N3T4=
Subject key identifier:   B7:55:EF:BF:89:6D:39:B0:28:09:DB:7F:12:1D:46:E0:0D:0A:37:D4
Authority key identifier: 96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72
Certificate issuer:       /CN=969ceda5bf37901fe9e44f73b5bf82b687b34572
Certificate serial:       0197684E7393DF04595024345EBD4847A643
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
Manifest number:          0A31
Signing time:             Fri 13 Jun 2025 08:01:01 +0000
Manifest this update:     Fri 13 Jun 2025 08:01:01 +0000
Manifest next update:     Sat 14 Jun 2025 08:01:01 +0000
Files and hashes:         1: BlSKEWV8a0Pu0DQWSBEZ8E6j6Ig.roa (hash: E+fl2IDftOEsy56bvfa1HOBzyBMqnDbK6GEdF9F9KeI=)
                          2: amBacDdU6Mjk1rJegCvOmhPZCuI.roa (hash: QFuN87Ca0aIv1BOf1cf5zbuSpQPxJlnZXFNDEW5Ik9U=)
                          3: lpztpb83kB_p5E9ztb-CtoezRXI.crl (hash: Dq6NOEoFU6W2SO0g4/yMgAcaCn9APimZxHfZUSH2kyc=)
                          4: oQUx3CaetTGOoOfH7R_GIuQC9ZM.roa (hash: QXtVeIAnBIaJbBWzjL0HKxzProdKFi/c2re+3CNcveM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:73:93:df:04:59:50:24:34:5e:bd:48:47:a6:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969ceda5bf37901fe9e44f73b5bf82b687b34572
        Validity
            Not Before: Jun 13 08:01:01 2025 GMT
            Not After : Jun 14 08:01:01 2025 GMT
        Subject: CN=b755efbf896d39b02809db7f121d46e00d0a37d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:52:dd:84:96:33:77:e0:de:09:46:d7:e8:81:
                    95:79:91:1b:9e:e6:7f:87:81:1f:c4:32:2c:c8:55:
                    0f:8d:09:ae:7a:a2:16:5e:25:99:bf:e8:79:62:23:
                    ee:3a:5e:93:18:02:bb:93:a9:61:06:0a:10:6c:69:
                    cf:c5:8b:c8:6c:2f:2a:13:6d:8c:48:7a:3a:b2:bd:
                    40:05:45:85:49:02:24:e6:48:32:62:6d:a6:ac:ae:
                    43:a2:ad:ce:43:4d:58:57:b9:e8:18:25:72:f8:81:
                    ec:48:7e:1c:67:0c:b8:3a:b6:e3:80:68:ef:c7:68:
                    a7:48:85:c9:f2:ac:37:12:50:eb:b5:c5:a2:14:a0:
                    f5:86:10:f3:46:a5:6e:84:70:41:b2:bd:17:96:88:
                    63:28:c7:de:b8:0d:7d:66:f2:54:67:82:c4:a9:e4:
                    f6:6e:a5:be:db:66:b4:f9:e4:0d:de:5d:2b:b4:94:
                    e0:53:85:dd:a9:70:4c:45:70:28:54:df:a5:ee:ac:
                    b9:0e:6f:25:0e:02:4b:a3:82:0d:4d:94:bf:aa:22:
                    63:19:c6:e9:8b:d2:fb:2d:50:41:da:af:d3:25:5f:
                    3c:06:09:99:c9:03:f2:fd:a6:1f:bf:88:0c:51:58:
                    8b:1f:37:c2:5b:f1:98:88:83:58:dd:91:a2:6e:53:
                    71:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:55:EF:BF:89:6D:39:B0:28:09:DB:7F:12:1D:46:E0:0D:0A:37:D4
            X509v3 Authority Key Identifier:
                keyid:96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b1:7d:25:c8:d9:2c:4b:fd:0b:e5:c1:4e:39:fb:d4:f4:e2:
         a2:5c:a8:1b:14:df:e3:17:66:89:00:e2:05:d8:e1:49:b8:a7:
         99:b9:5e:b8:bf:de:8f:8e:93:9e:20:4d:bc:76:db:02:b8:a4:
         fa:65:06:37:da:96:26:53:b9:55:de:41:7d:b9:0f:a7:1a:e5:
         69:13:6f:b8:53:86:d9:1f:c4:50:8e:d8:9d:aa:04:05:38:d9:
         50:36:2d:71:52:62:8c:ad:52:2a:2d:e4:ce:9c:16:19:fe:16:
         01:a5:46:39:e2:d6:49:8e:19:b2:8a:a0:6b:10:04:95:70:6b:
         21:5b:2c:3e:d7:23:13:44:32:0a:3b:da:36:b4:f0:b8:1a:d9:
         73:98:4c:82:81:0a:52:b1:ec:7c:cb:ab:41:93:78:bd:51:24:
         70:94:19:ce:d4:0e:49:a7:5a:1e:f5:31:25:fa:9c:3e:f1:02:
         d2:7b:22:f9:2f:fa:8c:ef:87:f1:4a:ad:2e:48:a2:d0:b4:ad:
         9c:3a:c0:a1:48:89:7d:62:59:44:64:76:7e:f2:e6:72:92:61:
         b7:5f:e9:4f:5f:ed:35:79:d1:8c:6b:32:17:8d:bf:d4:18:12:
         91:31:53:f9:ce:9c:f9:a0:3b:60:87:ce:52:38:b0:71:fe:7d:
         dd:ff:ae:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:30:28 2025 by rpki-client