Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
File:                     lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft (raw, json)
Hash identifier:          ewpNFQsTzL07tlJsa5ZZqZ9O67RXoyKmw3MrpsFmFWA=
Subject key identifier:   9E:2A:33:5C:5E:4C:55:56:D6:9A:C9:9E:99:82:AD:F0:D5:F5:19:FA
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Certificate issuer:       /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial:       01988CFD25E5CFCC03F736C627E144C39529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
Manifest number:          12F8
Signing time:             Sat 09 Aug 2025 04:00:57 +0000
Manifest this update:     Sat 09 Aug 2025 04:00:57 +0000
Manifest next update:     Sun 10 Aug 2025 04:00:57 +0000
Files and hashes:         1: 6uBRMAdPwa-lKO2ylO9DlsGgsHY.roa (hash: +m2JD+JFXF9SBNg+lpjDT6mDr6YnDMqmBejWjKgStAQ=)
                          2: CtTo5i2NA71eUIhIXr5r4nn6cMM.roa (hash: K/qpGBEEAzU0t+PU2uNHZkV5kXy899JTTUzqneW2S8k=)
                          3: VRYfwJddtKzQsHE8MbAEFYO6ZHo.roa (hash: EYXXmNlMh3UrU0hKdU6hQ+CFn2MC63mGZvBuDrRNCLw=)
                          4: _IPRbMWwskVt3IbCmXEmagAHz9s.roa (hash: HH3Sf7d/mGsMAjOImxuCaLyQ45/rThGApKwsbdwUpNs=)
                          5: aQ92mv4OX0TrGXRhoE4qVRj9Lwg.roa (hash: Sn7Iy1mnHMRUkHR2YiOO0Z7B9rvVJ+lItzyRTfMio1A=)
                          6: lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl (hash: ZCGpOG5vvakHMZiIXg5mf6NOvVPa4hQbwXooSxCScGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 04:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:fd:25:e5:cf:cc:03:f7:36:c6:27:e1:44:c3:95:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
        Validity
            Not Before: Aug  9 04:00:57 2025 GMT
            Not After : Aug 10 04:00:57 2025 GMT
        Subject: CN=9e2a335c5e4c5556d69ac99e9982adf0d5f519fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0b:7a:2b:a3:2d:7f:a5:a7:45:c1:ff:7a:21:
                    3d:aa:f3:fa:47:91:95:66:93:54:b8:b0:de:3d:31:
                    dc:0c:15:73:60:d3:2c:ad:8a:b3:b4:1b:27:b3:b6:
                    82:3d:74:00:7c:af:17:86:11:69:76:3e:1b:06:71:
                    ab:48:8f:19:18:00:6c:b6:10:3e:f1:26:e2:bd:02:
                    8b:fd:06:c8:78:3c:96:97:00:fa:e8:0e:26:d2:b9:
                    4f:99:83:3c:1e:d9:ce:7d:09:c2:b1:dd:80:32:27:
                    27:fb:ec:d2:4e:ca:41:ad:8b:0a:3a:16:e8:ca:e0:
                    b4:3d:04:60:80:7c:ee:25:5d:ab:8b:1c:e1:92:65:
                    64:fb:87:09:a2:17:18:88:1c:fd:bb:bf:14:80:4a:
                    12:03:ff:83:34:43:72:72:11:bc:7b:52:74:60:b1:
                    14:e2:7a:b2:91:30:76:21:2a:96:f8:d4:bd:a5:98:
                    e9:8c:38:ee:b9:2f:ab:93:da:33:be:20:bd:5d:a2:
                    d0:4f:1d:b0:28:92:ae:39:0c:a9:fe:c1:2c:00:98:
                    ea:15:c5:70:b8:9b:74:61:5f:88:e9:af:37:08:1b:
                    ff:34:7e:52:a2:e9:2d:45:51:d4:10:d2:c4:db:ce:
                    5a:18:e5:48:1f:c6:b8:8d:12:37:b3:bd:fc:5b:6c:
                    7a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2A:33:5C:5E:4C:55:56:D6:9A:C9:9E:99:82:AD:F0:D5:F5:19:FA
            X509v3 Authority Key Identifier:
                keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:fd:be:e3:a4:57:2e:1a:85:5a:e2:1e:34:73:2f:c4:f1:86:
         8b:29:2a:d4:6b:fa:0d:7f:79:ae:27:75:06:19:70:ac:55:1a:
         a2:85:29:f3:45:a0:66:3d:38:fe:87:72:c1:47:19:27:c1:b2:
         73:14:c1:07:04:8f:9b:0b:3f:70:7a:f8:df:98:b0:1a:49:9e:
         ed:6a:98:20:9d:b0:db:5c:c0:42:b2:50:2b:65:e3:d3:41:12:
         46:f4:27:cb:44:3b:a6:90:d1:a2:bd:2e:2c:a2:1d:69:b0:6a:
         da:03:53:cf:b7:a9:db:0d:b0:10:2d:a6:81:ca:cd:10:a2:43:
         7e:00:7d:f6:d0:43:ea:64:de:e9:8b:53:10:57:97:80:87:9e:
         95:44:f0:4b:96:40:0d:07:4c:cd:78:ec:e3:23:4a:12:68:b2:
         ed:42:a9:04:a6:ce:be:c7:55:1e:81:eb:48:4d:f3:d4:af:f3:
         f1:2b:52:24:b9:73:22:48:e3:ab:42:6d:82:9c:03:ab:ba:c8:
         84:82:2d:50:c1:e2:15:50:37:a0:97:f2:49:0e:6a:7e:d2:43:
         18:9a:d9:77:02:29:09:f5:26:24:a8:4b:eb:7d:ec:44:f2:12:
         88:cd:d3:ad:ef:b6:98:f9:0b:26:8c:f4:0d:c8:16:51:2d:f2:
         90:72:5a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:43:05 2025 by rpki-client