Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
File:                     LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft (raw, json)
Hash identifier:          ZbRsCzsqQYngqdo2T0I5n1rifnxXJeJcJ37XAJPNE8w=
Subject key identifier:   43:04:EF:5A:20:01:6A:05:E2:4F:F8:87:0F:B7:7B:57:4F:F9:D6:25
Authority key identifier: 2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27
Certificate issuer:       /CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227
Certificate serial:       019873E367D3742C39EE2EBC508B2C3A9751
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
Manifest number:          092C
Signing time:             Mon 04 Aug 2025 07:02:19 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:19 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:19 +0000
Files and hashes:         1: LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl (hash: QWo5fafbQfM08KC3hpohKfe414eMHCMZACBI/gsm1GE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:67:d3:74:2c:39:ee:2e:bc:50:8b:2c:3a:97:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227
        Validity
            Not Before: Aug  4 07:02:19 2025 GMT
            Not After : Aug  5 07:02:19 2025 GMT
        Subject: CN=4304ef5a20016a05e24ff8870fb77b574ff9d625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4c:20:52:85:fe:39:c7:a6:a3:b6:d1:33:4f:
                    db:33:12:87:57:c3:12:b5:29:f1:97:fa:23:3b:5b:
                    cc:50:b0:17:e6:56:05:53:69:a5:00:27:ea:86:4c:
                    9e:75:30:b4:8e:c3:e2:4d:aa:52:5f:6f:e8:af:ae:
                    01:77:c4:f8:cb:45:eb:0c:25:a0:42:d2:42:b0:e5:
                    18:98:f8:7c:17:f4:71:72:6b:8f:4b:43:73:2e:dc:
                    b1:f4:93:72:f9:a0:19:22:0a:02:9c:31:f5:3a:15:
                    7d:77:76:13:a3:c1:6b:b8:53:e5:f6:ea:9b:20:c6:
                    91:04:07:8e:a6:53:9e:27:20:51:5a:1f:da:a0:93:
                    17:90:07:b1:69:35:49:74:03:54:8e:68:ae:53:90:
                    f4:c7:7d:73:e4:93:de:d9:01:a0:a7:d9:0c:81:22:
                    8b:44:c5:15:48:85:cb:bb:8f:bc:49:30:48:0a:8b:
                    5a:02:65:b7:b1:26:65:e0:ed:ed:fa:b1:10:ec:50:
                    f5:32:91:5d:e2:35:64:91:74:d6:94:ff:31:82:33:
                    96:f6:ef:3e:32:94:56:df:04:f8:d2:cd:9a:32:74:
                    59:b3:b2:b0:25:66:fe:c8:06:72:45:f5:17:e2:f6:
                    85:af:ea:bb:35:7b:68:c6:2e:f8:09:01:97:74:6c:
                    55:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:04:EF:5A:20:01:6A:05:E2:4F:F8:87:0F:B7:7B:57:4F:F9:D6:25
            X509v3 Authority Key Identifier:
                keyid:2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:cd:be:e5:5f:1f:18:28:79:64:20:91:1d:18:bb:f7:64:72:
         d2:c3:ed:e9:8e:20:18:ea:a3:75:0a:e3:30:c4:b1:9a:8b:b0:
         96:c6:f6:63:10:78:c6:30:f7:e5:bc:b0:7c:36:3a:e3:c7:08:
         64:5f:35:11:a4:62:72:b8:20:43:39:f6:a6:bc:01:fa:6c:1e:
         7f:b7:cd:50:cc:67:29:d0:9c:7a:c2:68:d7:1b:ba:e2:b3:08:
         a9:01:27:76:bd:e1:c1:3a:9a:c6:dd:9c:98:19:84:ba:ed:38:
         ca:ad:5a:51:3f:22:29:01:b4:5c:15:22:81:cb:c6:4b:79:41:
         a8:87:ed:a6:eb:8b:be:4c:41:e8:bc:c5:14:2e:45:a0:69:9e:
         a9:31:9a:0b:ce:aa:3a:3d:4a:f8:a2:a7:f2:0d:16:d0:aa:22:
         37:90:65:f1:1d:a0:98:b8:43:d6:da:41:ad:00:50:27:1d:62:
         d9:5a:d6:be:fb:86:2d:bb:53:61:c0:c0:08:7b:70:e3:10:45:
         22:24:ba:5a:0d:11:87:36:9c:8e:a2:fc:55:d0:ce:28:c4:9e:
         90:e1:d6:ce:a2:9c:0b:f8:31:16:52:63:8c:2f:dc:5f:85:26:
         93:2d:3f:f9:16:b6:f1:41:40:23:e0:bd:ff:c9:d0:19:ef:77:
         1b:d1:67:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:42 2025 by rpki-client