Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
File:                     LzFLwAp-WuIzSeBUBik6fWBgzaE.mft (raw, json)
Hash identifier:          jPLgf3cjRpBuBDEJZG/30HiMX61HEtcxgc8T1FBZ1lo=
Subject key identifier:   B5:54:F5:F6:48:DE:D3:4A:42:CD:4B:48:B5:CA:6B:8E:18:B6:C5:1C
Authority key identifier: 2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
Certificate issuer:       /CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Certificate serial:       01988DA1CEF0D67038620CC2CC443E170563
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
Manifest number:          12E6
Signing time:             Sat 09 Aug 2025 07:00:48 +0000
Manifest this update:     Sat 09 Aug 2025 07:00:48 +0000
Manifest next update:     Sun 10 Aug 2025 07:00:48 +0000
Files and hashes:         1: 1-d5J5W-VmdNEPvaUUIc9QmXJa7c.roa (hash: WEje3N6tM8UQY4DTr2W4pxQIyOYapcmAGgNCDl+FllM=)
                          2: LzFLwAp-WuIzSeBUBik6fWBgzaE.crl (hash: 6JTJZluDcZBsMN3O1tfinOn02rkWbw0MDjilNAzUJ10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:a1:ce:f0:d6:70:38:62:0c:c2:cc:44:3e:17:05:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
        Validity
            Not Before: Aug  9 07:00:48 2025 GMT
            Not After : Aug 10 07:00:48 2025 GMT
        Subject: CN=b554f5f648ded34a42cd4b48b5ca6b8e18b6c51c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:67:35:65:a9:59:f0:fd:2d:6c:e7:7c:d8:04:
                    e0:3d:14:50:e0:24:c3:13:48:5f:62:80:d3:4a:5f:
                    21:f9:bd:19:49:e2:d9:b6:cb:51:c8:41:b7:7d:03:
                    68:56:3b:f6:b6:a5:c3:19:90:d4:2c:80:2d:57:4f:
                    99:61:de:99:5a:c5:b0:fe:89:9a:60:8f:82:fd:c7:
                    e9:f0:26:e5:fa:16:a7:dc:56:38:dc:e9:c0:bf:73:
                    9d:04:a2:5d:36:50:eb:31:33:c7:48:b7:6d:a4:93:
                    1b:0b:96:83:9b:ea:b2:da:cd:07:c5:07:15:46:ea:
                    0c:1b:24:18:e4:a0:de:d0:3e:00:fa:62:ab:61:ab:
                    6b:79:b7:be:08:fe:5e:e6:ca:dd:c3:b3:48:0c:4a:
                    00:d5:70:64:f4:c8:28:4d:93:d2:63:08:f7:c7:10:
                    62:b2:b9:d0:b1:00:b5:51:c4:7b:9b:e3:09:1c:87:
                    29:c2:de:2e:e9:8c:a8:6c:1b:4b:94:5b:e6:74:ba:
                    08:17:08:2e:e7:8d:ac:af:1e:12:96:50:c4:2c:c4:
                    1c:a4:5f:45:e1:3f:6e:d5:6b:79:30:ef:b5:54:ad:
                    a3:7b:96:41:23:f9:79:df:c0:74:16:f3:fc:c9:dd:
                    72:31:ae:1d:ae:89:26:78:92:2c:4a:c8:e0:17:63:
                    c8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:54:F5:F6:48:DE:D3:4A:42:CD:4B:48:B5:CA:6B:8E:18:B6:C5:1C
            X509v3 Authority Key Identifier:
                keyid:2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:11:2f:1a:78:a3:bd:63:10:19:49:40:8c:73:b9:9d:09:72:
         1b:a0:31:5e:1d:39:f5:f6:8c:69:21:ad:25:96:7e:dc:28:4d:
         54:33:df:63:d6:09:fc:40:ea:24:2e:17:bf:d8:f0:1c:b0:18:
         67:ab:54:0e:6f:97:cd:7d:62:fe:98:f5:1d:54:6b:b6:64:ce:
         79:64:a3:30:60:37:a7:13:ea:41:98:c6:f4:5b:9d:88:21:56:
         35:7d:47:d7:2d:5a:97:22:51:de:bf:b0:0b:46:af:8f:51:f3:
         c3:e5:d1:f0:0c:54:fa:b8:eb:c5:8d:16:a7:c4:68:a2:ee:84:
         a2:31:36:14:21:29:5d:62:e1:31:3b:ea:1a:9c:7e:32:5c:64:
         0b:07:a0:d6:3d:ee:cf:83:37:3c:e5:12:fe:de:14:e1:59:18:
         f2:8d:8c:53:81:1c:c0:ba:ae:61:ff:09:b4:de:fb:3c:26:01:
         88:47:44:10:79:15:45:43:4b:eb:18:90:46:54:b5:90:38:86:
         b6:30:f2:57:54:71:1a:79:e5:d4:14:4e:25:18:56:47:1c:4d:
         cc:00:95:96:80:5c:bb:b0:97:ec:89:8b:04:15:ed:ce:81:ba:
         cd:1d:ee:a6:09:12:2c:c2:2f:9a:64:e4:76:64:6f:4a:eb:5b:
         19:36:e1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:11 2025 by rpki-client