Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4c941d-992d-4eef-88f5-f0f8008dfc4c/1/LZCTZ9vd0eSGa9ier3J1mKR7WD0.mft
File:                     LZCTZ9vd0eSGa9ier3J1mKR7WD0.mft (raw, json)
Hash identifier:          qcvD+TgcfPR/lXQkqPmb5jlPteD10/KLuCuzbls7VQo=
Subject key identifier:   93:B1:6F:A5:C8:3C:A0:64:13:C5:29:44:CB:83:B5:1F:E3:25:6D:4B
Authority key identifier: 2D:90:93:67:DB:DD:D1:E4:86:6B:D8:9E:AF:72:75:98:A4:7B:58:3D
Certificate issuer:       /CN=2d909367dbddd1e4866bd89eaf727598a47b583d
Certificate serial:       019873E25C0FDE2E83BDAC2CA2C8BD2DD5AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LZCTZ9vd0eSGa9ier3J1mKR7WD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/4c941d-992d-4eef-88f5-f0f8008dfc4c/1/LZCTZ9vd0eSGa9ier3J1mKR7WD0.mft
Manifest number:          CB
Signing time:             Mon 04 Aug 2025 07:01:11 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:11 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:11 +0000
Files and hashes:         1: LZCTZ9vd0eSGa9ier3J1mKR7WD0.crl (hash: 3KS3ybp1MLRA31M8KzBVkn+eolPU3xyzNDiU9MlB2Bg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/4c941d-992d-4eef-88f5-f0f8008dfc4c/1/LZCTZ9vd0eSGa9ier3J1mKR7WD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/4c941d-992d-4eef-88f5-f0f8008dfc4c/1/LZCTZ9vd0eSGa9ier3J1mKR7WD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LZCTZ9vd0eSGa9ier3J1mKR7WD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:5c:0f:de:2e:83:bd:ac:2c:a2:c8:bd:2d:d5:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d909367dbddd1e4866bd89eaf727598a47b583d
        Validity
            Not Before: Aug  4 07:01:11 2025 GMT
            Not After : Aug  5 07:01:11 2025 GMT
        Subject: CN=93b16fa5c83ca06413c52944cb83b51fe3256d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c8:da:47:60:ac:27:43:0e:cf:c9:52:f1:e9:
                    10:03:80:10:92:49:fc:9f:63:aa:51:7a:c5:9d:bf:
                    4a:aa:92:c5:b6:8d:27:44:23:5f:cb:1f:9d:33:6a:
                    52:d3:12:ff:20:aa:a2:35:fa:95:04:29:f6:cd:3c:
                    de:ed:51:63:91:55:18:a0:d3:8a:2c:12:de:92:9b:
                    1e:aa:37:06:20:56:a4:a0:f9:e0:68:6f:35:11:7f:
                    0b:ef:ab:e2:25:f5:c8:84:cc:40:a8:ae:10:0f:68:
                    d4:8f:3e:66:92:d7:69:11:ec:99:e7:56:22:d9:1a:
                    bd:f3:96:72:76:0c:1d:9c:b4:6c:8d:62:81:00:0a:
                    95:b1:6e:ab:4e:39:ab:b4:3f:a4:79:8d:27:4d:ab:
                    d6:29:a1:88:a6:b0:3b:6c:48:fd:68:50:af:34:c9:
                    0a:62:ad:61:b1:02:d8:2e:80:9f:5a:f3:61:12:57:
                    6e:a5:62:ce:57:fb:a4:91:0f:a9:9c:1b:df:dd:fe:
                    e1:3b:c2:e1:ac:43:ad:b5:29:3e:31:d6:99:9f:a9:
                    18:38:ed:78:39:17:2e:09:ca:0c:30:05:34:73:80:
                    48:b8:b6:b6:66:9a:8b:fa:70:71:fc:23:f0:ae:6b:
                    96:96:14:dd:6d:0b:2d:3d:8d:0e:11:78:5f:1c:5d:
                    a5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B1:6F:A5:C8:3C:A0:64:13:C5:29:44:CB:83:B5:1F:E3:25:6D:4B
            X509v3 Authority Key Identifier:
                keyid:2D:90:93:67:DB:DD:D1:E4:86:6B:D8:9E:AF:72:75:98:A4:7B:58:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZCTZ9vd0eSGa9ier3J1mKR7WD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4c941d-992d-4eef-88f5-f0f8008dfc4c/1/LZCTZ9vd0eSGa9ier3J1mKR7WD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4c941d-992d-4eef-88f5-f0f8008dfc4c/1/LZCTZ9vd0eSGa9ier3J1mKR7WD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ff:54:d8:78:b8:89:43:3e:15:48:fe:02:b4:5d:9a:57:22:
         90:83:c0:d6:b7:aa:e0:f0:04:c2:95:8c:fb:44:28:b5:e8:f0:
         12:15:41:41:94:e4:3c:5a:d5:3a:18:a6:22:00:db:64:26:ad:
         04:8f:5c:4c:91:6c:e6:e8:89:2a:ed:ac:5a:7c:7c:75:0b:7a:
         b3:11:c9:70:9a:68:43:73:bf:26:87:4d:92:c5:7e:7f:6c:a8:
         50:33:c5:40:ea:ab:9a:19:35:a2:db:4f:27:25:8e:68:f9:7c:
         55:5c:6f:ab:bf:5a:d4:c1:7f:67:d9:0d:2c:af:03:d0:15:45:
         b7:66:00:ca:ba:21:d3:b3:20:76:30:ca:bd:7b:13:d9:5e:1d:
         80:40:bd:50:6d:11:62:30:3c:a5:be:3e:28:aa:4e:00:68:38:
         03:bb:73:3c:e4:eb:e5:c9:bd:14:b1:05:b3:fa:f0:6a:62:df:
         73:e6:88:c1:80:45:a3:37:35:24:61:ff:5b:8f:ae:11:ad:99:
         16:ef:3b:a6:4d:d2:d1:1f:c7:18:6d:5a:38:52:f5:e6:f9:b9:
         51:53:dc:20:5b:8d:9b:25:36:51:fa:e6:82:5b:65:e9:93:a2:
         57:85:aa:1f:96:74:40:19:40:99:22:00:69:0c:fb:78:7d:58:
         14:0a:f2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:26 2025 by rpki-client