Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
File:                     LM5dUfp1u7btlipBZu9vhjCgJYE.mft (raw, json)
Hash identifier:          Sd+ARnRCtoGK6L+hMRbId6ijXT6tG7Aj1v0ABX6FHVY=
Subject key identifier:   2F:AF:73:01:41:43:4F:89:DF:8D:6E:86:0A:E3:23:9B:E6:C3:87:35
Authority key identifier: 2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81
Certificate issuer:       /CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581
Certificate serial:       019894B784AE1DC011F6C311A43635816B71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
Manifest number:          12C6
Signing time:             Sun 10 Aug 2025 16:01:51 +0000
Manifest this update:     Sun 10 Aug 2025 16:01:51 +0000
Manifest next update:     Mon 11 Aug 2025 16:01:51 +0000
Files and hashes:         1: LM5dUfp1u7btlipBZu9vhjCgJYE.crl (hash: JZk0HMhKLBHbJWspLT+ruFDLlBYkkeyVTcmjaTQrCRE=)
                          2: gwJ9hMltFlWaOeN-R_fhzG-JI24.roa (hash: wuy2X0I9Yx6e8bAqg0gf/bu0yRoRH3AWoeZNQfjdFoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 16:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:b7:84:ae:1d:c0:11:f6:c3:11:a4:36:35:81:6b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581
        Validity
            Not Before: Aug 10 16:01:51 2025 GMT
            Not After : Aug 11 16:01:51 2025 GMT
        Subject: CN=2faf730141434f89df8d6e860ae3239be6c38735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:31:ca:93:a8:dc:d8:17:76:d8:82:d5:6e:34:
                    c4:ce:48:84:db:9e:ba:da:8e:54:70:a7:23:ee:68:
                    60:e0:cd:23:62:47:c4:8c:d8:16:0e:9d:1a:06:06:
                    72:e3:70:96:68:7a:26:1d:92:6f:9f:2e:dd:70:1a:
                    93:a1:78:07:7a:14:61:ee:41:be:86:eb:55:98:d4:
                    2a:c5:47:a6:cc:b7:88:e4:5a:9e:21:4f:c4:f5:12:
                    8e:e2:fd:70:fd:a5:52:41:96:c7:e6:6c:0d:64:2c:
                    c2:6e:f6:d4:78:72:4e:ea:fd:a1:e1:56:c8:b3:4e:
                    09:d1:40:ad:07:d9:29:0b:19:0e:96:49:40:a6:1a:
                    99:05:59:a5:45:f6:45:11:a3:1b:5d:91:de:ff:5d:
                    29:a3:56:bb:9e:df:7d:33:f4:23:d8:b2:61:2f:b0:
                    e0:44:5a:b0:fb:1c:1d:83:41:85:51:7e:dc:5d:e9:
                    2a:d7:c9:cf:42:4e:f0:05:8f:3c:05:85:47:7c:d8:
                    61:63:72:c2:de:4a:07:1d:44:6e:e4:3e:10:95:dd:
                    fc:c4:c8:6d:60:34:bd:c1:6a:80:c2:87:26:13:fd:
                    1d:b9:06:08:1d:72:3e:85:9c:a4:49:c2:dd:6f:e5:
                    29:9a:b9:c0:33:8b:72:4c:e5:47:b0:e9:0e:ee:e4:
                    d4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:AF:73:01:41:43:4F:89:DF:8D:6E:86:0A:E3:23:9B:E6:C3:87:35
            X509v3 Authority Key Identifier:
                keyid:2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:dc:4e:17:a8:f7:86:fb:c7:ea:b9:21:b2:b2:3e:f3:83:6d:
         3a:75:54:c4:2f:2c:e6:85:1c:3c:c0:63:08:15:50:ee:91:4c:
         2e:1f:20:d3:a6:f5:1d:a9:13:76:49:00:a7:09:6e:13:db:21:
         da:af:dd:58:42:89:29:a9:c7:3c:80:e0:60:77:6e:7d:d9:3d:
         42:48:d5:12:07:3e:28:40:4f:cd:bc:2b:58:3a:f5:1e:13:4c:
         8d:dc:19:45:e3:ac:a7:da:12:08:43:51:c2:6a:7d:10:35:58:
         0e:99:b1:11:cd:92:73:d7:19:ff:43:4f:0b:8b:d2:d2:81:e7:
         3a:35:45:30:6e:25:a9:64:44:29:c7:87:a9:2f:8f:d5:b7:d8:
         d4:8b:ef:d5:d9:da:e7:c7:90:08:d5:fb:6a:96:36:fc:04:48:
         e1:a0:68:a8:52:8d:2e:40:9c:39:9a:37:d9:6d:e0:50:5a:4e:
         ad:25:b4:77:2c:28:10:f2:aa:36:80:ae:88:69:10:7b:d2:03:
         4e:1e:e2:18:d6:29:ac:69:34:33:c0:4f:ca:8f:7a:f0:1d:b3:
         85:b5:c2:d0:24:dd:e6:de:46:5b:30:9e:95:d6:c2:c1:a2:9c:
         94:87:6f:e8:62:5c:04:09:e5:d3:02:95:78:aa:96:de:a2:e6:
         b5:7b:76:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:53 2025 by rpki-client