Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
File:                     LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft (raw, json)
Hash identifier:          WQIil80ayecjYPtE/Pwf/Ljnal72vp2Dwl29V4yw35g=
Subject key identifier:   88:FA:F9:C2:5B:EF:B2:A7:76:6A:01:C8:EB:34:84:67:86:9E:D9:01
Authority key identifier: 2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF
Certificate issuer:       /CN=2ca61567cb1099855117008fd1d36aa8ada96faf
Certificate serial:       01987C099B26BB2E900C8C83300BAFBAD222
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
Manifest number:          D0
Signing time:             Tue 05 Aug 2025 21:01:00 +0000
Manifest this update:     Tue 05 Aug 2025 21:01:00 +0000
Manifest next update:     Wed 06 Aug 2025 21:01:00 +0000
Files and hashes:         1: 0ibK2rFO285XcmwVBGiaWy0mCcA.roa (hash: oJQ8kk++bxBUXY2O47Q7nsX7PbhR5uG9qTYOOM+oaS4=)
                          2: LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl (hash: KR0Cym97EVTi/ulraZp3hPww1jCpX3lFo/EGNfiJbHc=)
                          3: _GUEYp_ZvXFjTzg6X0GYxguDxqk.roa (hash: ILywVwzLVmDK7onvjHWRnavh4R3aawRApY/DmqcCPJA=)
                          4: s4XGskQFU7_Cf6_mWSLuiAFByjk.roa (hash: nc4Vl3rpM+BRB2fbj+46n9BE/ubeond5FkvagoQcDxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:09:9b:26:bb:2e:90:0c:8c:83:30:0b:af:ba:d2:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ca61567cb1099855117008fd1d36aa8ada96faf
        Validity
            Not Before: Aug  5 21:01:00 2025 GMT
            Not After : Aug  6 21:01:00 2025 GMT
        Subject: CN=88faf9c25befb2a7766a01c8eb348467869ed901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:12:0f:8b:6a:fe:dc:94:46:c4:c0:b6:73:4a:
                    cf:3c:fa:f8:ce:0f:d9:0c:3e:97:a5:f5:99:1f:da:
                    a8:b6:4c:c5:dc:43:0a:0f:9e:80:31:70:d6:e0:fe:
                    77:b3:13:66:d9:64:0d:db:c8:dd:92:44:26:d5:99:
                    91:45:81:6d:b7:8d:3a:15:db:c3:27:8f:f8:d9:34:
                    45:54:17:83:14:05:b0:2d:22:67:36:b3:a0:89:28:
                    e4:11:22:16:51:0b:32:8c:0b:90:be:16:2b:95:79:
                    c9:3b:63:bb:9e:cb:62:e9:28:47:17:2c:7b:cc:27:
                    39:c4:2d:b3:21:38:ca:50:73:1a:14:59:93:67:48:
                    62:f3:e7:42:df:bf:b2:23:18:91:8e:66:97:b7:66:
                    0c:ac:ca:a5:7e:4d:64:1d:76:04:2b:7f:2d:10:42:
                    c2:ab:cd:d0:af:77:9d:5f:f7:83:a0:cf:24:73:63:
                    aa:90:42:c2:2b:31:54:2d:68:a6:f2:56:05:85:e1:
                    5e:1d:58:29:15:b8:13:c8:47:8e:03:4a:b6:ff:29:
                    5f:3b:c3:b6:8d:05:92:41:4b:ad:14:7d:57:05:9c:
                    f7:8f:c6:c6:30:75:2e:5c:e8:f4:2d:fa:14:3b:ef:
                    18:cf:2a:0a:8f:d7:63:27:9a:76:80:9c:79:88:61:
                    4b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FA:F9:C2:5B:EF:B2:A7:76:6A:01:C8:EB:34:84:67:86:9E:D9:01
            X509v3 Authority Key Identifier:
                keyid:2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:aa:b7:79:2a:b0:80:2f:a9:e0:ee:9e:9d:5f:71:43:54:97:
         19:85:59:43:7c:df:fb:57:5d:a3:29:a9:34:58:d2:c4:49:af:
         24:e0:d2:a5:f6:ab:21:ee:21:da:b8:d6:fd:6c:18:1e:bb:08:
         ba:2e:71:83:72:70:bf:58:bc:8d:b7:a9:72:e6:19:79:df:ec:
         e1:b0:b0:79:f8:9a:84:1d:c5:c4:66:a7:49:74:57:5f:38:fc:
         f6:5e:a4:f8:8e:d2:b5:01:b3:f2:b9:fd:88:96:39:2f:f9:8f:
         af:be:7e:01:46:44:aa:fe:f1:5a:6d:79:81:cf:c7:a2:6a:a3:
         72:95:ee:b7:b4:42:d1:c7:5c:e5:48:03:da:38:d8:46:81:a9:
         5d:fa:24:aa:a1:da:20:59:d4:d0:95:a6:ca:fd:58:d2:db:fd:
         8d:62:82:39:94:2b:a3:4b:b9:b9:a7:b4:60:aa:26:cb:88:39:
         ef:d1:82:77:bc:5c:6a:28:8a:7d:f1:e8:13:5d:68:04:1a:44:
         fc:b3:f7:30:ad:ff:26:2e:ed:99:56:8f:e9:61:09:b2:96:b5:
         d7:29:83:4b:fc:f7:fe:e0:94:c9:05:85:bd:fb:61:f6:af:07:
         30:01:a6:a5:3c:d5:05:cd:8a:3c:40:56:13:da:60:a7:7e:ca:
         e0:7d:63:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 03:57:54 2025 by rpki-client