Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
File:                     3LZakO089K4EUlVO40uSqEdtzxA.mft (raw, json)
Hash identifier:          Ya8naAHPshiABAD6hEABxtrcn8ZPU+EYOUdjdySAg4E=
Subject key identifier:   50:82:CA:71:E6:3F:9C:9B:2D:89:21:D0:57:1C:59:DF:BA:A9:E9:38
Authority key identifier: DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
Certificate issuer:       /CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Certificate serial:       0198824281E2A51DF462986BD98DFB3FB0CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
Manifest number:          1630
Signing time:             Thu 07 Aug 2025 02:00:53 +0000
Manifest this update:     Thu 07 Aug 2025 02:00:53 +0000
Manifest next update:     Fri 08 Aug 2025 02:00:53 +0000
Files and hashes:         1: 3LZakO089K4EUlVO40uSqEdtzxA.crl (hash: P6g9xrcMhOyANugbQQCIf+BL+jTFMgrDDhnQwwsIoTI=)
                          2: 4TacCA5fNMvJzrQKHYvZp1FsTCY.roa (hash: PoM3PiM+eiQs0IrTl3gGzaDWCG/B3yTTKS+dLnu4Yd0=)
                          3: 5XSs95Ubgx3AmQjCtcwc9kipgqo.roa (hash: W1QuAOuGtR5IQsNm8mAqSkXh18EH2NzjwhA/lLQEsCs=)
                          4: 7NaNhfKzkHk-4U6P-rr5I2f5Dns.roa (hash: ho2GvZ21Aa+NkGp3FzrcTvxIRbuhiRhcV51nfQsaRvI=)
                          5: RMqD4QZBwk_wzHsp1loeMRU2jMk.roa (hash: nCQ5Eq/Er1do1Gz84LWpqzugPw71HtroPiJZlZhFk8k=)
                          6: naw_j5gKrLLjpLmDjj2VeLVHcW0.roa (hash: 9rsCrKDYxMlNCKWks8aC7H+vNumWPUdz18CO2dwuUHA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:42:81:e2:a5:1d:f4:62:98:6b:d9:8d:fb:3f:b0:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
        Validity
            Not Before: Aug  7 02:00:53 2025 GMT
            Not After : Aug  8 02:00:53 2025 GMT
        Subject: CN=5082ca71e63f9c9b2d8921d0571c59dfbaa9e938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:28:51:c0:fb:49:18:73:2a:02:d6:50:c2:f7:
                    24:8e:25:a6:c6:10:6f:f3:50:a8:19:a8:69:44:3b:
                    98:96:41:66:2f:12:b3:62:50:16:01:2a:8b:52:11:
                    82:8e:7b:34:b3:13:00:c7:99:0d:a0:ee:74:a0:f7:
                    f3:0a:3a:67:e6:f9:70:b0:93:06:19:ae:3e:d2:b2:
                    12:a2:1d:a9:ac:40:68:c9:40:dc:e6:9e:a2:b1:a6:
                    db:ef:e7:68:de:d3:a2:19:7a:91:61:3f:d6:16:dd:
                    90:d1:bb:f4:84:db:8e:a1:de:51:94:9a:49:90:d9:
                    45:49:a9:51:f9:80:af:d6:fc:db:bb:d3:95:cf:d2:
                    d6:e4:90:03:6d:54:d0:c6:74:64:e9:10:4a:e4:e9:
                    7e:ff:6f:8a:49:af:33:ef:9c:ec:73:1b:dd:87:e7:
                    02:7d:38:53:88:58:0c:ca:00:35:80:91:69:9c:0b:
                    6e:c3:d0:7a:88:6b:37:8d:da:35:c5:c9:d9:bc:c7:
                    eb:c0:98:d2:53:76:a9:16:af:a7:86:c4:62:2a:50:
                    24:60:23:99:d8:44:b5:1d:a6:c1:8d:17:6c:e9:0f:
                    45:4e:11:ce:09:cb:a6:d4:f6:44:5d:57:0a:aa:86:
                    fc:07:cc:dc:f1:86:81:3c:fd:57:02:e1:12:b5:9d:
                    c7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:82:CA:71:E6:3F:9C:9B:2D:89:21:D0:57:1C:59:DF:BA:A9:E9:38
            X509v3 Authority Key Identifier:
                keyid:DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:27:62:2f:b0:85:28:3b:1d:87:ac:fe:58:35:18:fb:cd:cc:
         36:a5:39:fc:df:70:12:cf:9b:4a:78:3e:33:93:a3:da:bf:d2:
         fe:49:ed:25:6f:20:25:9d:6f:f6:4a:42:82:9a:02:67:b6:85:
         65:b8:72:90:f7:7e:c2:03:da:cf:d3:ee:de:f0:d1:33:1f:cb:
         c4:2f:21:b5:3d:46:f5:6a:b8:53:53:11:0d:ba:5b:a0:b7:19:
         fa:2d:32:9a:cf:b6:28:5a:cd:85:c8:2d:4f:cb:ca:19:32:91:
         c4:a9:87:e7:57:60:7d:89:84:08:a7:d5:fe:18:ef:c3:f8:db:
         9e:31:cf:90:ad:a0:2a:12:dc:37:fa:43:07:2a:b1:80:38:4b:
         42:11:50:ce:b3:6f:d0:2c:f9:71:47:d2:07:3c:75:f6:85:37:
         bb:ea:f3:c3:a7:3e:b8:20:84:e1:23:92:17:3e:0c:b1:ff:af:
         17:9a:be:00:ec:62:ee:a0:35:82:75:f4:ce:82:4c:f6:ef:4b:
         31:c5:50:70:45:3c:11:18:27:0b:9b:d9:cf:c3:e2:87:fc:12:
         fb:ac:68:fa:ab:17:2a:c4:2b:51:3e:bd:7a:17:ef:ce:6d:c8:
         b1:b2:17:c8:82:e7:db:fd:9d:d5:74:bc:74:c4:af:bd:09:d1:
         f7:44:a8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:57:46 2025 by rpki-client