Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
File:                     lzvsM65zjJiViBnGwTuzNe40q0w.mft (raw, json)
Hash identifier:          Lz0rIdPjCEwJqSUoGGOTohMsJSKNeffEZRFrzO7R1vg=
Subject key identifier:   7C:4A:74:0E:72:F0:00:6B:AB:67:41:48:F0:D0:E8:9B:B3:C6:4F:CF
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Certificate issuer:       /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial:       0199FE1016E112B1B02D7F7BFF6487D6774B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
Manifest number:          0D8A
Signing time:             Sun 19 Oct 2025 20:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:31 +0000
Files and hashes:         1: 04AAIWN8CdjN6G01O3D_l5i-Jvk.roa (hash: Mv4GpM35beFDVPlXDkHbY9A9imQnPo9JK9qNbOoM+YU=)
                          2: 9-T9tTEpFFagDxBNkX4Bbf2UnDM.roa (hash: G5P+io7+nluFSPyZaIxd4Qa6X2iCyWaqgj9ylJYiWn8=)
                          3: lzvsM65zjJiViBnGwTuzNe40q0w.crl (hash: zSb/KZIc+exQk3aXrlrgETav/h76zoCJ44RK5MOwsFY=)
                          4: tuawZTEX7vHBTQMJyQg0WD-oypg.roa (hash: IFKGL2W7O7px/Tqsp660BBZcbUWDZWgLugycTaSmqvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:10:16:e1:12:b1:b0:2d:7f:7b:ff:64:87:d6:77:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
        Validity
            Not Before: Oct 19 20:01:31 2025 GMT
            Not After : Oct 20 20:01:31 2025 GMT
        Subject: CN=7c4a740e72f0006bab674148f0d0e89bb3c64fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a7:d1:76:f6:12:77:6d:b1:57:73:8a:96:62:
                    cc:d1:70:8e:d3:ba:e3:db:54:e9:e8:17:d0:1f:74:
                    66:f1:9b:95:16:35:5d:29:da:11:d9:d9:0c:4a:43:
                    89:8d:c6:ae:b0:67:07:fe:f8:c5:33:4d:5f:64:e1:
                    1d:10:ad:76:8e:8b:c5:85:71:cc:1b:e0:c7:3d:6d:
                    c9:e7:04:5c:50:38:e3:34:b1:96:fa:fd:fe:11:5b:
                    e6:b6:08:f2:8c:a7:78:61:36:f0:a4:be:32:60:54:
                    57:f4:64:e7:c2:37:b6:2a:9b:4e:76:a5:0a:d7:0b:
                    96:2e:a2:ef:5e:4e:ed:53:8f:c3:a9:29:a0:df:1a:
                    81:6a:e2:5f:55:5d:cf:f8:5b:c6:a9:b7:b6:d1:9c:
                    dd:51:f3:a5:3c:3b:6c:12:39:cc:44:b8:f7:c8:f6:
                    34:82:88:08:ff:9c:71:88:f0:df:42:31:2e:70:e1:
                    7d:c0:13:bf:9f:2a:79:2b:37:c6:46:87:90:98:18:
                    af:74:bb:9f:16:5d:09:04:5d:b9:24:0d:fe:2b:11:
                    64:e5:b4:5f:d1:9a:81:fa:e4:16:95:f3:8f:79:92:
                    a6:67:e8:1e:da:99:49:d5:de:08:9a:c5:43:8f:5f:
                    12:17:31:2c:28:d8:b7:3c:f0:c5:e4:53:9f:ea:0c:
                    7c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4A:74:0E:72:F0:00:6B:AB:67:41:48:F0:D0:E8:9B:B3:C6:4F:CF
            X509v3 Authority Key Identifier:
                keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:e1:90:05:4e:87:07:12:2a:a9:af:ca:a3:fc:a2:46:33:fa:
         5b:0b:bd:3b:98:55:8b:bf:64:43:51:1c:93:fc:be:af:72:0c:
         78:69:6c:0f:1a:15:ea:62:3a:74:0b:57:2a:3e:55:94:84:3f:
         e8:0b:a2:c5:a5:7b:18:80:3c:64:7c:71:1b:e9:81:3f:64:6b:
         99:ef:42:ab:aa:a8:ca:6e:b3:29:58:e3:2e:f4:24:85:90:23:
         3b:b6:5f:96:22:9f:ff:ea:88:f5:72:ce:45:5b:be:72:fd:7f:
         44:c4:59:8c:91:a3:f8:3b:14:b7:31:a9:21:bc:f6:c5:26:3e:
         64:f8:88:fd:d1:4a:67:66:d7:71:4c:fb:c7:98:05:0c:ce:24:
         40:f4:29:de:da:7d:03:9e:94:03:d9:c5:38:e5:fa:dd:a0:4a:
         61:10:e7:d3:15:bb:8f:ca:0d:af:b5:e1:54:4d:68:81:02:ef:
         36:d6:2a:bd:b7:d7:6e:15:b7:64:68:4f:e5:63:bb:b0:a8:e9:
         e1:ee:47:03:62:7b:33:a3:61:a0:71:6f:5e:fe:63:30:79:47:
         e5:5b:21:8d:e1:cc:d1:ad:13:87:5f:e2:82:e4:27:6f:96:18:
         fe:bb:1c:7e:2d:66:35:4a:ff:b0:45:b7:40:a1:9a:5b:f3:de:
         65:fa:1f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:13:11 2025 by rpki-client