Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
File:                     Lz6vTsdU9KDj2EyiU61AbunH3hU.mft (raw, json)
Hash identifier:          ypRDSU2bLBiZtWc9s18pbGZ7drY4ZiYdlIA5fPp9HQc=
Subject key identifier:   09:68:64:D2:DE:DF:88:BC:E8:E5:0C:34:59:EC:5C:E6:2B:41:BD:30
Authority key identifier: 2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
Certificate issuer:       /CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Certificate serial:       0198D515A82ED8C38857E8DC0FE75CB54F00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
Manifest number:          12C6
Signing time:             Sat 23 Aug 2025 04:00:22 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:22 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:22 +0000
Files and hashes:         1: GGXhG4jYLlNwNhb_4jLsATV3sZ4.roa (hash: coSPb15gvXo5/kLV6jjcSbTa8zuHjiQZwBsQ1ZTodzg=)
                          2: Lz6vTsdU9KDj2EyiU61AbunH3hU.crl (hash: FoYGT1/9fhFXxQmyn96K9dGV/4fSvFRmdGmd/USIicU=)
                          3: QVhK2fvbKpXcmrjp7H6z_EkkVRQ.roa (hash: OsX42YWLb/xupxzQu7af5C3oGi/EIsV+i9iPTy5PezE=)
                          4: hB3vigkP8eta4-eliYNf-rmljCo.roa (hash: Ad45hXwwCx8SopS2sX5MgBOjquXNsIdUCvdaZwsRasc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:a8:2e:d8:c3:88:57:e8:dc:0f:e7:5c:b5:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
        Validity
            Not Before: Aug 23 04:00:22 2025 GMT
            Not After : Aug 24 04:00:22 2025 GMT
        Subject: CN=096864d2dedf88bce8e50c3459ec5ce62b41bd30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ed:50:ca:e9:fe:5f:b5:5d:7d:12:40:b6:27:
                    52:7b:82:80:30:f3:f5:cc:47:b1:60:28:25:d9:d0:
                    6f:14:14:7d:cb:16:3d:ad:6c:15:30:3d:d3:d3:03:
                    47:b4:58:03:13:fd:21:3e:b6:f0:e6:d1:11:5e:bc:
                    37:cf:57:03:3e:9f:c4:4a:79:16:a9:d5:3b:6f:2a:
                    9f:95:09:06:3d:72:1a:38:88:fb:aa:c4:92:8f:a1:
                    2b:c9:03:a9:e3:92:d5:96:2a:a7:12:31:37:c6:f6:
                    bd:ce:92:46:6f:dd:0b:af:c2:66:0f:ce:7c:49:5d:
                    dc:39:e9:c8:6d:5e:8a:af:a9:83:25:81:21:9b:0c:
                    5b:bd:ec:10:90:8d:4b:29:c6:78:c5:7e:ee:a3:41:
                    96:aa:6e:7d:d8:be:90:65:88:f1:8a:a3:49:df:51:
                    73:31:c3:e0:fc:ba:97:77:3d:eb:da:86:57:8c:74:
                    df:6f:1a:32:e2:9f:23:e5:bb:e9:c7:a8:08:6b:cf:
                    3d:5c:a5:bb:57:c7:55:ad:90:30:5c:63:30:9a:45:
                    7b:a4:b5:7d:81:81:1e:90:83:90:cd:ef:1a:f4:3b:
                    7b:99:a5:f8:75:c7:1d:e9:87:92:b3:5c:ce:a9:2b:
                    6e:38:a7:94:5d:78:02:18:4c:8d:75:d9:53:b4:1e:
                    8d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:68:64:D2:DE:DF:88:BC:E8:E5:0C:34:59:EC:5C:E6:2B:41:BD:30
            X509v3 Authority Key Identifier:
                keyid:2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:b8:9c:ca:a2:f2:67:07:7e:a9:59:19:5d:55:41:24:98:ab:
         7a:78:d0:b2:8f:fe:55:90:21:34:31:fd:7c:9b:81:70:55:5b:
         58:8c:0d:3f:c0:0e:aa:42:a9:e8:23:9d:76:c2:3d:7c:56:8b:
         62:9f:46:05:c4:77:df:61:ed:d7:eb:a2:a0:9f:d8:ef:73:47:
         6d:6d:0f:29:15:d5:18:d9:ed:df:b7:08:27:9f:69:1d:8b:e3:
         2b:66:19:c8:a2:52:c1:7a:c9:d3:e2:3b:94:fa:f5:f8:ca:a2:
         eb:6c:f7:a4:da:60:12:5c:3f:71:86:34:c8:3f:f6:24:3d:eb:
         e1:e7:8b:04:7f:0f:02:e5:f2:99:6c:0b:cf:5a:2a:47:6f:2a:
         b0:2e:8a:93:2b:9d:46:69:92:67:3d:52:5b:77:76:b4:4b:d7:
         a0:b9:00:ed:78:6a:6b:ba:c6:84:64:ca:5e:0a:f5:16:e0:5a:
         97:3e:f3:b1:4f:e4:9c:72:a0:c0:ac:4e:83:b0:4d:63:76:d1:
         8a:68:eb:10:59:e5:9c:af:51:3f:72:f6:d1:d4:8e:9f:70:02:
         a4:4b:0e:ce:37:e5:69:00:71:ce:74:5c:35:08:81:32:fd:c3:
         30:86:1a:2d:3a:4a:fe:2f:20:62:8d:83:59:ba:2f:6c:a2:10:
         7f:fd:c3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:39:57 2025 by rpki-client