Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
File:                     lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft (raw, json)
Hash identifier:          Sspv8ktHgs/LWBY6xlQdY4gv4P664wyZpSi7hjhnJyU=
Subject key identifier:   3C:13:DB:F9:D9:BE:A5:69:15:E9:A3:C9:53:F6:B1:3B:A6:EE:9E:95
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Certificate issuer:       /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial:       019844AD0725E73923CA67614162E2109FB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
Manifest number:          12D2
Signing time:             Sat 26 Jul 2025 03:00:46 +0000
Manifest this update:     Sat 26 Jul 2025 03:00:46 +0000
Manifest next update:     Sun 27 Jul 2025 03:00:46 +0000
Files and hashes:         1: 2nRmCt4bdl4doXvTYT8t5207Jd4.roa (hash: 0oBN6/6j9IUQgMFBTfG4NJAPzy3oRpmBgYNyWcNrcYI=)
                          2: 6uBRMAdPwa-lKO2ylO9DlsGgsHY.roa (hash: +m2JD+JFXF9SBNg+lpjDT6mDr6YnDMqmBejWjKgStAQ=)
                          3: CtTo5i2NA71eUIhIXr5r4nn6cMM.roa (hash: K/qpGBEEAzU0t+PU2uNHZkV5kXy899JTTUzqneW2S8k=)
                          4: VRYfwJddtKzQsHE8MbAEFYO6ZHo.roa (hash: EYXXmNlMh3UrU0hKdU6hQ+CFn2MC63mGZvBuDrRNCLw=)
                          5: aQ92mv4OX0TrGXRhoE4qVRj9Lwg.roa (hash: Sn7Iy1mnHMRUkHR2YiOO0Z7B9rvVJ+lItzyRTfMio1A=)
                          6: lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl (hash: wEGXzO/TO2jXc/dsxynbGvyZbCaroTjUt8Nlnsesx2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:ad:07:25:e7:39:23:ca:67:61:41:62:e2:10:9f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
        Validity
            Not Before: Jul 26 03:00:46 2025 GMT
            Not After : Jul 27 03:00:46 2025 GMT
        Subject: CN=3c13dbf9d9bea56915e9a3c953f6b13ba6ee9e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:69:23:f3:a0:dd:fb:95:f6:53:36:0b:ce:c7:
                    1e:d3:23:f0:c4:58:53:50:a0:23:03:4a:1e:23:f2:
                    90:40:14:e6:3b:fd:a4:a6:65:82:ff:cb:84:65:e3:
                    a1:14:17:cd:e9:85:7d:95:7e:ed:13:64:47:7e:d3:
                    ed:12:dc:b1:60:32:89:42:15:a4:af:0e:52:25:48:
                    be:45:79:7c:35:83:69:ae:a1:e9:3f:34:be:4f:e8:
                    68:a9:8c:f1:6b:20:d7:ae:e2:23:4b:40:07:00:d9:
                    0b:46:53:63:94:c2:e6:cc:4c:de:a7:59:b2:0e:03:
                    04:37:12:b3:87:9f:70:27:48:3d:63:60:82:9a:78:
                    e8:72:a6:39:58:61:a4:b8:41:e6:c7:ed:db:1c:14:
                    63:52:a6:59:c6:32:8d:68:07:98:bf:37:7f:68:05:
                    b4:f9:45:69:d3:8e:c6:04:49:e9:fd:0b:8e:01:42:
                    de:5a:f7:86:31:a8:1d:44:bd:45:c6:72:76:6b:25:
                    9d:7c:83:cf:70:a9:23:c8:45:8e:f1:bf:58:9d:8e:
                    06:d3:fb:9f:58:a4:93:88:98:fe:2c:81:b5:56:c5:
                    22:6f:ea:a7:79:10:c6:f9:73:c2:17:07:37:f2:9a:
                    95:c0:f9:a7:4a:0a:93:d9:7f:3d:79:4e:2f:f5:d3:
                    79:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:13:DB:F9:D9:BE:A5:69:15:E9:A3:C9:53:F6:B1:3B:A6:EE:9E:95
            X509v3 Authority Key Identifier:
                keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:13:8c:0f:41:a8:3d:5d:34:3e:f9:18:1b:dd:06:9c:10:f8:
         1c:9e:44:d4:f7:c5:20:bc:ec:3b:32:10:ca:b6:dc:99:df:00:
         ea:f3:fe:b2:11:79:de:f2:4b:41:8c:50:c7:7d:87:2e:e0:97:
         73:22:53:f2:18:fc:f8:48:5f:d2:ad:47:a8:52:21:7d:52:68:
         69:a7:85:15:32:ab:c3:7d:40:76:e9:1f:92:cf:a6:bf:41:ba:
         8b:b1:71:10:89:22:66:78:b2:da:42:15:f4:7c:e5:12:ea:ce:
         cf:96:2b:cf:5a:ce:0f:87:37:ed:f1:58:e6:de:d4:e8:df:26:
         01:dd:d8:8c:23:ac:0e:7b:28:e2:c4:17:a8:21:4f:6e:17:18:
         40:fb:fc:1b:4f:51:8e:00:f3:5f:33:84:15:89:0c:e9:62:ca:
         cf:f5:02:95:e7:ef:02:86:af:56:81:03:a0:c0:3e:b4:94:19:
         0d:a8:50:1d:64:c7:0f:7f:56:3a:d8:7c:f8:ce:ce:80:88:7f:
         74:d4:d1:50:b2:22:55:34:f2:76:04:c0:ff:6f:05:07:b9:bc:
         80:46:ff:f3:52:94:78:c4:6f:81:15:07:32:80:5f:47:94:fd:
         ef:ba:4d:34:4d:bb:33:19:72:bd:ab:7a:67:12:1c:4f:24:ff:
         e8:f8:19:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:44:34 2025 by rpki-client