Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
File:                     LPAizk3IHwOzswcwpsI-rzQuzF4.mft (raw, json)
Hash identifier:          ymgh8Wy3rG8w1XIA8UA9AK/yNfn3cKxaXdj0U2A5O/8=
Subject key identifier:   15:AB:2F:08:A3:BE:5E:FF:0D:81:5D:F1:AF:80:6C:05:C0:9F:BE:00
Authority key identifier: 2C:F0:22:CE:4D:C8:1F:03:B3:B3:07:30:A6:C2:3E:AF:34:2E:CC:5E
Certificate issuer:       /CN=2cf022ce4dc81f03b3b30730a6c23eaf342ecc5e
Certificate serial:       0199225559A9BD7195740E77F7A46D59739E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
Manifest number:          0B92
Signing time:             Sun 07 Sep 2025 04:00:42 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:42 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:42 +0000
Files and hashes:         1: LPAizk3IHwOzswcwpsI-rzQuzF4.crl (hash: 9+/eufT7Hx4yhHBf3IKqplNa56XnQd26tFFU71DEDUc=)
                          2: SiSRrPcHelaVZsbMdPyYnFpcX7g.roa (hash: MiZDViUeplCOeEov/OOx4T8K/9EA6SimsIwRAIFKwms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:59:a9:bd:71:95:74:0e:77:f7:a4:6d:59:73:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cf022ce4dc81f03b3b30730a6c23eaf342ecc5e
        Validity
            Not Before: Sep  7 04:00:42 2025 GMT
            Not After : Sep  8 04:00:42 2025 GMT
        Subject: CN=15ab2f08a3be5eff0d815df1af806c05c09fbe00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:33:85:a1:1f:34:2e:dd:dd:86:5a:b2:c5:2b:
                    4e:7d:54:a8:c3:28:79:0b:7c:cf:71:8c:02:ad:88:
                    6a:34:19:fb:d5:20:93:eb:19:a4:fc:c2:3b:b6:89:
                    a6:4a:59:2c:57:27:56:23:ef:05:35:f4:17:dc:a5:
                    6c:ac:21:24:37:b1:08:fa:21:80:66:2a:23:09:1d:
                    9f:8b:80:ef:0b:17:57:40:52:07:cf:58:e8:66:32:
                    f4:6f:de:96:5f:55:6e:75:68:1a:14:4e:ab:c2:21:
                    e6:9c:ca:b2:f6:04:a8:6c:39:13:31:4a:50:d9:3a:
                    5e:a0:cc:c6:24:24:98:0d:cd:cc:05:fa:59:19:cf:
                    92:12:26:54:40:1f:20:9e:a2:d0:06:69:26:b9:ca:
                    c1:89:96:74:25:0c:7d:3e:05:66:b9:c8:cb:cb:35:
                    2e:a3:c2:6c:73:14:27:7b:93:a1:12:18:2d:29:1c:
                    4d:42:88:e0:18:2b:19:04:43:64:47:c6:6d:d2:93:
                    7c:2f:14:76:da:28:b7:21:d5:71:62:07:3a:15:17:
                    68:3d:be:ff:d2:fa:10:56:de:09:3c:4e:46:8f:92:
                    9e:cd:18:e7:ca:5a:6b:11:86:83:2f:15:1d:99:bc:
                    b8:34:d9:b7:c5:aa:93:a3:8a:f3:1e:d1:39:12:29:
                    f1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AB:2F:08:A3:BE:5E:FF:0D:81:5D:F1:AF:80:6C:05:C0:9F:BE:00
            X509v3 Authority Key Identifier:
                keyid:2C:F0:22:CE:4D:C8:1F:03:B3:B3:07:30:A6:C2:3E:AF:34:2E:CC:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:31:67:3f:44:24:fa:90:0e:81:75:ee:f8:e4:0f:ff:51:4f:
         cd:6b:62:44:7d:3f:b4:43:49:be:bf:a0:6c:7e:6e:22:a4:19:
         ad:02:0a:05:3f:04:97:af:56:98:fd:d1:78:35:84:1d:37:cf:
         3b:54:12:43:32:dd:9a:91:8c:d8:f0:b2:27:ef:dd:9c:ac:5b:
         48:cb:54:9d:6b:65:d5:9a:e9:d5:57:eb:db:51:d7:39:f9:2b:
         9e:45:14:54:54:2f:bc:f1:43:e6:8c:3e:f9:d3:23:4c:4b:21:
         bd:a2:65:ad:dd:c1:c9:9d:b9:a0:1a:b1:8f:4a:c9:cd:e0:66:
         5c:2a:12:13:4f:2c:37:c5:0b:fb:a4:f4:18:aa:1f:82:97:51:
         4f:a6:ed:f0:76:e1:ce:48:7f:5c:71:ba:2b:cb:39:fe:2b:65:
         e5:46:ab:af:ed:37:da:bf:e3:9c:cb:24:14:ae:5b:e8:76:e4:
         57:4d:2b:fb:88:da:c3:52:f7:93:e2:d0:0a:ff:a5:ef:9b:c6:
         a0:0a:eb:c2:9c:a3:25:ad:1b:a8:ce:9b:3e:46:3c:9c:53:4d:
         f1:64:07:06:fe:6d:00:6e:1b:55:65:90:07:2c:53:08:c2:46:
         20:21:ed:a9:8c:44:b3:ac:10:83:22:eb:1b:72:0c:c5:0e:4e:
         36:03:1f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:41:44 2025 by rpki-client