Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
File:                     LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft (raw, json)
Hash identifier:          yk7tmWouukAmV5ljA7/a34CLZ/YOsd7G8PKO3stL9JY=
Subject key identifier:   90:76:C2:28:7B:97:15:08:50:05:D9:27:D9:84:00:98:40:10:5D:BB
Authority key identifier: 2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27
Certificate issuer:       /CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
Certificate serial:       0198D473F0B248F32D5A8AE74630A6E45FCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 01:03:44 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:44 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:44 +0000
Files and hashes:         1: Jc6JT4xshgQRG7HUAK1HtP9BkTI.roa (hash: hCl5v0Z86Jy7+0GlCW+6oKfv2bUVufzYinCdryb0Gzo=)
                          2: LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl (hash: qsJsvixBBK8vBjBcReuXXbjXFXbz2gas1/n0ZcCAiow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:f0:b2:48:f3:2d:5a:8a:e7:46:30:a6:e4:5f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
        Validity
            Not Before: Aug 23 01:03:44 2025 GMT
            Not After : Aug 24 01:03:44 2025 GMT
        Subject: CN=9076c2287b9715085005d927d984009840105dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:30:08:c9:bb:b5:79:ac:90:5b:d4:af:71:ec:
                    09:19:09:ac:96:a1:c7:dc:f4:cb:22:90:b5:05:72:
                    c6:c1:d0:96:81:12:80:13:30:98:34:78:11:ac:b5:
                    52:16:9b:3e:72:b5:02:55:2b:a3:47:fd:97:cb:71:
                    f3:6d:1c:af:f7:4b:5e:b6:2e:da:5a:96:bc:3b:52:
                    f6:09:ba:3d:5e:2c:00:4d:3a:31:9c:37:5d:f4:98:
                    8a:0a:1f:8f:61:48:c2:88:a8:8e:71:40:db:a0:66:
                    3f:66:19:fe:58:d7:7b:72:de:8f:7c:e6:f1:24:60:
                    84:18:34:62:b4:74:a8:cf:8a:b3:f8:20:68:80:44:
                    16:0f:d7:6b:08:da:f7:dd:1a:37:f3:05:93:52:34:
                    8f:fb:35:67:96:fc:1d:61:31:f2:04:64:e9:f2:0c:
                    bf:99:75:98:d5:98:72:d5:a0:57:db:c1:98:e0:96:
                    f2:21:cf:b3:d9:3d:ea:eb:e6:9e:aa:1e:7a:42:6c:
                    42:7c:b1:92:ad:0b:b8:3b:12:38:bd:ec:4b:c9:cd:
                    48:9d:04:8e:a3:7e:ae:fc:a0:e6:c5:a8:f9:42:bc:
                    ec:f7:f0:b0:d4:12:b7:f2:c1:e1:d9:aa:4a:01:8d:
                    c8:9d:0b:e1:c4:18:71:1a:35:e4:df:2f:30:e8:a8:
                    c1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:76:C2:28:7B:97:15:08:50:05:D9:27:D9:84:00:98:40:10:5D:BB
            X509v3 Authority Key Identifier:
                keyid:2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:0e:4d:7d:cc:82:ca:50:b9:78:96:69:41:a9:86:13:24:dd:
         dc:2e:aa:f0:5e:b1:81:4f:5a:0d:7f:4e:ef:f7:34:fd:8b:ee:
         f9:22:07:f8:52:f7:56:d8:ed:39:81:db:c6:41:c7:00:bb:61:
         5b:55:73:33:44:51:ba:7e:7f:a2:68:87:1d:cd:7d:94:41:e5:
         76:45:6c:20:ce:04:5f:4d:5b:1c:49:87:30:e9:03:9e:09:ef:
         ff:34:33:b6:b8:78:99:4a:03:89:9a:d7:71:81:d9:ba:54:4d:
         af:d8:66:ae:9f:c1:3c:e6:cf:a1:d6:ed:85:11:4b:98:1b:6e:
         ad:a0:17:7a:4d:06:6e:12:0a:c5:49:3d:20:41:c9:8f:2a:49:
         26:af:e8:e4:c1:b8:f9:4c:0f:3a:20:87:f2:a1:c8:22:4e:a4:
         d0:fd:76:b1:86:f2:ff:10:a7:82:d4:9c:cf:44:73:be:c1:39:
         a2:0b:25:fc:7e:be:b9:d8:bf:f9:c3:ce:3e:8d:23:4a:5e:01:
         81:93:1f:f9:6c:d2:b8:40:33:2b:52:45:4d:01:8c:8a:5b:d6:
         e5:1b:c8:bd:9e:1a:42:84:29:19:0a:af:53:fb:6b:9b:64:05:
         37:b9:a9:6b:21:e5:b6:03:60:e5:0d:e4:fb:b2:b2:18:2f:d3:
         75:54:38:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc/CySPMtWornRjCm5F/LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkYzljYjUzMDJkOGQxM2ZlOTFlODBmNWNiZDFmYmFjYmMw
MTQ4MjcwHhcNMjUwODIzMDEwMzQ0WhcNMjUwODI0MDEwMzQ0WjAzMTEwLwYDVQQD
Eyg5MDc2YzIyODdiOTcxNTA4NTAwNWQ5MjdkOTg0MDA5ODQwMTA1ZGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjAIybu1eayQW9SvcewJGQmslqHH
3PTLIpC1BXLGwdCWgRKAEzCYNHgRrLVSFps+crUCVSujR/2Xy3HzbRyv90teti7a
Wpa8O1L2Cbo9XiwATToxnDdd9JiKCh+PYUjCiKiOcUDboGY/Zhn+WNd7ct6PfObx
JGCEGDRitHSoz4qz+CBogEQWD9drCNr33Ro38wWTUjSP+zVnlvwdYTHyBGTp8gy/
mXWY1Zhy1aBX28GY4JbyIc+z2T3q6+aeqh56QmxCfLGSrQu4OxI4vexLyc1InQSO
o36u/KDmxaj5Qrzs9/Cw1BK38sHh2apKAY3InQvhxBhxGjXk3y8w6KjBmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJB2wih7lxUIUAXZJ9mEAJhAEF27MB8GA1UdIwQY
MBaAFC3Jy1MC2NE/6R6A9cvR+6y8AUgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGNuTFV3TFkwVF9wSG9EMXk5SDdyTHdCU0NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jY2M4MDgtMTRiYi00OTRkLTk5Yzgt
MmYxMWE2NTE5NjJiLzEvTGNuTFV3TFkwVF9wSG9EMXk5SDdyTHdCU0NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jY2M4MDgtMTRiYi00OTRkLTk5YzgtMmYxMWE2NTE5NjJi
LzEvTGNuTFV3TFkwVF9wSG9EMXk5SDdyTHdCU0NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQ5NfcyC
ylC5eJZpQamGEyTd3C6q8F6xgU9aDX9O7/c0/Yvu+SIH+FL3VtjtOYHbxkHHALth
W1VzM0RRun5/omiHHc19lEHldkVsIM4EX01bHEmHMOkDngnv/zQztrh4mUoDiZrX
cYHZulRNr9hmrp/BPObPodbthRFLmBturaAXek0GbhIKxUk9IEHJjypJJq/o5MG4
+UwPOiCH8qHIIk6k0P12sYby/xCngtScz0RzvsE5ogsl/H6+udi/+cPOPo0jSl4B
gZMf+WzSuEAzK1JFTQGMilvW5RvIvZ4aQoQpGQqvU/trm2QFN7mpayHltgNg5Q3k
+7KyGC/TdVQ4+A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:20 2025 by rpki-client