Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
File:                     LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft (raw, json)
Hash identifier:          vt/TxmxDhnJY7IRLvzSk33dQHj+EmItVjcJr0ZYZmEk=
Subject key identifier:   39:51:9A:E2:2F:DB:12:A6:EC:D2:DB:52:E2:40:48:2C:1F:B6:AA:04
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Certificate issuer:       /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial:       0199FC215DC51C301A8400489CECD7B6C67C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
Manifest number:          0784
Signing time:             Sun 19 Oct 2025 11:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:09 +0000
Files and hashes:         1: 86xyLg9Vhu1lk5RReT6Rdf_tmoI.roa (hash: j1UEYdI/3BGkPHWxLGmlianOUX6y8XMwomdD1NaeQqE=)
                          2: DNGDsibsMhX2Jm35ON8Z46A3KTk.roa (hash: IiQeZ36+XfzMEhi+j/AEKPMJtu/iUB+BlQw1Cz0Efws=)
                          3: ISe6Pp3VA_kxRdnQPPWGbrrMrrw.roa (hash: jRDpIWsPHeWViUOgK2ZXMO2/p/iubNFjVCoGO2Bmfv0=)
                          4: LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl (hash: pQNwE53GafGDFH+xiM7+h3FTjWWRarwqFHmzs5nYzt8=)
                          5: aEkNJUT61sGLTRPZbM8A8m6bdBA.roa (hash: Oa5uK8ZTSu+K2eTr8GSg09GYxr4c/ZbA9ZN9SGGpyMM=)
                          6: jjSMkguCrtN8dke8B6BypY8W9bE.roa (hash: FKDJSDKH8RGck3prDQ6XfAn1r+nBQFd0Ov1wTU/64lk=)
                          7: jvqaPKegN_TBTkX1iGxxtfLozMg.roa (hash: XuER/cHOoxfeKVPHA4CmD36sE1MXBYBHja2ydtJkaoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:5d:c5:1c:30:1a:84:00:48:9c:ec:d7:b6:c6:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
        Validity
            Not Before: Oct 19 11:01:09 2025 GMT
            Not After : Oct 20 11:01:09 2025 GMT
        Subject: CN=39519ae22fdb12a6ecd2db52e240482c1fb6aa04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:91:64:ef:46:33:ea:59:3a:02:a7:13:85:d5:
                    38:83:ff:3c:46:39:f6:4f:8c:e5:81:8a:0a:5b:9c:
                    6a:ec:86:d4:50:a4:12:e1:e0:82:7e:bd:76:c1:24:
                    69:77:01:fd:0f:fc:7a:6e:a4:7b:f2:42:70:5d:26:
                    12:6b:9e:c1:09:74:1e:4c:ef:8e:4c:41:9c:8c:e3:
                    bf:a0:ea:3e:b5:b3:09:2b:86:e6:af:88:0c:21:fd:
                    1f:30:47:01:3b:7a:20:83:11:ae:8d:9c:de:b2:de:
                    3f:46:3f:45:f4:c9:c2:06:d2:22:50:66:38:04:5c:
                    c3:be:21:12:21:fe:4e:d9:ba:13:f4:76:09:e2:96:
                    7b:19:f6:b9:5f:fe:6c:4f:89:dd:a7:f9:01:fe:ec:
                    f5:7a:fd:60:1f:4d:73:4e:f1:30:01:39:51:32:98:
                    54:db:36:11:75:29:f7:42:be:5f:7a:80:07:ea:d0:
                    ca:d3:17:f3:d9:d2:6b:e8:d5:24:a1:fa:6c:86:a8:
                    6f:34:ea:70:d7:95:dc:e9:57:42:cd:af:c3:fb:c7:
                    2f:d9:28:21:d6:28:d6:fb:d4:98:aa:c4:94:1c:f5:
                    56:24:6a:48:96:c3:b1:e9:55:77:87:48:89:0a:1b:
                    33:ae:71:c3:14:f4:3d:85:26:7e:86:77:0c:f2:23:
                    fe:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:51:9A:E2:2F:DB:12:A6:EC:D2:DB:52:E2:40:48:2C:1F:B6:AA:04
            X509v3 Authority Key Identifier:
                keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:4c:20:32:30:f4:62:92:df:8e:db:75:d1:dc:f0:1a:7d:a9:
         c3:38:72:58:67:05:a5:dc:28:87:94:1b:d3:9f:a0:5c:70:06:
         3d:ae:cf:4c:58:5c:6b:00:ef:15:9a:1c:1d:84:ce:09:38:49:
         a8:1c:e8:83:2c:76:a0:50:da:4d:03:26:b1:ea:eb:79:ae:89:
         95:14:0d:75:0d:c7:40:f0:4b:c3:d5:1b:84:50:9e:22:a1:2c:
         f2:c3:86:d2:ae:eb:b4:99:df:bf:00:9d:4d:7e:b5:14:3e:0d:
         8c:10:4d:bf:5f:5d:26:e5:b6:f3:b7:08:f8:ec:ad:1e:dd:99:
         13:e0:44:ab:7b:fc:ee:f8:32:6c:e8:71:5a:b3:61:22:ef:4c:
         de:09:0e:b1:54:cd:bc:d4:98:64:cb:51:17:d7:13:ba:3f:41:
         15:4c:78:8d:77:5b:0a:d7:74:aa:f4:41:ff:a1:eb:31:a6:d5:
         a2:40:14:aa:76:04:b1:95:6a:28:05:05:cd:99:b0:74:50:7a:
         37:1c:28:58:ce:08:55:88:e2:bc:06:3a:52:1b:3e:91:e4:f7:
         d5:db:67:de:00:22:c0:b5:9f:93:3d:a7:6b:6c:38:5a:83:ce:
         d6:6d:34:bc:41:29:36:3c:c7:c4:b4:45:8d:4c:23:7f:c6:f5:
         03:de:1b:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IV3FHDAahABInOzXtsZ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMGE5MzMzZjkzY2NhNTQ0ZmRhYmUyZWE3YTY3MzhhNTRh
Zjc1OWUwHhcNMjUxMDE5MTEwMTA5WhcNMjUxMDIwMTEwMTA5WjAzMTEwLwYDVQQD
EygzOTUxOWFlMjJmZGIxMmE2ZWNkMmRiNTJlMjQwNDgyYzFmYjZhYTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZFk70Yz6lk6AqcThdU4g/88Rjn2
T4zlgYoKW5xq7IbUUKQS4eCCfr12wSRpdwH9D/x6bqR78kJwXSYSa57BCXQeTO+O
TEGcjOO/oOo+tbMJK4bmr4gMIf0fMEcBO3oggxGujZzest4/Rj9F9MnCBtIiUGY4
BFzDviESIf5O2boT9HYJ4pZ7Gfa5X/5sT4ndp/kB/uz1ev1gH01zTvEwATlRMphU
2zYRdSn3Qr5feoAH6tDK0xfz2dJr6NUkofpshqhvNOpw15Xc6VdCza/D+8cv2Sgh
1ijW+9SYqsSUHPVWJGpIlsOx6VV3h0iJChszrnHDFPQ9hSZ+hncM8iP+3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlRmuIv2xKm7NLbUuJASCwftqoEMB8GA1UdIwQY
MBaAFC4KkzP5PMpUT9q+Lqemc4pUr3WeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEt
MGEwYWFlYWVlNGYxLzEvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEtMGEwYWFlYWVlNGYx
LzEvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUwgMjD0
YpLfjtt10dzwGn2pwzhyWGcFpdwoh5Qb05+gXHAGPa7PTFhcawDvFZocHYTOCThJ
qBzogyx2oFDaTQMmserrea6JlRQNdQ3HQPBLw9UbhFCeIqEs8sOG0q7rtJnfvwCd
TX61FD4NjBBNv19dJuW287cI+OytHt2ZE+BEq3v87vgybOhxWrNhIu9M3gkOsVTN
vNSYZMtRF9cTuj9BFUx4jXdbCtd0qvRB/6HrMabVokAUqnYEsZVqKAUFzZmwdFB6
NxwoWM4IVYjivAY6Uhs+keT31dtn3gAiwLWfkz2na2w4WoPO1m00vEEpNjzHxLRF
jUwjf8b1A94bpw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:04:53 2025 by rpki-client