Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
File:                     LPHkHOfCQk-d-I65hGTJsIJr6cE.mft (raw, json)
Hash identifier:          aEqA9m/YH9x5pScS+4+8lAA+pYPCuZ5M/vpT3DD7+58=
Subject key identifier:   F1:18:CE:B9:AB:D0:52:CC:1F:51:87:01:54:A4:63:3F:09:61:D6:FB
Authority key identifier: 2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1
Certificate issuer:       /CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1
Certificate serial:       0199FBEA8F9CF3FC4DD0183112147024C0A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
Manifest number:          1073
Signing time:             Sun 19 Oct 2025 10:01:17 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:17 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:17 +0000
Files and hashes:         1: 21s8U-775BXGrImXYw5behrvCTg.roa (hash: dw6lhA0ynQrPKMXAZyoEl/NZ/Jca/wYUb0RkllkJszc=)
                          2: LPHkHOfCQk-d-I65hGTJsIJr6cE.crl (hash: 3d19yr62FGwrOSvzw4ImX0PeNvrFr+eTOJ/7Q/fcNWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:8f:9c:f3:fc:4d:d0:18:31:12:14:70:24:c0:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1
        Validity
            Not Before: Oct 19 10:01:17 2025 GMT
            Not After : Oct 20 10:01:17 2025 GMT
        Subject: CN=f118ceb9abd052cc1f51870154a4633f0961d6fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f9:0f:91:36:b9:7a:75:2e:2b:51:a1:43:d3:
                    2d:f4:71:29:2a:20:13:eb:73:62:57:c6:18:9d:8b:
                    c0:6f:a2:a6:bb:cd:6a:4a:f1:05:2c:4d:fe:0e:d1:
                    13:d6:24:ce:94:30:7a:42:bf:6c:cf:8f:34:f7:79:
                    89:c4:30:b7:14:59:c1:0b:1e:47:4e:47:ac:c2:09:
                    58:ae:5e:a5:89:84:e1:3f:b5:3e:c0:f0:ce:5c:b3:
                    70:60:94:41:d0:e0:c0:d0:73:61:eb:75:a6:6b:9a:
                    9c:a1:40:47:a3:f3:59:2c:45:b5:64:ca:ef:f8:69:
                    3b:2e:ef:5f:48:c0:06:c6:f2:19:1d:cb:a4:fd:86:
                    ed:e1:00:a8:5f:92:10:18:b2:a1:07:9e:45:8d:e2:
                    18:de:c3:7e:e1:b9:09:62:84:24:4b:13:fc:83:f5:
                    6e:b7:70:9f:4c:33:36:33:5e:9d:5d:dc:d7:62:20:
                    ca:28:4c:54:77:f6:8a:37:59:5d:4e:42:e8:f0:07:
                    a9:13:28:0b:ad:17:56:64:5f:51:7a:9f:90:38:09:
                    97:98:2e:fb:99:ff:23:3d:3c:95:10:ed:ba:50:df:
                    d5:97:ce:4e:4f:9f:ca:cb:74:c2:ef:66:7e:c6:2f:
                    05:eb:a6:ba:fc:02:3e:91:05:13:a3:1b:76:a4:98:
                    3e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:18:CE:B9:AB:D0:52:CC:1F:51:87:01:54:A4:63:3F:09:61:D6:FB
            X509v3 Authority Key Identifier:
                keyid:2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:06:d5:82:c9:e8:7e:94:79:c5:29:bb:0d:dd:b6:70:95:fe:
         84:fa:e2:fc:eb:6e:55:4b:03:db:d9:77:cf:72:5c:c9:5b:73:
         37:da:5b:c1:8f:29:85:97:47:9b:e8:b3:b1:0e:c8:42:83:10:
         c2:06:41:cc:29:0b:b7:48:57:ff:3c:f6:b3:a9:f8:98:d9:3a:
         c4:7d:96:62:8b:db:ac:63:70:33:2e:54:a3:ad:a4:a7:63:65:
         f3:5c:3b:5a:79:7a:76:02:c3:0a:9f:6f:fa:d9:91:16:40:06:
         6f:35:d3:7d:a7:37:e2:91:06:eb:8b:25:c3:9b:00:ba:59:fc:
         6f:19:29:3f:e9:08:53:ea:6f:22:fd:0d:27:32:1c:00:14:f2:
         60:9e:97:30:6f:db:8d:96:ae:f2:61:72:95:75:34:5a:f2:30:
         a9:dc:3a:4b:21:5e:0d:af:3d:e3:87:ea:58:36:e6:90:47:9c:
         76:65:c5:89:d8:55:ac:14:33:cf:60:58:af:72:72:c4:44:8f:
         9e:64:1d:77:d2:32:d9:9c:d1:48:26:9d:4d:bc:14:43:6a:22:
         3d:9e:cb:9e:d4:db:df:78:5c:62:e5:0f:2c:7d:f9:8c:7b:ee:
         c1:ad:50:6a:a4:af:4b:7f:90:11:fb:36:e1:92:40:c6:7b:f6:
         e4:5b:db:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:57 2025 by rpki-client