Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
File:                     LG88xdeFlC5gSAk8dDOXOusV_iI.mft (raw, json)
Hash identifier:          RaAliVvzHnBUfQ8ZyDm2cxCJ5AnMtGxqWKvBBd6oq6E=
Subject key identifier:   E0:FA:90:1E:EC:52:6B:38:BC:57:8F:15:87:FA:97:B6:FD:94:E9:44
Authority key identifier: 2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22
Certificate issuer:       /CN=2c6f3cc5d785942e6048093c7433973aeb15fe22
Certificate serial:       0199FBEB62B7EEBF9F357A9EF19009CF58CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 10:02:11 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:11 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:11 +0000
Files and hashes:         1: LG88xdeFlC5gSAk8dDOXOusV_iI.crl (hash: SB54u7/Q/1Ddn6LJ1WPZfeKSwVtBJmYntNFYcQ2FdF8=)
                          2: r-LdmNgDJxor_chtzxn23ViAn4E.roa (hash: MPImeKuP5zzvcwvgc9vgO37r54W5h9GJtWUTmdVepC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:62:b7:ee:bf:9f:35:7a:9e:f1:90:09:cf:58:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c6f3cc5d785942e6048093c7433973aeb15fe22
        Validity
            Not Before: Oct 19 10:02:11 2025 GMT
            Not After : Oct 20 10:02:11 2025 GMT
        Subject: CN=e0fa901eec526b38bc578f1587fa97b6fd94e944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:19:eb:a2:86:62:19:29:55:70:a6:23:77:5e:
                    42:a2:95:0d:07:ce:ae:d8:24:8f:e9:b4:c8:e8:ab:
                    21:43:a8:ce:d0:60:7f:36:1c:0a:58:57:21:a3:5c:
                    7e:7a:a9:1a:7b:ce:42:33:6e:2f:a4:b5:a9:1a:6d:
                    ed:92:7e:61:a8:9f:14:d5:8c:78:3e:13:21:13:3c:
                    ff:ec:42:18:db:91:26:e8:4b:f0:be:fd:2f:a2:ae:
                    fe:4e:95:d5:8e:21:55:29:7f:e4:c6:47:1e:b7:0a:
                    a9:fe:08:eb:d2:b7:46:99:eb:d6:62:05:cc:39:d9:
                    db:d2:98:4a:71:42:00:19:e5:76:55:d5:9d:25:08:
                    c5:8f:fa:a6:ca:8f:5a:e5:e8:53:01:69:c6:23:cb:
                    ce:5b:9a:d9:5d:ea:fe:60:7f:d9:7f:17:14:17:68:
                    cb:59:a4:de:53:39:8b:e4:b8:15:ba:d9:57:9a:35:
                    0d:5d:58:be:73:db:dc:55:47:e9:5f:4e:b3:12:4b:
                    b5:02:4d:80:f2:c1:87:ac:f4:3e:2f:be:02:29:ee:
                    76:7e:7d:92:d8:43:7e:59:86:9c:86:be:1a:7e:9c:
                    3e:bf:0a:40:48:16:74:e4:32:b3:18:a0:bc:5f:95:
                    64:6b:15:70:6a:ad:14:ae:e5:00:cc:71:cb:db:ea:
                    59:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FA:90:1E:EC:52:6B:38:BC:57:8F:15:87:FA:97:B6:FD:94:E9:44
            X509v3 Authority Key Identifier:
                keyid:2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:25:e3:1e:b6:98:02:4a:22:47:9f:cb:84:a7:37:8d:81:09:
         14:6e:88:8a:fc:a4:34:6c:6f:b3:d3:94:21:3b:b9:8c:d9:6e:
         be:47:31:44:58:67:1d:36:7d:00:f9:e7:2e:2e:f9:19:da:36:
         a3:07:a8:3c:06:9a:61:f1:ec:a3:cd:38:d1:d3:76:10:a0:c0:
         89:7f:e9:cf:f7:e2:be:f0:93:e2:ae:09:9a:25:22:d7:c4:1b:
         fd:59:ac:20:5e:17:a0:8d:3b:01:8f:a4:51:94:74:48:8e:a9:
         dd:17:10:85:f9:9d:52:c7:65:a9:8f:4d:e1:d3:91:3d:66:e2:
         00:d7:c1:1a:4c:e1:28:0c:82:33:c9:59:3c:a3:a0:b4:3f:8d:
         bb:c0:c2:07:01:33:06:bc:79:96:40:74:08:b4:70:f8:fa:94:
         bf:fb:8c:2b:ac:fe:88:88:43:86:54:31:ff:3e:3c:16:e8:98:
         49:f0:7c:de:e6:26:78:5a:64:84:d0:ab:3d:2f:49:52:7d:b1:
         23:89:2d:88:cd:62:50:98:5b:cf:af:a5:08:38:a9:7b:da:b5:
         2d:53:95:09:0c:ea:b8:69:7d:19:62:92:3a:41:35:cf:cb:79:
         f0:b0:5c:88:b3:01:cb:fe:89:f9:b7:7d:73:95:98:03:38:d0:
         dc:30:39:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:43 2025 by rpki-client