Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
File:                     LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json)
Hash identifier:          AOF0nYHE6GgLYwxgWI/coaSvNvUrlB1c1EJJ/CIqciM=
Subject key identifier:   AC:EC:86:24:3C:76:72:64:C5:A6:DC:DA:50:A1:4C:10:DC:E2:8D:20
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Certificate issuer:       /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial:       019A01B4F84ADBD21A609A0E6631051731B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
Manifest number:          16ED
Signing time:             Mon 20 Oct 2025 13:00:28 +0000
Manifest this update:     Mon 20 Oct 2025 13:00:28 +0000
Manifest next update:     Tue 21 Oct 2025 13:00:28 +0000
Files and hashes:         1: 9cXZNBVPbFK7YgwhAS48hqVN3Q8.roa (hash: P8nablk4XjPWocUs0+w/NDTZnQaNhHciAel+enfRgUQ=)
                          2: GJ7X3NXNPspZEiv4IaMeRbRsKjQ.roa (hash: +RNCIDZL3jBzsc6WtooEau4eUrswSESksvuz73mPQ2Q=)
                          3: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: d1RYL68bIm5Ef7HsWx5rK6hwdgOfrK6jaDnidABelDQ=)
                          4: g2LuFjEhsXOpJYmb2qeJVNKQyUw.roa (hash: gXxbZRZ22rqSRTpziJlqNBg77T4+7Pe2wPiUn7l87EQ=)
                          5: kEq9Sa-aYq3KR4A40M5VyPd54wg.roa (hash: UxvV1YF4/u8pr981HOY28yhkvm5jpeElKKL/ei/Iusw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:b4:f8:4a:db:d2:1a:60:9a:0e:66:31:05:17:31:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
        Validity
            Not Before: Oct 20 13:00:28 2025 GMT
            Not After : Oct 21 13:00:28 2025 GMT
        Subject: CN=acec86243c767264c5a6dcda50a14c10dce28d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:94:a9:32:db:5d:5c:58:50:e5:d4:e6:75:46:
                    f8:9b:4d:28:b6:87:f6:6e:11:2a:dd:b4:a4:a6:d8:
                    87:a9:d0:b9:e9:4e:bd:4a:b0:07:93:d4:15:37:43:
                    83:f2:6e:ad:53:d7:f6:e8:d9:d9:5b:57:58:0a:76:
                    e5:8b:ea:d9:e0:73:ae:d9:0f:5b:c3:5f:81:e2:9c:
                    93:9e:42:d0:c5:96:ba:ae:61:35:c4:f8:af:49:4c:
                    d1:c9:05:b3:29:7f:9a:de:c9:d2:d1:35:e9:37:3c:
                    3a:26:a2:d7:6a:f2:00:fb:00:b1:38:a9:5f:9e:d1:
                    45:48:ab:5a:48:36:49:1e:b5:97:df:e0:4b:e9:63:
                    b2:dc:66:af:52:69:5b:5a:95:77:90:48:ba:e8:ff:
                    f6:12:5e:69:dd:cc:ff:ef:a1:5f:23:42:8d:bd:0d:
                    69:a6:16:32:69:89:e5:1d:05:e6:4d:80:f3:39:63:
                    ab:aa:20:f8:fd:51:16:b2:72:e5:37:b9:38:37:fc:
                    40:31:3e:04:03:9a:90:c4:99:99:bb:c5:37:d6:9d:
                    75:7b:9f:9f:2a:26:58:17:0d:4b:d9:ec:51:13:0e:
                    6c:3d:ce:ab:50:37:19:a1:38:68:63:3f:45:96:9d:
                    15:0c:2a:90:84:2e:50:6a:1f:b6:a9:d1:98:d1:2a:
                    1b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EC:86:24:3C:76:72:64:C5:A6:DC:DA:50:A1:4C:10:DC:E2:8D:20
            X509v3 Authority Key Identifier:
                keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:84:2d:06:c0:75:75:90:a9:a2:4e:35:52:5d:81:2d:46:58:
         bb:aa:ce:5d:f7:d1:e0:10:a1:48:52:ba:eb:32:f0:0c:fe:75:
         84:55:da:c7:22:6a:8e:fd:9b:d8:04:22:3f:7e:65:70:96:04:
         31:e2:95:26:4b:f4:94:ac:a6:c9:f0:1c:24:f5:f5:35:e0:39:
         c1:24:d2:42:bc:a5:01:07:4c:2a:c9:ec:de:bc:b3:7a:13:4c:
         93:e5:9e:8b:d8:2b:4f:ba:d7:27:c0:05:1c:c9:d1:98:53:33:
         88:f9:9f:5b:8a:09:1a:23:42:d7:84:6d:fb:e2:e7:dd:d8:0e:
         6c:e0:c9:ca:e3:2f:51:c0:34:d1:45:ce:3a:11:1b:24:83:b1:
         0b:f0:81:07:ee:7e:93:22:17:c6:b5:8b:d7:d3:25:67:f2:d9:
         9d:09:32:03:a6:e5:89:bd:7f:87:dd:29:ec:1a:a7:30:25:2f:
         d3:fb:5c:05:52:b2:4b:36:a2:3c:ae:5b:82:a4:dd:53:2c:29:
         d1:83:08:9e:9d:bb:44:c4:30:ef:18:48:e1:91:e8:98:99:92:
         66:c4:44:b7:44:c8:25:ab:4d:45:86:d2:9a:55:b4:0e:38:76:
         cd:2a:2c:ea:61:09:65:4b:03:ce:40:fe:cb:f4:36:47:68:ab:
         46:87:76:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:41:30 2025 by rpki-client