Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
File:                     lmbCOPf_2s8VyALjILUuCYCGnOw.mft (raw, json)
Hash identifier:          TPrOlccDhprAlXS1hAYanj4Y738NJfttOKD8NGECqQo=
Subject key identifier:   7C:C0:2F:2F:B9:37:04:10:D8:3E:FC:1F:39:E6:F6:28:E3:D4:AD:F4
Authority key identifier: 96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC
Certificate issuer:       /CN=9666c238f7ffdacf15c802e320b52e0980869cec
Certificate serial:       0199FEEC0DA414AF40B9094477BC1AFB382F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
Manifest number:          1022
Signing time:             Mon 20 Oct 2025 00:01:46 +0000
Manifest this update:     Mon 20 Oct 2025 00:01:46 +0000
Manifest next update:     Tue 21 Oct 2025 00:01:46 +0000
Files and hashes:         1: jlwHUlpX8poK-lsEjw4bFjVjclo.roa (hash: 7wHJRVYqlI2qLXTgACst4p/Vf4MlPLZtc3YhuGhcwsY=)
                          2: lmbCOPf_2s8VyALjILUuCYCGnOw.crl (hash: 0cek2ry071e9pdUDwWc2kAEetpdolLoIs0d/Ka1q8Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:ec:0d:a4:14:af:40:b9:09:44:77:bc:1a:fb:38:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9666c238f7ffdacf15c802e320b52e0980869cec
        Validity
            Not Before: Oct 20 00:01:46 2025 GMT
            Not After : Oct 21 00:01:46 2025 GMT
        Subject: CN=7cc02f2fb9370410d83efc1f39e6f628e3d4adf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c1:b1:59:c8:dd:d9:6f:ea:bc:03:c1:f4:8f:
                    7b:a9:83:01:d8:d3:38:ee:1f:df:76:ab:a4:f8:ef:
                    2d:e2:84:cf:9e:f3:ad:e5:c5:20:a1:2b:ae:c2:f2:
                    52:6d:85:12:08:84:c3:e1:7d:d3:65:ee:2d:23:94:
                    bb:c8:18:4d:6e:1b:5d:9b:cc:4f:21:b0:cc:14:62:
                    6d:c5:84:17:e9:bb:28:60:1f:ac:12:80:cd:68:b6:
                    0e:ac:37:a5:b2:12:13:d9:6e:d2:2a:e0:2b:11:2d:
                    6a:88:1a:8c:df:ea:74:68:23:b9:98:ba:77:5d:a5:
                    e6:b8:b4:f7:6c:c9:c9:ba:cf:9a:1f:ca:af:be:e6:
                    2d:ff:a3:20:b7:44:fa:20:7e:b2:be:e4:d4:be:0d:
                    29:db:9c:15:33:29:4b:ad:a6:07:07:ed:7f:c1:fd:
                    c6:ff:a1:74:b5:c0:e4:c3:d1:9b:2a:d0:51:d0:5b:
                    a5:fe:6c:de:7e:e4:70:95:55:b5:c7:33:8d:8e:73:
                    77:32:85:ba:34:72:f5:66:fd:3c:1d:2f:08:a2:17:
                    31:f6:6f:c7:9e:ec:9d:8d:00:df:d7:37:a5:a5:d3:
                    b3:e8:5e:32:a7:8b:91:89:e0:e9:0f:71:09:af:5e:
                    70:c9:68:9d:32:54:49:fa:91:4c:eb:52:70:86:68:
                    85:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C0:2F:2F:B9:37:04:10:D8:3E:FC:1F:39:E6:F6:28:E3:D4:AD:F4
            X509v3 Authority Key Identifier:
                keyid:96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:6a:82:55:9b:01:ed:4d:52:b6:f2:12:05:36:e3:90:e0:8f:
         eb:b5:48:e3:66:36:55:3a:48:ed:57:d5:84:3b:65:7b:01:df:
         d2:aa:6f:08:36:4e:15:b1:1b:79:04:da:7b:5f:2e:8a:16:27:
         39:8c:13:a6:8e:16:b7:2e:2e:69:df:12:48:af:51:55:4e:48:
         e1:58:ab:1f:87:26:03:40:ed:83:e4:54:e2:71:de:13:a1:1e:
         b1:cb:46:f1:8c:89:67:53:96:b1:af:5e:de:3f:9a:5e:ea:90:
         83:4e:09:0f:91:39:07:89:93:5d:98:a9:eb:3c:72:f9:df:21:
         92:ff:e4:b9:f7:e3:bc:58:6b:27:b8:48:48:7e:e6:f1:71:75:
         f5:7c:16:5b:13:4b:5e:a2:4e:c4:f1:cc:0f:c1:97:4a:ab:77:
         b6:a7:74:d1:34:26:81:1b:9e:f9:d9:a8:d1:11:72:58:db:09:
         30:7d:55:b2:ef:79:f0:e3:79:27:1d:58:21:60:1c:5d:c0:bb:
         b8:91:37:7b:de:df:27:be:7c:8b:c4:c3:1b:8f:8b:d7:93:02:
         e5:5c:a1:6b:d7:40:c5:54:9a:ed:36:aa:c1:29:70:17:9d:8f:
         32:4e:19:2a:22:56:0e:1e:4d:9a:2b:c0:c3:91:22:54:84:43:
         ce:bd:4c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:43:10 2025 by rpki-client