Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
File:                     lmbCOPf_2s8VyALjILUuCYCGnOw.mft (raw, json)
Hash identifier:          W760BGI1uY8pwQf4XN9UjPmptttvRHLl1ekXW4vGSOE=
Subject key identifier:   31:E0:2A:B4:81:5E:55:53:85:00:B9:0B:3F:0C:91:1E:CD:8A:36:D6
Authority key identifier: 96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC
Certificate issuer:       /CN=9666c238f7ffdacf15c802e320b52e0980869cec
Certificate serial:       0198D583F0283EE45EE0A8347F89426C5CA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
Manifest number:          0F88
Signing time:             Sat 23 Aug 2025 06:00:50 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:50 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:50 +0000
Files and hashes:         1: jlwHUlpX8poK-lsEjw4bFjVjclo.roa (hash: 7wHJRVYqlI2qLXTgACst4p/Vf4MlPLZtc3YhuGhcwsY=)
                          2: lmbCOPf_2s8VyALjILUuCYCGnOw.crl (hash: UBrX2cz0eZs04KqHR6blhi9Gfbpf8y0TVCQjF1764zk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:f0:28:3e:e4:5e:e0:a8:34:7f:89:42:6c:5c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9666c238f7ffdacf15c802e320b52e0980869cec
        Validity
            Not Before: Aug 23 06:00:50 2025 GMT
            Not After : Aug 24 06:00:50 2025 GMT
        Subject: CN=31e02ab4815e55538500b90b3f0c911ecd8a36d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:da:68:79:5c:c2:f6:b1:36:f9:a3:c2:ef:87:
                    13:9a:ee:79:14:79:a3:32:60:14:d9:8a:7a:cf:ad:
                    a1:c0:eb:a4:fa:7f:20:59:a7:c5:8b:19:3f:e2:9c:
                    5d:9f:4a:c5:6d:ce:6b:91:14:74:da:e5:d3:a1:5a:
                    ee:fb:46:35:26:78:bd:df:92:51:ed:28:df:fe:a5:
                    74:52:3a:c2:d7:16:69:07:8f:dc:16:90:d0:58:65:
                    0d:c0:e7:76:54:fa:47:bd:7d:62:ba:55:d6:bd:10:
                    42:3c:b3:50:43:67:e7:df:a3:a9:e4:c3:38:1f:56:
                    96:d0:2f:83:1a:4d:d1:eb:5c:8f:28:91:e8:d9:e5:
                    0e:99:bf:c7:a6:e2:29:7a:82:f5:92:54:4a:cd:17:
                    bd:55:37:80:db:2f:b0:d9:0c:20:da:73:55:4a:0b:
                    93:52:ad:ca:a1:54:d3:50:0d:ea:c8:7a:f1:1d:c0:
                    77:8f:78:14:35:7e:48:80:ed:47:1b:6b:5c:26:ed:
                    02:0f:d9:6b:dc:74:fa:cc:16:81:1d:bd:2c:40:ee:
                    9d:9c:06:8c:9a:bc:55:a2:4c:70:83:80:de:37:a5:
                    96:1b:c1:ce:01:b1:04:bb:52:8c:d2:02:b9:5d:55:
                    e7:00:84:73:1f:5e:a1:ee:24:0c:8a:6d:f8:aa:fd:
                    68:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E0:2A:B4:81:5E:55:53:85:00:B9:0B:3F:0C:91:1E:CD:8A:36:D6
            X509v3 Authority Key Identifier:
                keyid:96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:90:21:e7:4d:7f:57:cd:e0:68:7d:05:f2:58:9c:ca:a6:14:
         ff:4c:8d:56:a3:ee:4a:59:36:a9:bf:1c:a9:c0:ec:ab:99:0a:
         fe:e8:d5:35:fc:f8:10:34:88:15:6e:24:67:39:e8:1c:ab:bc:
         dc:c4:c3:70:5b:e4:70:08:ea:46:14:ce:c5:ad:ba:2b:b6:58:
         1f:37:5c:2d:8e:c5:ae:41:18:cb:b8:2b:92:cb:22:d5:c8:aa:
         f7:7d:c2:38:93:4e:01:b0:29:b7:07:aa:a5:f4:94:f1:1b:5e:
         0a:4e:3f:4c:6f:a8:8d:e4:2d:a9:d2:1a:45:83:f7:1b:83:f8:
         11:52:80:9a:c9:4a:a1:77:2d:3a:e7:47:bf:49:be:73:53:eb:
         5b:02:ca:c6:d8:b3:2e:16:b6:e1:22:fb:99:f6:98:12:97:0c:
         2a:d4:2f:9c:c4:f3:f0:02:e7:11:7a:e4:7c:bd:da:6f:29:57:
         65:6c:e5:09:af:86:77:d7:6b:64:31:07:ef:0f:3d:cf:d6:5d:
         5b:fa:7b:8f:04:74:90:73:a2:fd:a6:7d:74:5a:29:33:e2:d9:
         d5:df:a9:e0:f3:76:c8:da:55:3b:f3:2e:f2:92:aa:2c:81:c9:
         56:cd:95:60:6f:04:f1:ab:02:c3:90:04:b5:62:00:bc:dd:f1:
         13:46:ea:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:50:49 2025 by rpki-client