Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.mft
File:                     LG1GLWWE49of8lFVSjReScatD7E.mft (raw, json)
Hash identifier:          JwRTwWJlRnJjy+eLil0ytqylZJhf0UgKuoRvhmAY3yw=
Subject key identifier:   E1:56:EB:4E:26:30:75:8F:1F:D4:CE:C3:DA:A4:CE:B3:BD:AF:80:6F
Authority key identifier: 2C:6D:46:2D:65:84:E3:DA:1F:F2:51:55:4A:34:5E:49:C6:AD:0F:B1
Certificate issuer:       /CN=2c6d462d6584e3da1ff251554a345e49c6ad0fb1
Certificate serial:       0199FBEB217007367D7D7BDB65BA7A8CFA93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LG1GLWWE49of8lFVSjReScatD7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 10:01:54 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:54 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:54 +0000
Files and hashes:         1: LG1GLWWE49of8lFVSjReScatD7E.crl (hash: Xuf+ywMMKMlmu5P4mfhy8afZT98oxIgvi4uRoGC+Wu8=)
                          2: PlTGp6Ho-NUz3UJ_pTXgK1lVgrA.roa (hash: 9OM5uBqz0hnAImE+ogfgxUlyhO9v7s+esgTavmxFQEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LG1GLWWE49of8lFVSjReScatD7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:21:70:07:36:7d:7d:7b:db:65:ba:7a:8c:fa:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c6d462d6584e3da1ff251554a345e49c6ad0fb1
        Validity
            Not Before: Oct 19 10:01:54 2025 GMT
            Not After : Oct 20 10:01:54 2025 GMT
        Subject: CN=e156eb4e2630758f1fd4cec3daa4ceb3bdaf806f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a2:6b:d0:df:c9:fe:99:b1:aa:4f:ea:c1:93:
                    4b:e2:85:22:66:f7:e3:06:f7:f8:89:b4:b0:2f:57:
                    98:a4:e2:b2:ee:e3:7b:98:fb:ef:8a:d8:0f:42:8d:
                    4c:4f:84:10:4e:7a:ca:6b:88:eb:d7:de:1d:82:66:
                    b6:82:f7:b4:39:64:13:2b:5c:10:dd:5d:dd:87:11:
                    60:92:6b:f5:56:f1:9d:31:fb:72:04:c3:b7:2c:87:
                    ad:ac:32:53:e0:ed:c4:55:3d:1d:bc:a8:9a:c6:ba:
                    f2:2d:69:7b:2d:e9:9a:e9:4b:d8:90:e5:5d:40:1d:
                    f8:20:5e:38:eb:01:eb:e1:bf:7e:08:46:a5:d3:2f:
                    e4:91:66:09:9f:bf:94:80:25:f9:57:1f:4b:63:bc:
                    47:8a:0f:a0:4c:b2:7c:78:fd:3a:bb:d9:4a:48:bd:
                    2b:1e:93:ac:e8:3c:58:58:9f:3f:22:e4:1d:f2:57:
                    fd:a1:bb:b0:bc:17:71:44:f2:0d:2d:a5:c7:7e:24:
                    2d:7e:24:a6:fa:0a:29:56:8a:3e:8b:36:87:88:26:
                    45:62:25:49:ad:06:2e:56:32:d6:b3:a6:f5:3f:82:
                    44:90:1c:66:ab:1d:5b:6b:d7:6b:10:33:48:4a:2e:
                    74:fe:c6:8e:91:fb:09:2b:ed:d1:02:17:e7:84:ce:
                    cb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:56:EB:4E:26:30:75:8F:1F:D4:CE:C3:DA:A4:CE:B3:BD:AF:80:6F
            X509v3 Authority Key Identifier:
                keyid:2C:6D:46:2D:65:84:E3:DA:1F:F2:51:55:4A:34:5E:49:C6:AD:0F:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG1GLWWE49of8lFVSjReScatD7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:15:4d:23:7a:c1:0b:5d:b4:05:d9:ff:f2:f6:29:99:eb:d2:
         f8:f8:5f:a0:7f:5b:59:ff:d6:20:0e:05:9c:08:13:78:de:27:
         09:9b:c3:eb:f4:6d:e6:9d:d1:d2:73:4f:fc:22:ba:7a:99:45:
         36:6f:c6:f8:a0:87:28:20:db:d3:8a:1c:9f:69:bf:7e:49:9e:
         b3:52:cc:69:73:06:4b:33:68:d6:e1:4a:e6:24:fd:7e:e5:81:
         1d:96:65:5e:6a:ca:9b:52:d3:61:37:14:7b:31:ba:c6:82:e4:
         7a:68:e9:00:21:0e:81:4e:d7:f9:55:bd:e6:f6:77:d6:bc:18:
         e6:4f:d2:55:8f:ea:01:8a:11:46:30:04:76:13:be:2a:f7:7c:
         73:be:89:02:99:95:09:77:84:df:e3:4f:0b:69:79:00:21:85:
         e1:13:23:8f:6c:20:83:0a:2a:b9:84:b8:a6:99:0e:87:96:b8:
         46:3f:3a:75:63:4f:d6:c9:e1:91:67:cf:8e:b7:42:05:ad:f6:
         60:b2:94:31:8d:d8:e4:e2:09:08:c3:8b:3d:29:7f:4c:73:e6:
         c0:6c:d4:b5:8e:9c:26:2f:c8:1b:fb:65:10:0b:b4:a5:cd:06:
         13:98:88:54:dd:a3:5a:a9:70:99:a7:c7:66:90:8a:87:97:f6:
         f7:ff:bc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:44 2025 by rpki-client