Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
File:                     lHMg0DCTAXjm987vkdKrh4TT3BY.mft (raw, json)
Hash identifier:          otfN2fF5bqKBczmntgu77VefkZyEVCXW4fKqcia6l1I=
Subject key identifier:   50:FA:62:D3:07:ED:2D:C9:64:E0:68:65:DF:9F:4A:D5:5D:E4:01:9A
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Certificate issuer:       /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial:       0199FD6B1D3383BBE289C4EAF683DAA4279B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
Manifest number:          1310
Signing time:             Sun 19 Oct 2025 17:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:19 +0000
Files and hashes:         1: 5QMHmJgfqvSExR78QZoDl1UWmsA.roa (hash: Dbmsjz6HJzMNQXjckNup+UFifmkcVaFAdGg2/Xlr06g=)
                          2: 9Hm8EAVuf4tqOcHaH0y7y-1Ym9k.roa (hash: FodBXOCVdl5JGOEkTl9E8+4jK0F+A6PAABCoahGBKds=)
                          3: ChcX6dEQMX7PgnkGnKeX9TQTPSU.roa (hash: 9GX5XaBmVeFjM4n7HjAG7e5pB9imRwZnEdAGfd1ulvc=)
                          4: I2s0NE0e0ldLesJa5IwWq_3YoQY.roa (hash: 32nxkp+mnSpxawrjeJdAmkwgRYzly761fgfPTbswaVo=)
                          5: jSjfKvzyOnWZuydcXt3rIa9SA5M.roa (hash: vLtsL1YPKmn6qXZiRbrjcjOEo4/Oi9668rEJ8VN4zCs=)
                          6: lHMg0DCTAXjm987vkdKrh4TT3BY.crl (hash: 4TPoCjoZP10ZJcZ8jHNJAqOJjgka5zoldQpbGJ6JgNk=)
                          7: wV_UPXPoWr2rMigTEJujKEPHkRU.roa (hash: sWrQ1dC0i8v5NdCh/KJb/CYIzz2swLex9WzWGoX8cPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6b:1d:33:83:bb:e2:89:c4:ea:f6:83:da:a4:27:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
        Validity
            Not Before: Oct 19 17:01:19 2025 GMT
            Not After : Oct 20 17:01:19 2025 GMT
        Subject: CN=50fa62d307ed2dc964e06865df9f4ad55de4019a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e6:9c:b5:88:bc:52:a0:c5:63:0c:92:43:03:
                    a4:af:f0:4d:8b:d8:da:92:40:4e:63:71:ee:e2:a2:
                    19:44:c0:c3:26:88:98:3c:09:b5:76:70:d0:d9:88:
                    a7:7e:4f:7f:27:10:1c:10:19:71:ac:19:2d:e9:21:
                    3f:86:00:5e:15:34:23:54:85:87:e1:d1:7c:01:9f:
                    b7:d1:0f:3e:4a:3e:0d:24:22:e1:54:14:38:69:16:
                    08:59:8a:32:e0:9f:f7:a3:5c:d2:2b:82:c1:65:b1:
                    7f:a3:1e:fb:bc:2b:eb:93:50:c8:0e:90:f1:fb:c1:
                    41:48:b3:43:8a:45:f1:1b:b5:3c:07:25:3d:fc:21:
                    95:82:e2:c5:f6:e5:b6:db:e3:0d:2b:2c:ef:31:9b:
                    0a:b3:3d:9e:05:33:1d:1e:6b:5e:05:6e:61:4a:47:
                    77:63:6b:08:6a:c0:c5:1f:56:9d:b3:fa:a3:5a:a2:
                    49:79:f0:8e:ec:0e:81:35:2b:fd:13:e5:b2:ed:25:
                    b9:1b:6d:87:f5:88:ed:db:3c:fd:cd:3c:bd:0b:9c:
                    fa:fa:9c:96:3d:ee:d3:41:e9:96:fb:b7:47:11:90:
                    bf:e5:cc:b9:3c:b7:3a:90:5d:ba:7c:89:26:51:98:
                    10:fd:62:e3:3f:42:9f:a4:66:3f:b0:47:39:66:02:
                    60:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FA:62:D3:07:ED:2D:C9:64:E0:68:65:DF:9F:4A:D5:5D:E4:01:9A
            X509v3 Authority Key Identifier:
                keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:5f:88:5f:f9:09:a3:3a:31:e9:e7:4d:9e:7c:8c:f1:0f:77:
         32:a1:da:b1:31:d1:17:42:a1:f1:06:78:3d:ee:90:0d:14:a5:
         7b:e7:1f:a4:cc:da:91:83:f7:db:3d:f7:23:b1:d8:47:ff:81:
         14:ca:53:67:36:bd:e8:3a:f6:81:b5:00:42:41:42:c7:d6:ce:
         e6:dd:a7:5a:86:28:f8:8e:d4:02:47:c3:81:27:d9:54:e4:c7:
         78:10:5e:64:82:78:39:1c:c5:08:86:ac:b8:aa:72:fa:19:af:
         9e:e3:c2:a7:83:5c:15:4d:00:c2:54:cb:6b:91:36:66:d5:bc:
         2c:89:88:66:5d:44:11:e1:bd:b8:69:9c:02:15:31:31:d6:e9:
         cf:24:8c:6d:72:92:57:68:04:3a:f8:71:67:59:01:40:a3:8e:
         42:3f:7e:ee:3d:3c:60:2f:14:8e:29:35:2d:9d:92:e6:27:12:
         7e:de:a3:53:72:be:6a:18:b7:4d:8f:e7:92:a8:9c:90:c3:fe:
         88:f2:d6:69:82:30:99:bd:58:3e:04:a8:3f:7f:fc:a5:b6:87:
         7a:cb:ef:6e:81:2b:85:da:ce:11:12:27:88:ca:c9:1b:a9:91:
         78:5d:d4:00:8a:d9:8d:05:1a:22:44:4f:e1:9c:f2:4b:68:d4:
         1c:4e:7d:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9ax0zg7viicTq9oPapCebMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NzMyMGQwMzA5MzAxNzhlNmY3Y2VlZjkxZDJhYjg3ODRk
M2RjMTYwHhcNMjUxMDE5MTcwMTE5WhcNMjUxMDIwMTcwMTE5WjAzMTEwLwYDVQQD
Eyg1MGZhNjJkMzA3ZWQyZGM5NjRlMDY4NjVkZjlmNGFkNTVkZTQwMTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OactYi8UqDFYwySQwOkr/BNi9ja
kkBOY3Hu4qIZRMDDJoiYPAm1dnDQ2Yinfk9/JxAcEBlxrBkt6SE/hgBeFTQjVIWH
4dF8AZ+30Q8+Sj4NJCLhVBQ4aRYIWYoy4J/3o1zSK4LBZbF/ox77vCvrk1DIDpDx
+8FBSLNDikXxG7U8ByU9/CGVguLF9uW22+MNKyzvMZsKsz2eBTMdHmteBW5hSkd3
Y2sIasDFH1ads/qjWqJJefCO7A6BNSv9E+Wy7SW5G22H9Yjt2zz9zTy9C5z6+pyW
Pe7TQemW+7dHEZC/5cy5PLc6kF26fIkmUZgQ/WLjP0KfpGY/sEc5ZgJg8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFD6YtMH7S3JZOBoZd+fStVd5AGaMB8GA1UdIwQY
MBaAFJRzINAwkwF45vfO75HSq4eE09wWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEt
OGFjNGEyMTkzOGI0LzEvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEtOGFjNGEyMTkzOGI0
LzEvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtl+IX/kJ
ozox6edNnnyM8Q93MqHasTHRF0Kh8QZ4Pe6QDRSle+cfpMzakYP32z33I7HYR/+B
FMpTZza96Dr2gbUAQkFCx9bO5t2nWoYo+I7UAkfDgSfZVOTHeBBeZIJ4ORzFCIas
uKpy+hmvnuPCp4NcFU0AwlTLa5E2ZtW8LImIZl1EEeG9uGmcAhUxMdbpzySMbXKS
V2gEOvhxZ1kBQKOOQj9+7j08YC8Ujik1LZ2S5icSft6jU3K+ahi3TY/nkqickMP+
iPLWaYIwmb1YPgSoP3/8pbaHesvvboErhdrOERIniMrJG6mReF3UAIrZjQUaIkRP
4ZzyS2jUHE59hw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:31 2025 by rpki-client