Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft
File:                     LIjbgf377M7nX0qfaYo8GzqEYm4.mft (raw, json)
Hash identifier:          fqbGRwTgKeohmp5wVP+DttbBdevfPTwDfDUcyd6BhyU=
Subject key identifier:   26:88:F0:79:AB:02:81:43:93:77:C9:B5:FC:81:1C:B2:68:D3:4A:3C
Authority key identifier: 2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E
Certificate issuer:       /CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
Certificate serial:       0199FCC622B37FF49A5CDBFEF4E404EAED7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft
Manifest number:          142C
Signing time:             Sun 19 Oct 2025 14:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:07 +0000
Files and hashes:         1: 3ClVuGwIZnyzq19yv6OajdRgSck.roa (hash: Pc2ZDdCkzUBbz8l3kHlCiGrzO9OmrpmH04akpnWTzRM=)
                          2: LIjbgf377M7nX0qfaYo8GzqEYm4.crl (hash: wII30WDSObkgHeXKKIGagzctX9DkwaAhdS3Gz7NFZYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:22:b3:7f:f4:9a:5c:db:fe:f4:e4:04:ea:ed:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
        Validity
            Not Before: Oct 19 14:01:07 2025 GMT
            Not After : Oct 20 14:01:07 2025 GMT
        Subject: CN=2688f079ab0281439377c9b5fc811cb268d34a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1b:55:aa:bc:0a:81:be:80:99:78:81:72:0e:
                    16:f3:c9:bb:6a:49:41:23:f6:f2:b8:28:d8:78:77:
                    9f:1e:08:6c:da:a1:c6:ed:93:e9:db:cb:be:b0:4a:
                    18:81:77:35:46:7b:c9:d1:dd:64:bb:24:ab:db:18:
                    e3:44:0e:63:87:c0:80:ed:a4:13:1c:a4:c3:34:17:
                    60:41:d6:c3:34:64:34:0c:83:fd:b8:84:3d:08:3b:
                    19:2a:4b:93:65:a8:c4:07:b1:6a:71:9d:72:45:9f:
                    f5:fe:7d:d4:29:8b:c8:23:b5:fa:cb:18:05:89:d0:
                    7d:8a:53:81:1b:b5:be:60:dd:c1:3b:fd:0a:b9:85:
                    0a:ed:f7:e3:b8:db:0d:a2:a3:1a:73:0a:e9:8b:fe:
                    de:31:b2:a0:73:53:0a:b3:59:3f:ac:33:99:94:fe:
                    ed:1e:3e:3d:34:6a:93:e6:ed:70:fc:6e:07:3f:14:
                    9f:a5:6d:0d:c4:d0:e4:a5:49:7a:cd:e7:56:9a:ec:
                    00:74:44:3d:af:ad:75:59:d9:de:2e:0c:70:6f:1e:
                    c6:2b:e7:18:6b:96:a5:d1:ef:22:0b:8f:a1:d7:3f:
                    7f:11:73:01:bc:dd:39:0d:aa:31:ce:76:5d:c1:c3:
                    ba:38:fb:84:cd:6d:0b:c3:b9:5f:e4:9a:98:c2:9a:
                    cb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:88:F0:79:AB:02:81:43:93:77:C9:B5:FC:81:1C:B2:68:D3:4A:3C
            X509v3 Authority Key Identifier:
                keyid:2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d3:22:5e:2f:13:34:66:d6:fa:d9:75:b5:8a:47:1b:ee:fc:
         46:cc:7e:3b:22:25:fc:7d:0f:18:68:53:45:29:a7:b3:7e:13:
         a3:8f:d6:e7:1e:6f:f3:b6:50:4c:3e:02:d9:08:db:bd:55:b0:
         55:ac:b3:0f:a1:2c:c7:88:ab:62:00:ae:04:6f:57:c3:30:38:
         f9:55:e2:30:62:03:ba:4f:1f:67:95:32:3d:7b:9b:41:63:4d:
         6f:6e:c0:39:9b:3f:ae:63:a6:68:dd:53:07:a7:bf:c1:3d:e4:
         d2:20:ec:95:0a:2a:3f:4d:41:cb:ba:3e:ad:e9:06:1d:6c:79:
         f6:1e:1b:88:b8:04:30:5b:05:91:c6:60:d5:53:bb:47:19:6b:
         6a:69:48:4b:90:13:18:6b:4f:b9:31:70:78:9e:85:90:11:c0:
         a6:12:af:48:2c:d1:1a:a9:0a:0c:b3:92:9c:f7:2e:72:ad:1d:
         21:00:50:8f:1f:44:b8:73:31:df:51:07:58:51:56:73:de:2e:
         8f:b9:0d:0b:b1:6d:df:31:43:f5:2b:d2:d0:95:e3:06:2d:53:
         0d:e3:87:ec:7d:f4:85:90:3a:a5:d8:ad:7c:a5:11:4f:d9:74:
         af:d3:f3:7e:f5:51:25:f5:28:8c:fc:45:c2:57:a7:ba:42:1f:
         b6:6f:2e:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xiKzf/SaXNv+9OQE6u1+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjODhkYjgxZmRmYmVjY2VlNzVmNGE5ZjY5OGEzYzFiM2E4
NDYyNmUwHhcNMjUxMDE5MTQwMTA3WhcNMjUxMDIwMTQwMTA3WjAzMTEwLwYDVQQD
EygyNjg4ZjA3OWFiMDI4MTQzOTM3N2M5YjVmYzgxMWNiMjY4ZDM0YTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BtVqrwKgb6AmXiBcg4W88m7aklB
I/byuCjYeHefHghs2qHG7ZPp28u+sEoYgXc1RnvJ0d1kuySr2xjjRA5jh8CA7aQT
HKTDNBdgQdbDNGQ0DIP9uIQ9CDsZKkuTZajEB7FqcZ1yRZ/1/n3UKYvII7X6yxgF
idB9ilOBG7W+YN3BO/0KuYUK7ffjuNsNoqMacwrpi/7eMbKgc1MKs1k/rDOZlP7t
Hj49NGqT5u1w/G4HPxSfpW0NxNDkpUl6zedWmuwAdEQ9r611WdneLgxwbx7GK+cY
a5al0e8iC4+h1z9/EXMBvN05DaoxznZdwcO6OPuEzW0Lw7lf5JqYwprLpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaI8HmrAoFDk3fJtfyBHLJo00o8MB8GA1UdIwQY
MBaAFCyI24H9++zO519Kn2mKPBs6hGJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTElqYmdmMzc3TTduWDBxZmFZbzhHenFFWW00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hOGUwNGItMGRiYS00MGVjLWIxMjYt
ZjQ1N2Q0MDRhZTJmLzEvTElqYmdmMzc3TTduWDBxZmFZbzhHenFFWW00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9hOGUwNGItMGRiYS00MGVjLWIxMjYtZjQ1N2Q0MDRhZTJm
LzEvTElqYmdmMzc3TTduWDBxZmFZbzhHenFFWW00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdMiXi8T
NGbW+tl1tYpHG+78Rsx+OyIl/H0PGGhTRSmns34To4/W5x5v87ZQTD4C2QjbvVWw
VayzD6Esx4irYgCuBG9XwzA4+VXiMGIDuk8fZ5UyPXubQWNNb27AOZs/rmOmaN1T
B6e/wT3k0iDslQoqP01By7o+rekGHWx59h4biLgEMFsFkcZg1VO7RxlramlIS5AT
GGtPuTFweJ6FkBHAphKvSCzRGqkKDLOSnPcucq0dIQBQjx9EuHMx31EHWFFWc94u
j7kNC7Ft3zFD9SvS0JXjBi1TDeOH7H30hZA6pditfKURT9l0r9PzfvVRJfUojPxF
wlenukIftm8u/A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:42 2025 by rpki-client