Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
File:                     LArI02kFESA6Me94Xm0cRDksoos.mft (raw, json)
Hash identifier:          A3m4NYFhyFCDI36PyzYM8JPhSPFHJWvZ1oOtQpPAqBU=
Subject key identifier:   E0:6C:A6:3D:EA:C0:45:DF:A1:B9:15:8F:82:E7:07:04:51:FB:9F:73
Authority key identifier: 2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B
Certificate issuer:       /CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b
Certificate serial:       0199FB7CFB84A4E726116559008FA914E3C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
Manifest number:          1489
Signing time:             Sun 19 Oct 2025 08:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:35 +0000
Files and hashes:         1: GB5yxI4ByHznh8BVy7-0wKqCL9o.roa (hash: uNiZ21GMmhqlbkGeCw3XR4SWt0bm2+3p2g+5iqS1414=)
                          2: LArI02kFESA6Me94Xm0cRDksoos.crl (hash: kogHqVghrVNVRuGRxsMVaM/8S36QA+lO/kpmPoY1b7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:fb:84:a4:e7:26:11:65:59:00:8f:a9:14:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b
        Validity
            Not Before: Oct 19 08:01:35 2025 GMT
            Not After : Oct 20 08:01:35 2025 GMT
        Subject: CN=e06ca63deac045dfa1b9158f82e7070451fb9f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:37:87:16:99:4b:8d:69:ff:2f:29:8e:a5:64:
                    3f:c7:3f:33:c6:ac:56:61:29:6e:3a:d5:71:17:a2:
                    64:49:3a:03:a3:6e:8d:eb:f2:d3:47:17:c8:87:5a:
                    54:ef:1d:f6:dd:e7:ad:f7:d4:de:41:22:f9:a5:44:
                    bd:79:ed:6f:19:db:3a:60:dc:36:94:a9:cf:ae:31:
                    28:14:7b:f7:3f:92:35:62:c2:24:27:7e:ab:3a:20:
                    fb:a0:6c:06:e6:4f:e7:39:0d:dd:ca:05:72:75:f3:
                    ca:00:fb:f3:0b:ae:5f:8e:d5:cd:07:0f:47:1a:b4:
                    fd:66:d1:4a:88:c5:70:1e:74:5f:14:f5:ac:e3:20:
                    02:05:07:7d:99:8f:2f:92:c9:f3:ae:f3:2f:40:00:
                    18:1c:3b:86:8c:bf:68:4d:e7:5e:7c:a2:d7:aa:cc:
                    3e:e8:c4:ff:5c:e7:40:db:3e:59:d1:a8:bf:1b:83:
                    9e:c6:09:f0:d5:d5:0f:29:56:68:77:14:02:37:81:
                    4d:74:0f:f2:e0:66:b3:e5:92:ea:46:5b:3e:b1:e6:
                    c0:b8:6c:42:f9:0c:87:c8:8c:c8:03:98:be:55:03:
                    3b:9b:67:b3:34:45:f0:37:41:74:5f:bb:8a:93:33:
                    a2:9a:c0:ef:05:7f:75:cc:a5:bc:36:03:b0:37:06:
                    99:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6C:A6:3D:EA:C0:45:DF:A1:B9:15:8F:82:E7:07:04:51:FB:9F:73
            X509v3 Authority Key Identifier:
                keyid:2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b9:25:5b:c0:da:09:97:11:33:29:c8:95:8f:a8:d1:bd:37:
         1e:c7:da:5e:35:a0:b1:c9:a8:4a:c4:bd:65:56:68:42:d3:9f:
         1b:14:5a:b1:cc:4a:92:2f:16:a8:e3:53:36:8e:d0:3d:e0:fa:
         8c:ee:95:31:a8:7f:4c:25:77:3f:02:cc:ff:e9:4f:7d:61:5c:
         85:01:02:74:44:c5:c5:39:08:d4:fe:c7:34:6c:4a:e3:c9:53:
         8a:75:46:fd:7c:a7:75:d1:7e:6d:43:12:20:c7:b2:28:49:e3:
         9b:20:50:cf:bf:5b:8c:ce:41:4f:dc:e6:a6:c6:2d:f8:09:a7:
         69:c5:4c:26:40:b5:3c:5f:cb:b4:6c:f3:af:f3:b2:9c:74:60:
         b3:0f:6e:f4:af:2f:62:d0:98:69:88:27:f6:40:f8:32:71:b0:
         db:cf:af:4c:f4:b5:52:de:21:85:2f:e2:22:a2:67:1a:64:8a:
         8d:cf:39:42:95:8d:b5:cc:e9:a4:85:5b:aa:09:49:bf:6e:ae:
         e3:e3:b4:cb:20:4d:4e:8b:f5:c6:fc:49:40:d9:58:28:da:9c:
         75:d6:e6:e7:d0:0c:57:8d:2e:4a:5d:77:33:ca:67:04:5e:48:
         8d:54:7e:cf:45:e9:3a:6a:55:c7:31:24:16:bc:f9:59:4c:ae:
         06:53:21:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:41 2025 by rpki-client