Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft
File:                     Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft (raw, json)
Hash identifier:          Eoxkpgl4n0GJQTINMBB1XNvL3WWxc1PQLUL8/NMTST8=
Subject key identifier:   18:80:65:74:9C:FE:65:F1:27:C4:09:1E:52:03:D5:D9:86:0B:DF:10
Authority key identifier: 2D:CF:6F:36:13:07:09:5C:28:3B:0D:89:14:05:68:AA:4E:C8:D4:A8
Certificate issuer:       /CN=2dcf6f361307095c283b0d89140568aa4ec8d4a8
Certificate serial:       0199FE0FEC4D124420F108E5B49083423D86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft
Manifest number:          088D
Signing time:             Sun 19 Oct 2025 20:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:20 +0000
Files and hashes:         1: Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl (hash: TZXSLmE6dMAEbrHmKqHDkSIhy1rz3eSHj+IuTJcYzTU=)
                          2: s4AKgCvHin14a0p0jz13CHksENw.roa (hash: DlLpWWLv6d9rLbZVSY1skYH3NFUrKLxB2CHWlEQtKgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:0f:ec:4d:12:44:20:f1:08:e5:b4:90:83:42:3d:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dcf6f361307095c283b0d89140568aa4ec8d4a8
        Validity
            Not Before: Oct 19 20:01:20 2025 GMT
            Not After : Oct 20 20:01:20 2025 GMT
        Subject: CN=188065749cfe65f127c4091e5203d5d9860bdf10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f2:3d:15:07:3d:f9:c2:e2:a0:ff:26:a7:01:
                    6d:25:f1:26:55:49:f6:0f:a7:d2:d5:15:c9:1f:e2:
                    ca:93:05:c8:c6:f4:de:9b:f9:25:c5:4e:2b:0f:69:
                    a8:a6:af:e7:ee:b5:3f:05:f4:70:36:89:48:58:40:
                    9c:9e:cd:cb:30:00:35:f1:92:9b:cc:05:c4:f8:78:
                    a5:f9:1a:a0:62:d9:60:c8:5d:c1:c8:ab:84:d1:5d:
                    3e:32:6e:10:ca:c4:7a:20:9b:24:e4:d7:b3:c8:65:
                    f6:77:6f:03:89:63:52:c9:ec:90:49:de:13:72:da:
                    5a:70:00:87:37:eb:e7:0a:5c:ba:0c:09:f1:0d:6c:
                    82:6a:86:71:f5:bb:75:58:ab:49:4a:4b:3e:2d:d6:
                    ef:2f:41:d6:02:11:20:e3:81:52:76:2e:0c:37:59:
                    f1:ca:4d:24:45:50:c7:69:7d:ff:40:13:e5:4c:4d:
                    6e:cd:76:38:c4:a8:e6:f1:42:e8:d9:ac:c4:44:d0:
                    49:8b:ab:b5:2d:f3:95:83:23:64:be:ec:11:1d:0e:
                    7c:a6:4e:c4:b0:02:68:03:7c:80:73:6d:18:50:de:
                    fd:e4:7b:93:c4:4d:b3:97:97:6e:9e:fc:cd:58:89:
                    14:87:dd:83:8d:f4:47:e7:7d:06:f2:66:1b:ed:af:
                    63:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:80:65:74:9C:FE:65:F1:27:C4:09:1E:52:03:D5:D9:86:0B:DF:10
            X509v3 Authority Key Identifier:
                keyid:2D:CF:6F:36:13:07:09:5C:28:3B:0D:89:14:05:68:AA:4E:C8:D4:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:6c:d0:ca:45:b6:19:58:66:21:bc:8b:b4:06:18:d8:00:3e:
         fd:98:10:79:d3:6e:9e:41:99:f7:05:c7:ec:b7:92:f9:ff:69:
         0a:c0:07:20:41:9b:fa:76:69:ab:b6:1b:11:52:25:f7:43:20:
         d2:23:b8:2b:a5:05:33:ab:04:91:3f:cb:f4:10:23:18:f9:44:
         a2:13:a0:a5:85:7d:4f:be:f0:fe:16:83:fa:17:d9:29:cc:30:
         e8:68:92:eb:67:38:ec:eb:5d:d9:c8:2f:e3:15:d7:4c:52:2d:
         a3:9f:eb:f7:7c:eb:e3:78:a4:ff:03:94:8b:26:48:86:b9:0d:
         81:58:25:32:fe:0d:a2:81:ad:8b:18:ce:a2:64:58:0f:8a:b5:
         ae:ed:00:da:3e:b1:b1:6e:51:d0:72:31:b4:e7:5e:85:a9:a0:
         87:e4:49:f9:d3:e0:91:97:5c:dc:cc:cc:7d:16:19:d3:68:1a:
         9e:85:88:8f:64:43:1a:5f:2e:c3:26:0b:3c:a3:e8:9a:fd:08:
         49:42:74:9e:b2:e2:f8:fc:8c:e3:89:d8:5d:3e:49:8f:2f:44:
         8c:68:77:fd:0f:1a:3d:1c:03:b6:75:ca:6e:10:b6:13:ce:d9:
         05:88:b4:34:77:be:c3:b2:f4:d2:8e:cc:2c:2b:3f:e4:f9:d7:
         74:60:ea:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:52:38 2025 by rpki-client