Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
File:                     LBKCZbgJkXiNhuImLpM5A4tO-oI.mft (raw, json)
Hash identifier:          Fu1H5aaKhinoVjzYGjQ8NiSQo/hs3vCmZew9YVKMue8=
Subject key identifier:   E8:C1:B7:FB:B1:37:08:56:4C:81:1D:30:5D:1E:0A:0A:39:32:A5:4D
Authority key identifier: 2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82
Certificate issuer:       /CN=2c128265b80991788d86e2262e9339038b4efa82
Certificate serial:       0198D5F1A0861A4169FEBE32E15059E85C62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
Manifest number:          01D9
Signing time:             Sat 23 Aug 2025 08:00:38 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:38 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:38 +0000
Files and hashes:         1: AUJAohDb7gvWp2PAn2xH3z3Zx8I.roa (hash: Px2ndw4EQ+qkKAfeVMR+LtAp8KsmOxSR4KCS0rfVjWc=)
                          2: LBKCZbgJkXiNhuImLpM5A4tO-oI.crl (hash: WxAGxA+T7sOfhsmJlET8lblTYHnQW8DPHlfM2Z/3VgA=)
                          3: LTEzdR9zUquR1ggUmA4_QHu2p50.roa (hash: uNuzvFRDaCwMPWv1CbBVSxROhTe6dbQ9XSUinppVNcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:a0:86:1a:41:69:fe:be:32:e1:50:59:e8:5c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c128265b80991788d86e2262e9339038b4efa82
        Validity
            Not Before: Aug 23 08:00:38 2025 GMT
            Not After : Aug 24 08:00:38 2025 GMT
        Subject: CN=e8c1b7fbb13708564c811d305d1e0a0a3932a54d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:05:58:ed:7f:48:0c:c9:4a:64:e7:0e:0a:06:
                    c1:42:34:43:ac:44:ee:ed:19:60:e1:83:c1:30:4c:
                    fd:06:16:d0:9e:92:ef:e5:1b:4f:2d:4e:32:ef:ff:
                    f5:be:06:77:c8:25:80:42:79:b0:e7:31:06:7b:e3:
                    01:96:f5:d3:2a:25:a4:c8:02:42:13:d9:e2:c9:ec:
                    41:a4:ea:af:89:74:d5:17:f9:58:b8:d3:b6:11:3d:
                    79:85:a3:2c:d2:3a:33:44:03:5c:4c:4d:2d:83:1f:
                    de:ed:c6:73:8d:e3:64:fa:0b:b3:29:19:5e:63:12:
                    4c:c6:1c:2b:3e:c9:19:a4:a4:53:0f:be:26:6a:04:
                    e6:2d:77:d8:7b:af:10:fd:14:28:d4:47:e9:92:73:
                    6f:20:15:ed:7b:b6:fe:aa:d5:38:d0:a6:a8:6a:6d:
                    f1:5c:9a:22:84:3b:6a:01:08:9a:29:1c:c2:d9:99:
                    cb:ea:23:1b:8d:f9:06:47:9d:3b:79:a5:b5:87:c4:
                    b3:0b:e0:14:70:cd:77:89:eb:28:01:e8:51:36:42:
                    81:0e:34:e2:27:ce:ef:7f:19:0e:58:ba:93:43:c0:
                    6c:fc:de:f2:20:7f:16:ca:12:af:a1:32:4f:a7:03:
                    9a:36:16:02:32:29:f9:d8:ed:a5:91:09:e6:22:15:
                    aa:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C1:B7:FB:B1:37:08:56:4C:81:1D:30:5D:1E:0A:0A:39:32:A5:4D
            X509v3 Authority Key Identifier:
                keyid:2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a2:6f:03:62:4d:52:ea:a3:b1:cb:03:6e:4e:28:59:c2:c3:
         df:c8:0f:a7:09:88:d5:d0:61:d4:d7:98:41:72:90:7d:87:18:
         2c:ba:1b:52:27:ee:ea:d2:7d:00:b0:77:22:23:b7:4a:24:4c:
         c9:7a:31:1a:f9:92:5d:09:c9:76:46:a2:b0:4b:38:10:d4:ba:
         e5:14:a9:ae:65:76:7a:66:6c:3b:6a:3f:8f:62:98:dd:ea:de:
         7d:06:fa:99:34:dd:57:48:b1:0a:02:e9:e8:f7:bb:cd:2e:eb:
         74:ab:22:9b:1e:8e:01:3c:ab:2f:96:28:0f:c4:08:41:1c:af:
         ca:b0:2f:75:2e:74:f2:b8:7b:43:56:ff:9d:1d:5b:ec:08:33:
         d9:34:34:d2:42:9d:f9:b7:30:02:16:f1:98:e0:c8:84:46:56:
         d9:b2:a1:81:a4:95:1d:f3:68:45:21:51:f5:7f:84:1b:78:99:
         17:54:a2:e5:58:13:39:1c:d1:32:7f:6b:06:50:f8:d3:43:54:
         ef:2b:bb:80:7a:a3:ff:bb:ab:ef:ec:7c:29:af:84:04:a6:a6:
         a2:98:5f:4b:b9:9d:b6:af:b2:e1:c0:75:46:9f:3f:ff:28:06:
         60:c6:ae:3f:c4:98:20:64:44:74:c6:8a:7e:ab:01:ba:3b:50:
         5f:41:95:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8aCGGkFp/r4y4VBZ6FxiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMTI4MjY1YjgwOTkxNzg4ZDg2ZTIyNjJlOTMzOTAzOGI0
ZWZhODIwHhcNMjUwODIzMDgwMDM4WhcNMjUwODI0MDgwMDM4WjAzMTEwLwYDVQQD
EyhlOGMxYjdmYmIxMzcwODU2NGM4MTFkMzA1ZDFlMGEwYTM5MzJhNTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QVY7X9IDMlKZOcOCgbBQjRDrETu
7Rlg4YPBMEz9BhbQnpLv5RtPLU4y7//1vgZ3yCWAQnmw5zEGe+MBlvXTKiWkyAJC
E9niyexBpOqviXTVF/lYuNO2ET15haMs0jozRANcTE0tgx/e7cZzjeNk+guzKRle
YxJMxhwrPskZpKRTD74magTmLXfYe68Q/RQo1EfpknNvIBXte7b+qtU40Kaoam3x
XJoihDtqAQiaKRzC2ZnL6iMbjfkGR507eaW1h8SzC+AUcM13iesoAehRNkKBDjTi
J87vfxkOWLqTQ8Bs/N7yIH8WyhKvoTJPpwOaNhYCMin52O2lkQnmIhWq6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjBt/uxNwhWTIEdMF0eCgo5MqVNMB8GA1UdIwQY
MBaAFCwSgmW4CZF4jYbiJi6TOQOLTvqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEJLQ1piZ0prWGlOaHVJbUxwTTVBNHRPLW9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lY2JmZmEtMTE2Ni00ZDFlLTlmNTUt
MTE1NzVkYjY0ZmJlLzEvTEJLQ1piZ0prWGlOaHVJbUxwTTVBNHRPLW9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lY2JmZmEtMTE2Ni00ZDFlLTlmNTUtMTE1NzVkYjY0ZmJl
LzEvTEJLQ1piZ0prWGlOaHVJbUxwTTVBNHRPLW9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKJvA2JN
UuqjscsDbk4oWcLD38gPpwmI1dBh1NeYQXKQfYcYLLobUifu6tJ9ALB3IiO3SiRM
yXoxGvmSXQnJdkaisEs4ENS65RSprmV2emZsO2o/j2KY3erefQb6mTTdV0ixCgLp
6Pe7zS7rdKsimx6OATyrL5YoD8QIQRyvyrAvdS508rh7Q1b/nR1b7Agz2TQ00kKd
+bcwAhbxmODIhEZW2bKhgaSVHfNoRSFR9X+EG3iZF1Si5VgTORzRMn9rBlD400NU
7yu7gHqj/7ur7+x8Ka+EBKamophfS7mdtq+y4cB1Rp8//ygGYMauP8SYIGREdMaK
fqsBujtQX0GV+g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:32 2025 by rpki-client