Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
File:                     LkPayOpVaTQ53RuLSBK6cYNPEDE.mft (raw, json)
Hash identifier:          1YbeqMNBCNOS6o72V4ME8hGcIhLwISHS1xg27BPlzLc=
Subject key identifier:   68:62:ED:E0:F7:B7:8D:F6:D1:FA:C4:DB:92:52:77:EF:42:21:A2:67
Authority key identifier: 2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
Certificate issuer:       /CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Certificate serial:       0199FD3475C34BE82DF5A8685B7969134087
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
Manifest number:          138F
Signing time:             Sun 19 Oct 2025 16:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:37 +0000
Files and hashes:         1: ANPtCnGv8gHA7x3faWzBPJFvOXI.roa (hash: 47gT+uwBF8roCKnncbKY5zhpD+DW3HsUlU+dHgq1yW0=)
                          2: G9SmysWbMuSxx-EDG3Cs-f8IXqY.roa (hash: asZN9tI3ws8BcQXeW3lamrTpn0W8Ef30eRexdJjOvPw=)
                          3: LkPayOpVaTQ53RuLSBK6cYNPEDE.crl (hash: bSPQXNAg3wnGTFTvggZfaec6orQcILahaCVZObdZ01w=)
                          4: tVeA1QW6o2_4cAAoeOMN60OC09M.roa (hash: K+ciN3DFQxqGOLGpRd4/ZhXkYH4OU+8ws5sujZeJtPY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 16:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:75:c3:4b:e8:2d:f5:a8:68:5b:79:69:13:40:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
        Validity
            Not Before: Oct 19 16:01:37 2025 GMT
            Not After : Oct 20 16:01:37 2025 GMT
        Subject: CN=6862ede0f7b78df6d1fac4db925277ef4221a267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:16:52:43:56:38:e2:5c:dd:c5:b0:b3:38:
                    3c:79:c5:f8:81:6d:ce:4b:0a:c9:40:36:11:c1:fb:
                    a7:92:bd:12:d3:33:91:9b:89:2f:65:70:8e:dd:24:
                    c2:ef:c2:1b:1a:86:fd:ac:ca:26:9a:37:94:82:c3:
                    80:58:86:38:6b:16:d9:a4:bf:64:a5:cf:7a:89:89:
                    53:e2:e1:39:22:7b:93:d6:f5:62:0c:c1:e7:ec:b2:
                    12:37:dc:1b:55:81:21:eb:12:75:fb:ae:f8:11:ca:
                    9a:70:c9:ad:82:06:54:3d:78:cf:f2:cc:fb:10:f3:
                    b2:8c:83:5b:a0:39:6e:57:19:1a:ce:91:9a:5f:7b:
                    d7:5d:87:30:f6:5f:21:da:8e:04:3c:41:ad:17:5c:
                    4c:79:3e:ae:f5:85:a5:e3:3b:5c:6c:f2:66:9a:d8:
                    fd:4f:05:f9:e8:0b:66:ef:f7:ec:e6:7b:b4:67:ad:
                    6f:cc:1c:9f:67:8e:a1:74:91:44:9b:b9:bc:e6:4c:
                    42:37:07:6d:18:f9:b7:2b:ed:66:68:05:bb:50:ad:
                    75:6c:33:e8:96:4d:06:a6:12:81:9b:23:0f:ac:b8:
                    52:f4:e8:94:f9:d0:e0:c8:c5:bd:de:56:8f:48:5e:
                    0e:6a:c1:8e:da:d4:88:7a:c1:b4:58:df:f0:95:34:
                    c0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:62:ED:E0:F7:B7:8D:F6:D1:FA:C4:DB:92:52:77:EF:42:21:A2:67
            X509v3 Authority Key Identifier:
                keyid:2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:21:94:6d:fc:2e:44:c5:78:34:0f:85:89:ab:48:38:d5:13:
         e1:4a:41:92:6a:36:a1:e4:d1:0d:63:04:9b:4c:ce:e4:45:3f:
         e6:6d:92:86:bb:71:96:f8:d9:cd:54:08:f5:20:18:57:60:70:
         11:dc:1b:5a:a7:44:fb:cf:c6:a8:dd:83:07:91:1a:f2:a0:89:
         25:1b:fc:69:c7:2e:fc:1f:57:2e:ab:77:67:9f:80:fe:b5:04:
         ec:0a:93:c1:94:19:b1:66:92:4e:7d:50:6e:df:0f:92:e8:e2:
         d3:d3:11:af:64:3f:a0:c6:7c:bb:0e:0d:e6:87:75:88:9f:45:
         cc:ad:e7:aa:c9:79:03:d2:7f:a3:d5:f1:70:9b:e1:62:7b:09:
         0f:65:46:d2:05:c8:63:bc:a1:aa:b6:2c:c6:0c:f0:4f:11:d4:
         fa:cb:49:b5:e1:2b:94:59:ae:16:0c:9f:f1:4b:94:92:39:ed:
         65:dd:71:42:4f:10:00:f9:06:56:82:e6:87:bc:d3:2c:70:4c:
         5a:17:08:ef:1a:0a:7e:f2:16:8c:0a:1f:67:5a:9e:44:c1:0b:
         cf:fb:45:30:fb:ed:49:db:0b:03:dc:72:fd:90:26:eb:7d:d5:
         57:2f:af:42:bb:4e:5a:fb:2e:cd:d5:69:8e:4d:6f:10:13:2a:
         87:cb:7f:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NHXDS+gt9ahoW3lpE0CHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNDNkYWM4ZWE1NTY5MzQzOWRkMWI4YjQ4MTJiYTcxODM0
ZjEwMzEwHhcNMjUxMDE5MTYwMTM3WhcNMjUxMDIwMTYwMTM3WjAzMTEwLwYDVQQD
Eyg2ODYyZWRlMGY3Yjc4ZGY2ZDFmYWM0ZGI5MjUyNzdlZjQyMjFhMjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr4WUkNWOOJc3cWwszg8ecX4gW3O
SwrJQDYRwfunkr0S0zORm4kvZXCO3STC78IbGob9rMommjeUgsOAWIY4axbZpL9k
pc96iYlT4uE5InuT1vViDMHn7LISN9wbVYEh6xJ1+674EcqacMmtggZUPXjP8sz7
EPOyjINboDluVxkazpGaX3vXXYcw9l8h2o4EPEGtF1xMeT6u9YWl4ztcbPJmmtj9
TwX56Atm7/fs5nu0Z61vzByfZ46hdJFEm7m85kxCNwdtGPm3K+1maAW7UK11bDPo
lk0GphKBmyMPrLhS9OiU+dDgyMW93laPSF4OasGO2tSIesG0WN/wlTTA7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhi7eD3t4320frE25JSd+9CIaJnMB8GA1UdIwQY
MBaAFC5D2sjqVWk0Od0bi0gSunGDTxAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGtQYXlPcFZhVFE1M1J1TFNCSzZjWU5QRURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84NmJhMzYtNzhiOC00NGJiLTlmYjQt
MjZjN2M5NjNhNzY5LzEvTGtQYXlPcFZhVFE1M1J1TFNCSzZjWU5QRURFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84NmJhMzYtNzhiOC00NGJiLTlmYjQtMjZjN2M5NjNhNzY5
LzEvTGtQYXlPcFZhVFE1M1J1TFNCSzZjWU5QRURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCGUbfwu
RMV4NA+FiatIONUT4UpBkmo2oeTRDWMEm0zO5EU/5m2ShrtxlvjZzVQI9SAYV2Bw
EdwbWqdE+8/GqN2DB5Ea8qCJJRv8accu/B9XLqt3Z5+A/rUE7AqTwZQZsWaSTn1Q
bt8Pkuji09MRr2Q/oMZ8uw4N5od1iJ9FzK3nqsl5A9J/o9XxcJvhYnsJD2VG0gXI
Y7yhqrYsxgzwTxHU+stJteErlFmuFgyf8UuUkjntZd1xQk8QAPkGVoLmh7zTLHBM
WhcI7xoKfvIWjAofZ1qeRMELz/tFMPvtSdsLA9xy/ZAm633VVy+vQrtOWvsuzdVp
jk1vEBMqh8t/iw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:03 2025 by rpki-client