Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
File:                     LTDDBwxuYe3FimTzIz-pf8X1c5s.mft (raw, json)
Hash identifier:          XV/Y5Cfw1zb4/vXqEdN/xmkJg6CSh7tILcq8FU8jQV4=
Subject key identifier:   19:1F:5D:F0:C4:F7:59:AF:A2:16:66:76:91:F7:12:05:24:3D:89:D0
Authority key identifier: 2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
Certificate issuer:       /CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Certificate serial:       0199FC5880757802544BD34F6D87E50D457F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 12:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:22 +0000
Files and hashes:         1: 8zTP6bF-8Ig21O-GNkBs9OXORp0.roa (hash: 9YznWSa8FHqt+jbmFpmAFvzlfMFLjOXYAA2TeVtspuE=)
                          2: LTDDBwxuYe3FimTzIz-pf8X1c5s.crl (hash: NiseSRgib5OsBu3Ci5Ik8aVGBq+IgzOMLQfZiwhzB04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:80:75:78:02:54:4b:d3:4f:6d:87:e5:0d:45:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
        Validity
            Not Before: Oct 19 12:01:22 2025 GMT
            Not After : Oct 20 12:01:22 2025 GMT
        Subject: CN=191f5df0c4f759afa216667691f71205243d89d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:36:81:52:08:2e:88:62:53:d5:87:97:5f:9a:
                    4a:7d:3b:b5:da:de:71:c0:b1:60:38:36:12:b6:40:
                    a1:44:93:4f:27:d1:3a:7b:c1:c0:7b:1f:50:d2:fc:
                    fc:26:5b:8a:c5:ab:14:c7:2d:61:1b:2c:4a:83:e5:
                    2a:65:a1:74:14:58:1e:bf:48:e0:20:11:44:b6:8e:
                    e4:6d:ff:5c:34:a8:ab:6c:7a:a3:bb:4a:76:c5:96:
                    ff:68:8a:01:9a:25:cd:84:5d:54:9e:9a:75:47:87:
                    09:33:28:95:3a:f6:5e:dd:f9:6b:2d:97:e3:69:56:
                    71:a6:8d:3a:93:26:06:cd:de:b7:2b:d4:54:37:8a:
                    dd:ae:8d:e6:85:de:0a:66:74:fe:02:05:16:f6:19:
                    c7:a6:7f:01:fb:b4:eb:d2:9a:c2:81:3d:f3:0a:54:
                    0b:ef:8f:75:51:40:7b:d8:90:bd:8a:62:df:31:37:
                    d1:28:ed:40:6a:ec:68:11:4b:99:91:64:85:70:22:
                    dd:fb:dd:33:3e:11:b5:24:89:4e:1e:32:ea:5a:b3:
                    4f:6d:d2:2c:5c:fa:ee:28:e1:0a:83:bb:64:40:9d:
                    3d:dd:e6:3a:7c:b0:57:a7:4a:28:a3:28:68:0f:b4:
                    3a:37:4e:f4:b1:06:f9:43:c2:ca:55:07:93:03:24:
                    8a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:1F:5D:F0:C4:F7:59:AF:A2:16:66:76:91:F7:12:05:24:3D:89:D0
            X509v3 Authority Key Identifier:
                keyid:2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:be:e2:ca:97:82:b7:61:f1:a4:30:02:8d:57:5e:57:9f:8d:
         2a:f3:a0:be:18:d9:cb:57:20:ea:15:1b:49:ca:a7:da:4c:9b:
         ba:ec:8e:6a:77:1f:35:46:74:f1:3f:e1:98:72:50:bf:75:18:
         d9:0d:66:32:30:d6:01:e2:3d:10:54:cd:f6:f9:9f:61:b3:20:
         bb:59:90:c6:cf:cf:d8:d9:7f:28:71:e1:83:cc:52:11:d0:d5:
         be:fe:49:96:65:a1:60:36:5f:84:78:65:4f:50:bc:31:ea:f4:
         52:eb:73:2b:5c:09:68:e6:fe:93:12:38:04:fa:9b:81:4b:68:
         08:58:2c:f6:aa:86:fc:3d:d3:57:df:39:6f:32:0e:79:0c:d1:
         5e:c1:12:c9:54:ab:1f:00:d7:0a:08:ab:51:60:70:23:91:db:
         e4:e4:64:9c:d1:7e:23:56:f9:c8:18:7b:08:45:bc:c5:e8:4e:
         c4:f4:cb:ff:f2:ab:43:3b:12:52:a9:4a:8d:41:81:7a:c0:7f:
         39:10:27:ec:1a:c2:95:a8:7b:c6:83:0e:45:1f:2e:c2:cb:db:
         db:90:39:e1:fa:07:90:92:c7:94:23:4d:fe:b2:51:21:03:4a:
         9d:9b:e3:f8:0e:47:8a:1a:67:c4:0d:9b:65:9f:6b:47:15:4a:
         dc:5b:5c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:16 2025 by rpki-client