Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft
File:                     Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft (raw, json)
Hash identifier:          tM7SELuHMOmVO4osk4ESBxSyXIg/JzlHJuT3xut3Jes=
Subject key identifier:   F2:2E:0F:EC:BD:C6:32:E8:C7:24:F0:2F:52:80:C8:37:D9:8F:9B:DA
Authority key identifier: 2E:F9:26:9A:B7:F6:14:C1:EC:FA:23:59:92:8E:EE:5D:EF:39:A0:9D
Certificate issuer:       /CN=2ef9269ab7f614c1ecfa2359928eee5def39a09d
Certificate serial:       0199FC21A72B8ED29E96CBBFC4CFA0397C95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lvkmmrf2FMHs-iNZko7uXe85oJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft
Manifest number:          0264
Signing time:             Sun 19 Oct 2025 11:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:27 +0000
Files and hashes:         1: Lvkmmrf2FMHs-iNZko7uXe85oJ0.crl (hash: DPEF5wr/AcHBMFkJN5OJz0DvoeKpY6B0YM4nuerGzFk=)
                          2: S7R40cp3GhnKkmjft9RMef_54Y8.roa (hash: 8lQswAz9iKln85edEU2eDSuB3VyL1jNQyiwguuxfyac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lvkmmrf2FMHs-iNZko7uXe85oJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:a7:2b:8e:d2:9e:96:cb:bf:c4:cf:a0:39:7c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ef9269ab7f614c1ecfa2359928eee5def39a09d
        Validity
            Not Before: Oct 19 11:01:27 2025 GMT
            Not After : Oct 20 11:01:27 2025 GMT
        Subject: CN=f22e0fecbdc632e8c724f02f5280c837d98f9bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:24:1d:f7:29:cd:67:4e:68:c2:c1:d2:c1:ac:
                    b1:82:f5:4d:fc:65:74:c5:84:ff:74:a9:fd:ea:61:
                    fd:f1:35:56:a1:3c:a9:b4:63:b2:1b:6a:e2:cd:2f:
                    4e:12:bc:f1:fe:91:20:6e:61:be:60:42:d4:99:7e:
                    bb:47:cc:07:aa:9e:ff:fa:c4:ea:73:99:51:49:bf:
                    bd:c3:33:dd:6d:3e:4c:8d:30:31:36:9c:62:45:4c:
                    4a:22:20:61:01:38:1a:b3:3e:cd:e4:65:f7:5f:e2:
                    fb:ce:50:4e:a0:fb:32:a1:70:cb:1b:cf:45:a5:e2:
                    5f:28:ce:77:cc:7c:cd:7d:ee:57:99:94:1b:8e:7c:
                    8d:fc:ca:0b:4a:b7:86:b9:07:39:c7:70:ab:53:f0:
                    cb:8b:8b:ea:36:04:8b:b1:ee:61:36:e1:29:5e:9a:
                    85:e2:a2:29:1c:67:4f:fe:6e:92:ba:ee:62:f6:cd:
                    08:f0:31:74:ac:a5:2f:6d:0a:a9:20:b8:55:3f:97:
                    f4:b3:24:e1:2b:49:48:69:72:b3:fa:ed:51:37:53:
                    a8:02:cd:b8:3e:0b:7f:fc:64:8a:f3:07:9f:7b:59:
                    db:22:86:21:dc:65:8d:66:8a:12:a8:88:23:77:09:
                    19:46:be:68:0c:db:7f:97:c7:b9:d3:78:24:43:11:
                    aa:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2E:0F:EC:BD:C6:32:E8:C7:24:F0:2F:52:80:C8:37:D9:8F:9B:DA
            X509v3 Authority Key Identifier:
                keyid:2E:F9:26:9A:B7:F6:14:C1:EC:FA:23:59:92:8E:EE:5D:EF:39:A0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lvkmmrf2FMHs-iNZko7uXe85oJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:76:5c:30:e2:60:1b:62:6b:df:e6:5c:b0:37:35:f7:a0:b5:
         ad:85:25:bb:dc:d7:c7:72:b6:f3:08:a1:fa:6d:91:de:ee:e2:
         64:b4:6b:a3:3f:70:5c:81:fa:e9:87:57:ea:33:2f:ed:2d:44:
         55:43:ae:ec:b2:30:c8:d8:b7:f9:35:46:32:ef:46:4b:39:50:
         f5:fc:25:99:b0:44:69:13:f7:13:09:bf:b0:24:26:84:13:d7:
         5d:d3:b4:e1:22:1e:d0:b1:3e:eb:ab:01:c2:ec:15:1f:c6:e0:
         38:c4:09:89:1c:97:07:a2:6d:0e:74:97:c3:f1:03:3f:d7:8f:
         c2:d6:7b:96:4b:51:bb:74:88:b4:6b:02:82:00:65:b2:e0:fe:
         1a:8a:1f:65:9c:88:b8:11:bd:c5:7e:13:58:48:bd:b5:1d:bc:
         9b:5d:d5:ad:ad:bd:44:f0:3d:95:c7:0d:fc:20:e7:cd:40:da:
         ce:7b:39:1c:7e:6b:0b:38:45:33:c8:ca:74:23:e7:59:f5:09:
         3a:b4:ee:89:2a:0b:fc:01:a4:2e:d2:e1:d9:f7:88:e7:be:c2:
         9e:7b:25:e7:26:53:30:28:7f:02:33:37:bc:c3:65:dc:b3:8a:
         4c:f5:78:be:41:7c:ad:91:20:5c:98:03:57:1a:ee:83:e6:3a:
         4d:7b:31:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IacrjtKelsu/xM+gOXyVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZjkyNjlhYjdmNjE0YzFlY2ZhMjM1OTkyOGVlZTVkZWYz
OWEwOWQwHhcNMjUxMDE5MTEwMTI3WhcNMjUxMDIwMTEwMTI3WjAzMTEwLwYDVQQD
EyhmMjJlMGZlY2JkYzYzMmU4YzcyNGYwMmY1MjgwYzgzN2Q5OGY5YmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSQd9ynNZ05owsHSwayxgvVN/GV0
xYT/dKn96mH98TVWoTyptGOyG2rizS9OErzx/pEgbmG+YELUmX67R8wHqp7/+sTq
c5lRSb+9wzPdbT5MjTAxNpxiRUxKIiBhATgasz7N5GX3X+L7zlBOoPsyoXDLG89F
peJfKM53zHzNfe5XmZQbjnyN/MoLSreGuQc5x3CrU/DLi4vqNgSLse5hNuEpXpqF
4qIpHGdP/m6Suu5i9s0I8DF0rKUvbQqpILhVP5f0syThK0lIaXKz+u1RN1OoAs24
Pgt//GSK8wefe1nbIoYh3GWNZooSqIgjdwkZRr5oDNt/l8e503gkQxGq+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIuD+y9xjLoxyTwL1KAyDfZj5vaMB8GA1UdIwQY
MBaAFC75Jpq39hTB7PojWZKO7l3vOaCdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHZrbW1yZjJGTUhzLWlOWmtvN3VYZTg1b0owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8wNGNiOGItMGY1NC00NWZiLTlmMWUt
YWMyYjc0ZDBjNjk5LzEvTHZrbW1yZjJGTUhzLWlOWmtvN3VYZTg1b0owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8wNGNiOGItMGY1NC00NWZiLTlmMWUtYWMyYjc0ZDBjNjk5
LzEvTHZrbW1yZjJGTUhzLWlOWmtvN3VYZTg1b0owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnZcMOJg
G2Jr3+ZcsDc196C1rYUlu9zXx3K28wih+m2R3u7iZLRroz9wXIH66YdX6jMv7S1E
VUOu7LIwyNi3+TVGMu9GSzlQ9fwlmbBEaRP3Ewm/sCQmhBPXXdO04SIe0LE+66sB
wuwVH8bgOMQJiRyXB6JtDnSXw/EDP9ePwtZ7lktRu3SItGsCggBlsuD+GoofZZyI
uBG9xX4TWEi9tR28m13Vra29RPA9lccN/CDnzUDazns5HH5rCzhFM8jKdCPnWfUJ
OrTuiSoL/AGkLtLh2feI577Cnnsl5yZTMCh/AjM3vMNl3LOKTPV4vkF8rZEgXJgD
Vxrug+Y6TXsx7A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:19 2025 by rpki-client