Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
File:                     LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft (raw, json)
Hash identifier:          BnkZM0YPKrQPvZZujfhzeXdChPVu6j/ugVKsNDYAQus=
Subject key identifier:   4C:12:92:73:26:50:B5:FB:ED:55:E6:F2:94:23:57:95:D3:6C:4E:B8
Authority key identifier: 2D:2C:C1:39:32:19:51:DB:27:6F:3F:FA:29:3A:C0:A0:F3:FA:8B:F7
Certificate issuer:       /CN=2d2cc139321951db276f3ffa293ac0a0f3fa8bf7
Certificate serial:       0199FB7CD7FF2166FEF38D8AA5B601CC01C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
Manifest number:          0185
Signing time:             Sun 19 Oct 2025 08:01:26 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:26 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:26 +0000
Files and hashes:         1: 6Y-dz23_E1vFq4knErbs01-uZMw.roa (hash: rAKus0aYY6lzOdl0PAY4O4iIsDrPWnm0ZrrdK7p/52I=)
                          2: LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl (hash: oXQPVjHcu2U/ab8Pnso8xgOL3YoYN+oNnLLoLKFSbV0=)
                          3: OMjXgufGu7qz8nFaTx0akX2s_bA.roa (hash: BFAAWnjI4vlasJk/UdPdP2Sw5YmLCiP6pm/D70iwFGw=)
                          4: haci0wHWv3PDyudz0_g5F_r8gmQ.roa (hash: xpWgQhWnTLkyOHdJXW4G6WZ622/WFwOg5U25NN+USho=)
                          5: jWARhOvQnhRQXkxxUF1RCZ8Xr5g.roa (hash: 4x96g8YlVB8qqXIZOypAO1dDSyWsSe2A0i/2gmJhRDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:d7:ff:21:66:fe:f3:8d:8a:a5:b6:01:cc:01:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cc139321951db276f3ffa293ac0a0f3fa8bf7
        Validity
            Not Before: Oct 19 08:01:26 2025 GMT
            Not After : Oct 20 08:01:26 2025 GMT
        Subject: CN=4c1292732650b5fbed55e6f294235795d36c4eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:14:7b:2f:29:dd:89:7a:75:6f:1d:8d:f1:49:
                    16:33:5c:71:8d:66:9e:10:3f:d8:1a:c0:c0:5e:4e:
                    77:3d:33:41:89:30:ac:e3:6c:2d:fc:63:31:eb:7d:
                    3b:f4:4e:7f:1a:2b:ed:07:20:49:38:4c:81:46:4d:
                    2b:e5:61:34:32:fb:68:30:6c:f1:13:84:40:c3:38:
                    92:3b:a7:ff:97:2f:78:9e:f3:50:04:79:a7:fa:04:
                    c9:2b:58:05:c9:bd:fe:04:43:f6:8a:4e:bd:09:6b:
                    3a:2c:e4:ab:4a:d9:82:da:2b:a3:d4:09:7e:61:3f:
                    67:c7:04:87:36:fc:07:74:cf:0d:cf:64:0f:b7:ee:
                    12:18:32:6a:f9:b5:bf:66:46:af:97:ad:62:30:36:
                    42:e5:d4:c6:6c:05:84:b4:5e:7f:01:1f:29:42:dd:
                    aa:d8:86:4e:1a:ec:a8:be:ad:7d:39:e4:be:b0:f3:
                    27:b8:9e:02:56:88:f2:fa:93:11:84:04:2a:d3:2a:
                    6e:94:ae:72:30:65:59:da:58:bc:42:65:51:0b:40:
                    98:b4:95:f6:74:af:5a:e6:55:fe:0a:22:2a:6a:71:
                    1d:1c:97:17:bf:30:2d:f4:20:ae:61:70:24:a4:60:
                    e2:13:01:ce:9c:66:22:5e:32:4b:e2:04:50:db:9a:
                    b8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:12:92:73:26:50:B5:FB:ED:55:E6:F2:94:23:57:95:D3:6C:4E:B8
            X509v3 Authority Key Identifier:
                keyid:2D:2C:C1:39:32:19:51:DB:27:6F:3F:FA:29:3A:C0:A0:F3:FA:8B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:1e:6d:2a:bb:2a:79:92:96:74:bf:82:55:61:62:14:6a:c2:
         e0:26:07:c0:72:02:54:92:de:95:9a:d3:98:3b:de:35:66:e2:
         1d:c5:2a:51:d3:75:ad:9d:b9:66:87:4b:a1:3c:21:b7:45:45:
         42:49:e4:25:ef:8d:26:9f:7e:b0:d9:74:d6:68:3b:7d:b6:3e:
         5d:5f:c0:04:e4:9e:bd:65:28:12:0f:0c:ed:f8:ae:87:a7:dc:
         e4:bb:bb:fb:db:01:c7:49:e3:4f:6a:09:03:1a:3d:45:44:ff:
         57:04:ff:7f:96:e0:10:48:72:87:d8:1e:01:1c:99:6d:f5:8f:
         16:c4:e0:4a:35:9f:1f:9d:31:71:1a:48:c5:b6:59:07:b6:9f:
         f6:f2:ad:d0:df:de:7a:74:a8:62:d2:01:84:60:f8:16:56:b4:
         ad:25:51:86:62:15:8f:85:e4:d5:ae:74:7a:e8:0a:90:ad:a0:
         46:f1:22:60:e3:10:b3:a2:bb:d7:26:4b:9b:74:9f:0c:6a:d1:
         47:3d:e3:64:a7:17:e1:b6:4d:1a:04:d4:96:26:12:0d:af:c6:
         3c:50:c9:af:bf:75:9e:0d:4e:b1:48:ae:30:fa:5c:91:11:e9:
         2e:70:b1:f1:6c:68:75:ec:74:40:e0:a7:e2:ed:7b:57:93:b9:
         0f:6e:07:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:06 2025 by rpki-client