Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
File:                     LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft (raw, json)
Hash identifier:          0Giy/c7G0IjpoOKjBgWIdPXdPNQWMUwQePf12UdLo6E=
Subject key identifier:   6A:B3:9D:2A:D8:E3:CC:14:F0:6A:EA:39:88:72:AE:67:36:34:5D:A7
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Certificate issuer:       /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial:       01983495BB12683FAD5BD44A15F9177DE2C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
Manifest number:          0246
Signing time:             Wed 23 Jul 2025 00:01:24 +0000
Manifest this update:     Wed 23 Jul 2025 00:01:24 +0000
Manifest next update:     Thu 24 Jul 2025 00:01:24 +0000
Files and hashes:         1: 8g3NogRlabC8Z_hnfpoj_zWBnHY.roa (hash: pm8YEsy4se+cQ515xuYmQpTq8mbRpNLbIFy98p9wal8=)
                          2: 9ufXbM9venYhxl-SvGpc6GfgiXw.roa (hash: Ac/t4dFO//WUk7pf4os6/uGOArEztMkq7kLNqY6xpWY=)
                          3: Ew2u4fx_aQ9zMEtqOWMhDa5V7nE.roa (hash: x28lvMc0qdwGJwKWszESdc/fXn/X5nd+KMthC+H7owI=)
                          4: LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl (hash: A4OQt/qOtF8a6QszO9nDsAlSExzWjXCBnavS20uOF88=)
                          5: NwU8hI1qGvuTrLRz9doXxOfU-ic.roa (hash: uPzfnmuMOWT9fjCFZJcxLXfz0ZTVPu0alfKcT93uFzc=)
                          6: RVYgvNvLSEwae2gfgrn4pSY99rQ.roa (hash: 7zxbVWcnsKTEz5YJl0Lu/xSHIaOqwlZhiMmkg2NjjQI=)
                          7: RVm4rdCgdoI668nq8Q9miwJGBGo.roa (hash: qtrc2+m3M5DudD2OYj/rcT3g7PyOeBDCehvsJIWl2AQ=)
                          8: VWXUtPP-EA7bklFBJKhwAHylxdI.roa (hash: uo05tkwCR+OwjX2SQhG6kgZeLpSiB4XzGba/1RV5qI4=)
                          9: YpemcT9XuU9BeXZ8G0El93eJmz8.roa (hash: 2nO0ugtgIMpx/F1Ccg+rVg0AztlIxNrAh5VvbMs/YzY=)
                          10: hfuRGlqVtKevQ2aso0eoSK4pVxA.roa (hash: VpMw91SkiTDR66ATsA8lTKqxFJHRA3o6ciJ2kUnbAN8=)
                          11: iZ5BNUFZRJn7y_9ZxCJ-W-SdfaY.roa (hash: pEFIpnuch1qRnOFnkvakcOhoMdolz6e61+pO/vjQc1g=)
                          12: ifStQJH6h61gXzd85oKxb1wYvIo.roa (hash: PYagtoYBUy4fLCAClzLwQB6c4RiUTsdHGxuWIrbYVfI=)
                          13: ls8GmpeT1B3YYCfRd0krF8wi7eQ.roa (hash: 0ddHz6E3qozuG71ukMuH+oYDD4RF0Lruu/ta2q80rNM=)
                          14: mOZNGctp3EsvRu4hpTryr_uaewA.roa (hash: puhCKO+m+eBOV3k1DR7imdSPzQ9zEzyyXVrCFpI9spg=)
                          15: o75SZJQB7BDg8jN7-wCLVZZU43Q.roa (hash: YoHLDv7i0DiKAwLzD3DQQKrRMEjj+3O1YcFwumNi5CE=)
                          16: oce0vAdHZPJLJnyFXqCXEZit-nQ.roa (hash: gVyDwGE4TyYisP9bml9ZpPqulI5h/0F63l6sk9zLLyU=)
                          17: th8VIy6ilOjsBnuJs5F-ma3hD5E.roa (hash: /EsPG2U4dQwt3L/d+3LRYLJaWFYWyBa2txVzoihJxU0=)
                          18: uG7dOE8txFbtA083hqiiPmz-wNo.roa (hash: +Kjd4p0Rj4WqNIufiKEaL7E/obgt+Fkv7edrXdKmLVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:34:95:bb:12:68:3f:ad:5b:d4:4a:15:f9:17:7d:e2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
        Validity
            Not Before: Jul 23 00:01:24 2025 GMT
            Not After : Jul 24 00:01:24 2025 GMT
        Subject: CN=6ab39d2ad8e3cc14f06aea398872ae6736345da7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d3:54:77:27:cb:c8:0a:81:8c:5f:89:38:1b:
                    fa:8f:28:0a:16:f3:04:83:7b:20:3a:2e:5f:16:6f:
                    e5:ac:05:43:b9:94:cf:c0:27:a8:cc:b7:2b:8e:ab:
                    1f:aa:e9:c9:0c:12:f2:80:cb:e4:6e:b4:d8:42:6b:
                    eb:ad:6a:c9:27:b3:13:47:d2:d6:7e:32:46:a1:2c:
                    55:df:ac:36:d9:eb:e5:2f:4e:a4:ab:21:34:d3:5e:
                    a5:9c:31:57:e0:d6:1d:d0:ed:e8:40:30:3d:ef:89:
                    8e:d7:b8:99:90:7c:22:51:61:ee:bb:a5:47:c0:ae:
                    52:53:db:70:26:d1:68:f2:bd:91:19:75:48:55:43:
                    2a:64:81:25:4c:df:24:2c:1f:b2:b7:55:77:33:9b:
                    1f:09:87:5f:80:0b:0f:86:0c:e8:6b:0c:2b:ef:4e:
                    30:17:95:1c:7a:e6:d4:e7:be:df:9e:5e:62:50:75:
                    f5:bd:87:99:5c:f4:ba:bd:bb:0d:5f:03:2a:13:84:
                    94:d9:a3:10:97:2e:aa:73:7b:3f:b0:be:f7:b1:48:
                    8f:a3:71:9c:b0:59:bc:59:cb:84:7d:c5:41:e8:c3:
                    6d:01:f8:8f:1f:af:c5:48:b6:f4:2d:25:3c:0e:45:
                    6f:b7:68:f9:00:b5:c2:76:bb:65:43:da:fb:e6:91:
                    ce:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B3:9D:2A:D8:E3:CC:14:F0:6A:EA:39:88:72:AE:67:36:34:5D:A7
            X509v3 Authority Key Identifier:
                keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:15:f4:28:7e:27:e1:91:ec:1b:6f:22:b1:64:30:8c:d0:23:
         23:df:67:94:62:2b:c2:af:62:4b:62:bd:7a:b9:af:7d:41:99:
         c5:3c:5f:57:00:b7:b2:5d:bf:f6:df:b9:63:ae:8f:a1:20:91:
         6e:8e:44:8e:07:fb:a8:31:2b:6c:f5:be:fe:6a:b0:43:b2:f8:
         7e:bb:b6:66:20:d2:72:a7:f5:b0:89:55:77:de:51:a6:f5:14:
         60:b6:80:b6:d0:4a:70:0e:a1:d1:43:16:05:a8:af:d3:c7:ac:
         79:ee:e1:af:f0:bd:a5:90:f6:3f:6e:e5:e2:7f:7a:a7:66:a6:
         85:d6:00:ce:66:b1:d9:19:d3:a3:cd:40:bb:b5:6c:bf:8f:3f:
         2d:e8:2c:6f:e5:92:e8:92:1d:42:b5:bf:ac:24:c2:ce:a4:32:
         4c:27:36:f3:34:39:e9:02:41:19:b4:92:d1:ad:0b:ef:b0:c5:
         04:6a:6e:d4:2e:ef:e2:f1:ec:6e:da:15:28:90:ea:a4:5b:ca:
         a7:28:3d:b6:36:22:fc:8a:d6:3f:4a:f0:27:06:a0:6e:f4:6e:
         ac:1a:7a:69:d8:69:bb:e3:94:53:50:ec:d3:83:30:4f:bc:ca:
         bc:10:18:9b:92:6f:32:6c:76:c7:1e:49:76:37:a9:af:1b:41:
         2b:aa:42:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:13:25 2025 by rpki-client