Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
File:                     LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft (raw, json)
Hash identifier:          1nWIhudC8C+zliIF6O75hA54tZ9/njmdmLU+rV7g84Y=
Subject key identifier:   95:17:80:E2:31:3A:13:1C:82:1F:96:11:2C:A9:FE:74:87:7A:4F:A1
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Certificate issuer:       /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial:       01983A6096E80FD6741B11E90C2DDCBACFE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
Manifest number:          024B
Signing time:             Thu 24 Jul 2025 03:01:05 +0000
Manifest this update:     Thu 24 Jul 2025 03:01:05 +0000
Manifest next update:     Fri 25 Jul 2025 03:01:05 +0000
Files and hashes:         1: 8g3NogRlabC8Z_hnfpoj_zWBnHY.roa (hash: pm8YEsy4se+cQ515xuYmQpTq8mbRpNLbIFy98p9wal8=)
                          2: 9ufXbM9venYhxl-SvGpc6GfgiXw.roa (hash: Ac/t4dFO//WUk7pf4os6/uGOArEztMkq7kLNqY6xpWY=)
                          3: Ew2u4fx_aQ9zMEtqOWMhDa5V7nE.roa (hash: x28lvMc0qdwGJwKWszESdc/fXn/X5nd+KMthC+H7owI=)
                          4: LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl (hash: WDoBO8RyQ+wHRU8axaHGXDzHktyeFggZksixPyzrE8U=)
                          5: MNBepLkXuJ8Jm9GWmTHPAdtgz5w.roa (hash: 9rKYrh4EQUFU6meq5WeGRqqsHIEgQ/Pl+NaWlQVkw24=)
                          6: NwU8hI1qGvuTrLRz9doXxOfU-ic.roa (hash: uPzfnmuMOWT9fjCFZJcxLXfz0ZTVPu0alfKcT93uFzc=)
                          7: P6XaJ7TdHbOqlto-yAH0frSAI50.roa (hash: PsLfkW8kXZ71QT50jEPl9iE7cJ5j7kESsz2bTm5wRaA=)
                          8: RVYgvNvLSEwae2gfgrn4pSY99rQ.roa (hash: 7zxbVWcnsKTEz5YJl0Lu/xSHIaOqwlZhiMmkg2NjjQI=)
                          9: RVm4rdCgdoI668nq8Q9miwJGBGo.roa (hash: qtrc2+m3M5DudD2OYj/rcT3g7PyOeBDCehvsJIWl2AQ=)
                          10: VWXUtPP-EA7bklFBJKhwAHylxdI.roa (hash: uo05tkwCR+OwjX2SQhG6kgZeLpSiB4XzGba/1RV5qI4=)
                          11: YpemcT9XuU9BeXZ8G0El93eJmz8.roa (hash: 2nO0ugtgIMpx/F1Ccg+rVg0AztlIxNrAh5VvbMs/YzY=)
                          12: hfuRGlqVtKevQ2aso0eoSK4pVxA.roa (hash: VpMw91SkiTDR66ATsA8lTKqxFJHRA3o6ciJ2kUnbAN8=)
                          13: iZ5BNUFZRJn7y_9ZxCJ-W-SdfaY.roa (hash: pEFIpnuch1qRnOFnkvakcOhoMdolz6e61+pO/vjQc1g=)
                          14: ifStQJH6h61gXzd85oKxb1wYvIo.roa (hash: PYagtoYBUy4fLCAClzLwQB6c4RiUTsdHGxuWIrbYVfI=)
                          15: ls8GmpeT1B3YYCfRd0krF8wi7eQ.roa (hash: 0ddHz6E3qozuG71ukMuH+oYDD4RF0Lruu/ta2q80rNM=)
                          16: mOZNGctp3EsvRu4hpTryr_uaewA.roa (hash: puhCKO+m+eBOV3k1DR7imdSPzQ9zEzyyXVrCFpI9spg=)
                          17: o75SZJQB7BDg8jN7-wCLVZZU43Q.roa (hash: YoHLDv7i0DiKAwLzD3DQQKrRMEjj+3O1YcFwumNi5CE=)
                          18: oce0vAdHZPJLJnyFXqCXEZit-nQ.roa (hash: gVyDwGE4TyYisP9bml9ZpPqulI5h/0F63l6sk9zLLyU=)
                          19: th8VIy6ilOjsBnuJs5F-ma3hD5E.roa (hash: /EsPG2U4dQwt3L/d+3LRYLJaWFYWyBa2txVzoihJxU0=)
                          20: uG7dOE8txFbtA083hqiiPmz-wNo.roa (hash: +Kjd4p0Rj4WqNIufiKEaL7E/obgt+Fkv7edrXdKmLVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 03:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3a:60:96:e8:0f:d6:74:1b:11:e9:0c:2d:dc:ba:cf:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
        Validity
            Not Before: Jul 24 03:01:05 2025 GMT
            Not After : Jul 25 03:01:05 2025 GMT
        Subject: CN=951780e2313a131c821f96112ca9fe74877a4fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fd:51:26:83:9e:46:95:eb:24:9a:64:31:0e:
                    26:a2:39:6b:65:29:58:39:7c:c5:eb:3a:26:dc:e7:
                    6c:48:bf:4f:3d:13:ea:ad:30:4e:0e:8b:23:6e:4d:
                    2f:bc:e6:68:ec:5b:44:c4:9f:c7:c3:7c:c8:63:cd:
                    e0:ee:40:b8:5e:b5:fc:a0:42:67:8c:c5:6c:24:e6:
                    45:16:88:2f:d3:82:6a:a4:b2:39:70:20:e7:5d:ff:
                    4f:b0:cf:e1:d0:fd:3f:13:f8:87:9e:61:cf:aa:09:
                    dd:94:a1:34:b9:51:8b:da:2f:2a:87:7a:54:ea:af:
                    76:70:1f:69:06:cc:9d:e7:54:6c:33:c1:de:dc:15:
                    4e:e4:ce:c0:87:dd:97:25:1c:64:a2:77:2b:49:ee:
                    36:9d:56:24:1c:6e:a1:d3:dc:3a:f8:c6:9c:e7:37:
                    b0:54:22:eb:cc:b9:a7:18:c5:47:75:92:b7:c1:a7:
                    f6:bd:0f:45:8e:aa:61:7c:fe:96:3e:fc:66:7d:6f:
                    ed:03:a9:08:da:a6:61:05:1f:56:3f:d3:28:b2:f0:
                    2c:19:4e:ad:2b:f3:b6:9a:95:05:c5:64:3a:6b:c9:
                    3e:a9:49:d3:55:3b:9a:1d:8a:fd:23:bd:67:41:1c:
                    6d:88:c0:c0:ad:d4:6b:39:61:dc:70:cd:d1:61:85:
                    d6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:17:80:E2:31:3A:13:1C:82:1F:96:11:2C:A9:FE:74:87:7A:4F:A1
            X509v3 Authority Key Identifier:
                keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:14:9e:0e:a4:13:48:44:d3:30:5c:40:7a:7b:3b:44:4b:79:
         c5:70:5c:44:a0:65:57:ec:25:a0:6b:f0:8e:ec:68:78:b0:a4:
         06:ad:e9:40:60:3c:ef:39:da:0c:14:7f:6f:a1:cb:e1:d8:80:
         0f:e2:34:5f:9e:24:6f:a4:c3:94:fc:8d:ca:3a:13:8b:94:97:
         f3:f8:71:b4:60:a5:46:75:e7:95:39:0d:fb:2e:e4:dd:52:69:
         eb:ba:e8:9b:47:9a:76:50:fc:db:92:76:38:a2:d7:2b:2a:50:
         b7:e1:08:81:c7:06:b3:97:fa:24:c4:f8:cb:c6:f2:3e:6a:73:
         6b:ff:29:cd:97:3e:43:05:54:78:de:14:2a:43:4b:35:35:ff:
         dc:7d:70:00:fc:3e:5e:a7:b0:e2:b0:31:18:e7:b2:f2:a7:29:
         bb:1e:44:95:a7:87:25:26:e1:98:c2:d9:dc:5c:d3:7f:01:cf:
         54:d4:6b:2c:66:70:7a:43:00:df:32:87:42:18:55:f8:80:b8:
         99:ae:4b:68:34:10:49:7d:6a:33:33:86:f9:04:53:62:88:e0:
         dc:37:1a:b3:cd:7f:93:68:08:b9:42:75:2a:24:d7:d3:f3:83:
         90:19:c5:73:8c:23:80:bd:0d:e1:2d:4f:36:d2:b8:d7:fa:d7:
         ff:d7:13:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:10:49 2025 by rpki-client