Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
File:                     LMV0mVRsTv1zD_hx3zvRr787nwE.mft (raw, json)
Hash identifier:          m0HSwG2wotDxJ3Z9HSTCf1gbz+lWUNF3z2OvvlgZ/Tg=
Subject key identifier:   52:46:43:06:82:2D:11:DE:FA:12:F0:88:E2:86:26:96:36:41:D5:27
Authority key identifier: 2C:C5:74:99:54:6C:4E:FD:73:0F:F8:71:DF:3B:D1:AF:BF:3B:9F:01
Certificate issuer:       /CN=2cc57499546c4efd730ff871df3bd1afbf3b9f01
Certificate serial:       019921E7636F0A4AAF2E7D014827C5BD34F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
Manifest number:          0E23
Signing time:             Sun 07 Sep 2025 02:00:36 +0000
Manifest this update:     Sun 07 Sep 2025 02:00:36 +0000
Manifest next update:     Mon 08 Sep 2025 02:00:36 +0000
Files and hashes:         1: 57uU1mBBwf2NTWvRUYQ88syCG_0.roa (hash: 29c5vB9J3vlsLvhEYhn9hPcXbpkgWlHiPuRjoYcpg3A=)
                          2: LMV0mVRsTv1zD_hx3zvRr787nwE.crl (hash: v+/F8oASdXjWeu7p/I5vxqWCqXQ7aqxOdrIWrRBZjF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:e7:63:6f:0a:4a:af:2e:7d:01:48:27:c5:bd:34:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cc57499546c4efd730ff871df3bd1afbf3b9f01
        Validity
            Not Before: Sep  7 02:00:36 2025 GMT
            Not After : Sep  8 02:00:36 2025 GMT
        Subject: CN=52464306822d11defa12f088e28626963641d527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:65:18:2f:ea:0e:91:d6:f7:12:b7:18:6b:92:
                    45:ef:ff:a2:97:f0:b6:44:3e:1c:e1:3f:9b:f5:97:
                    62:a4:ab:cf:e3:84:17:13:57:3c:b0:43:ca:cd:d6:
                    98:4e:c3:25:9f:45:92:11:c3:7f:49:be:56:ab:20:
                    c3:bb:af:83:be:8a:f0:e6:e7:31:4d:fc:25:70:e1:
                    0e:20:a3:02:a9:f5:14:82:78:34:93:5b:26:83:52:
                    44:f0:de:ad:93:b8:49:12:b6:94:1a:b1:af:98:b9:
                    a2:76:21:91:3c:d9:67:5c:ec:23:11:3c:f6:ae:2d:
                    73:46:ee:12:58:15:c2:bc:94:8e:4b:03:43:ef:94:
                    62:5e:e4:77:61:ff:a1:d3:ee:aa:cf:e9:eb:21:a6:
                    ee:e2:bd:11:3b:68:4b:34:ca:0b:94:d4:c2:7d:e7:
                    11:69:3c:80:3b:16:fc:9d:7a:aa:bf:c7:be:53:ee:
                    22:9b:4d:ce:99:d6:c7:72:b4:46:62:02:9b:42:85:
                    80:df:a7:a6:dc:ea:71:10:05:66:a1:50:14:2d:ba:
                    98:75:b5:b4:3c:05:f2:18:58:be:b4:5e:8b:f8:1e:
                    77:2a:ad:7f:e3:9e:9f:95:31:f3:17:20:cb:86:fa:
                    e1:35:08:ab:d3:d0:5c:93:3d:ac:a2:e1:5f:bf:97:
                    28:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:46:43:06:82:2D:11:DE:FA:12:F0:88:E2:86:26:96:36:41:D5:27
            X509v3 Authority Key Identifier:
                keyid:2C:C5:74:99:54:6C:4E:FD:73:0F:F8:71:DF:3B:D1:AF:BF:3B:9F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:99:1a:cd:09:01:8e:27:19:55:c1:c1:5f:4f:10:b7:e1:17:
         6f:44:27:5b:e5:3c:13:2e:f1:a3:56:a4:9b:21:16:d6:13:e2:
         dc:a1:d2:54:8e:88:1b:26:9d:91:73:5e:6e:1f:02:8f:25:c9:
         54:16:70:83:06:a6:cc:7e:cd:9e:ab:31:0f:af:8e:73:81:96:
         8e:3c:6e:64:04:08:79:1f:2f:25:8a:0a:2b:63:b2:8b:34:23:
         f9:7d:3a:0f:4b:13:0a:c6:53:45:c1:f2:7a:f6:d8:01:ad:0b:
         9b:80:31:dc:06:bd:3c:ab:1f:07:c9:dc:aa:0f:16:40:68:6c:
         f0:ba:2d:69:9d:4c:7b:1f:14:bc:96:a0:c1:0b:6c:65:20:32:
         b1:5b:74:eb:24:62:9d:50:7a:4a:58:12:53:94:a8:bf:28:7e:
         60:1c:27:ff:69:a0:b4:9e:cc:d7:6f:3e:1c:a6:c7:29:b3:d2:
         5c:02:74:1e:86:39:bd:49:5d:8c:f0:37:50:5d:23:76:fd:a9:
         42:5b:39:d3:8b:18:84:32:1f:9b:80:2e:20:96:7f:77:21:d2:
         23:83:b3:08:e1:45:66:8a:67:c4:84:6f:c4:ea:2d:82:d8:18:
         0d:4f:bb:ab:22:b2:fc:38:96:98:75:38:56:38:82:82:b0:e9:
         63:54:93:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh52NvCkqvLn0BSCfFvTT1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYzU3NDk5NTQ2YzRlZmQ3MzBmZjg3MWRmM2JkMWFmYmYz
YjlmMDEwHhcNMjUwOTA3MDIwMDM2WhcNMjUwOTA4MDIwMDM2WjAzMTEwLwYDVQQD
Eyg1MjQ2NDMwNjgyMmQxMWRlZmExMmYwODhlMjg2MjY5NjM2NDFkNTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2UYL+oOkdb3ErcYa5JF7/+il/C2
RD4c4T+b9ZdipKvP44QXE1c8sEPKzdaYTsMln0WSEcN/Sb5WqyDDu6+Dvorw5ucx
TfwlcOEOIKMCqfUUgng0k1smg1JE8N6tk7hJEraUGrGvmLmidiGRPNlnXOwjETz2
ri1zRu4SWBXCvJSOSwND75RiXuR3Yf+h0+6qz+nrIabu4r0RO2hLNMoLlNTCfecR
aTyAOxb8nXqqv8e+U+4im03OmdbHcrRGYgKbQoWA36em3OpxEAVmoVAULbqYdbW0
PAXyGFi+tF6L+B53Kq1/456flTHzFyDLhvrhNQir09Bckz2souFfv5coJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJGQwaCLRHe+hLwiOKGJpY2QdUnMB8GA1UdIwQY
MBaAFCzFdJlUbE79cw/4cd870a+/O58BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE1WMG1WUnNUdjF6RF9oeDN6dlJyNzg3bndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iNWJhMjktYjI5Zi00MDY1LTk4ZmIt
YjUyOWIwY2Y1NDExLzEvTE1WMG1WUnNUdjF6RF9oeDN6dlJyNzg3bndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iNWJhMjktYjI5Zi00MDY1LTk4ZmItYjUyOWIwY2Y1NDEx
LzEvTE1WMG1WUnNUdjF6RF9oeDN6dlJyNzg3bndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK5kazQkB
jicZVcHBX08Qt+EXb0QnW+U8Ey7xo1akmyEW1hPi3KHSVI6IGyadkXNebh8CjyXJ
VBZwgwamzH7NnqsxD6+Oc4GWjjxuZAQIeR8vJYoKK2OyizQj+X06D0sTCsZTRcHy
evbYAa0Lm4Ax3Aa9PKsfB8ncqg8WQGhs8LotaZ1Mex8UvJagwQtsZSAysVt06yRi
nVB6SlgSU5Sovyh+YBwn/2mgtJ7M128+HKbHKbPSXAJ0HoY5vUldjPA3UF0jdv2p
Qls504sYhDIfm4AuIJZ/dyHSI4OzCOFFZopnxIRvxOotgtgYDU+7qyKy/DiWmHU4
VjiCgrDpY1STgw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:10 2025 by rpki-client