Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
File:                     LcgdJMRd2qNF-QZN4p-8p7EppSw.mft (raw, json)
Hash identifier:          LTdIjC3c0KhWveZbWIcAGoXqwg0iyaT90EbveMYbp6U=
Subject key identifier:   34:05:CE:D6:F5:98:2E:B1:2C:08:8C:AE:BB:26:1C:1A:AC:6E:30:6F
Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
Certificate issuer:       /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Certificate serial:       019A06DB087B55F8654A49BF06EEDF3635D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
Manifest number:          16FE
Signing time:             Tue 21 Oct 2025 13:00:09 +0000
Manifest this update:     Tue 21 Oct 2025 13:00:09 +0000
Manifest next update:     Wed 22 Oct 2025 13:00:09 +0000
Files and hashes:         1: FXFqiNCQgnl4zceZCPpQZuhS9mk.roa (hash: qAfQEueMeCHzv9em2IARM0wMF8ekNaNhDyPjALv1VGg=)
                          2: LcgdJMRd2qNF-QZN4p-8p7EppSw.crl (hash: Z+s5WEdqWUYMqQRa8CY3FcXptjN6ISqjCgy/Ja9H61U=)
                          3: Tqry6ntz7b3kTeJ5OCnwPvloJIw.roa (hash: y/Hg2mPZLnUNHUkA7kXq+J0F+bsaFDCzyOC2OJvkyTk=)
                          4: _UPJ8qHXYmScIPdo47sXULCowxc.roa (hash: x+bwdKrD+TEkJ3sWZza6bM8RVF+G5YSW9hY6F/RhNRI=)
                          5: fd3RJJ6-t5MPxFMjaOieMyrNj1Q.roa (hash: Gp0oxYbqR8uF0JIVNiZGflyEv6T2n/2lVC4AqntijqM=)
                          6: iCEtvdo35QYS0XZzbCSkUBvLIzs.roa (hash: zyoo6UPzEwr9Wic7Dppcx0mzsl7aajEnMpuXSdefYMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 13:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:06:db:08:7b:55:f8:65:4a:49:bf:06:ee:df:36:35:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
        Validity
            Not Before: Oct 21 13:00:09 2025 GMT
            Not After : Oct 22 13:00:09 2025 GMT
        Subject: CN=3405ced6f5982eb12c088caebb261c1aac6e306f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:54:02:8a:22:b6:ba:e9:ca:42:e4:4a:1c:b8:
                    3b:19:df:64:3e:05:0e:ad:ce:18:d1:4d:9f:a9:be:
                    15:47:e0:ef:f4:bd:28:b7:c9:da:eb:63:96:dc:59:
                    ac:db:18:18:cd:3d:64:0e:62:78:d9:21:51:01:17:
                    9f:79:6b:86:ff:1f:f0:72:d9:81:3f:27:f2:50:37:
                    7e:b7:fc:00:f0:47:aa:dc:9e:18:8c:59:3d:4f:b6:
                    1d:b4:e1:35:b5:f4:88:e6:90:d1:11:3e:ba:a3:82:
                    e6:07:ea:e1:5f:5a:aa:d1:1d:56:ab:b4:59:5f:a8:
                    3f:2c:ec:74:d4:20:4b:49:26:59:31:63:4b:1e:30:
                    f4:d4:a7:7c:a5:63:cb:88:8f:cd:6b:3d:c5:7f:d0:
                    0c:0f:3a:dc:18:a3:f5:a8:17:dd:bb:5f:0e:db:08:
                    e4:49:41:b2:b3:b4:d3:09:c2:e3:01:32:bd:4d:e1:
                    69:c1:63:30:42:f3:3d:1a:ec:4d:ee:9d:5d:ed:4f:
                    45:d9:25:22:24:a1:e1:1e:de:85:09:a3:70:5d:51:
                    9b:b6:42:3a:e5:58:59:56:fe:c8:73:b3:3d:98:c7:
                    c2:05:0f:aa:26:de:50:e7:54:bb:bd:1d:6d:de:31:
                    53:bc:e1:55:fb:b8:4f:6d:61:ff:79:df:02:b2:ff:
                    f2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:05:CE:D6:F5:98:2E:B1:2C:08:8C:AE:BB:26:1C:1A:AC:6E:30:6F
            X509v3 Authority Key Identifier:
                keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:74:c3:c6:5a:8d:6a:99:87:b4:58:c9:7f:56:a9:c5:a4:87:
         2f:40:f3:5f:0d:c3:c9:6c:ac:a7:32:27:e5:53:75:1d:05:0e:
         04:fa:09:da:69:42:05:3a:d2:94:1d:d3:de:fe:2b:32:8d:02:
         80:a4:92:cf:2d:34:a1:f7:78:69:6c:15:3b:4e:3a:c8:95:d0:
         39:5f:39:b0:d2:9b:5d:a6:15:c0:d5:bd:14:20:33:dd:8c:a9:
         bd:72:8a:b3:66:92:bf:9d:96:82:2d:ae:7d:f7:8c:6b:0c:06:
         76:f8:11:3f:94:ac:6c:24:1f:0a:d0:0b:19:80:1e:67:9d:1f:
         77:46:a3:35:42:1f:e2:46:9b:21:7e:5b:1b:c5:6a:88:50:fb:
         db:6a:e1:dc:16:1b:0d:0a:48:c4:5e:2e:f9:33:bf:ff:71:ce:
         ae:f0:31:27:f1:72:f0:ed:0f:22:e7:56:e1:27:53:26:b8:1c:
         61:58:c6:a3:db:53:7d:94:9b:fc:99:5c:6f:eb:4f:fb:a7:85:
         2e:f6:25:c1:5e:62:83:1e:38:8a:55:36:7a:5a:b1:dd:7d:ba:
         4e:a8:41:8a:90:9d:82:59:7b:12:1e:25:d0:9a:0d:94:eb:16:
         1f:f8:79:13:e4:fb:3c:c1:43:e9:84:38:99:02:bc:bf:93:c5:
         e1:6e:c1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 23:25:38 2025 by rpki-client