Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
File:                     LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft (raw, json)
Hash identifier:          4+gSm4AC+z4NottWo1c9n8pzQEu5+vU5K0lW6yAAIMc=
Subject key identifier:   C2:72:1D:95:06:B2:68:00:90:5C:D4:48:AA:A9:A7:5A:27:8C:67:8A
Authority key identifier: 2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF
Certificate issuer:       /CN=2ca61567cb1099855117008fd1d36aa8ada96faf
Certificate serial:       019942F32005FEC88B5D3077D72D9A2D34F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
Manifest number:          0137
Signing time:             Sat 13 Sep 2025 12:00:53 +0000
Manifest this update:     Sat 13 Sep 2025 12:00:53 +0000
Manifest next update:     Sun 14 Sep 2025 12:00:53 +0000
Files and hashes:         1: 0ibK2rFO285XcmwVBGiaWy0mCcA.roa (hash: oJQ8kk++bxBUXY2O47Q7nsX7PbhR5uG9qTYOOM+oaS4=)
                          2: LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl (hash: ITvulu5Zjsn/F0IEMFKm3slzhQI0nKTSdRMOnUKEtv8=)
                          3: _GUEYp_ZvXFjTzg6X0GYxguDxqk.roa (hash: ILywVwzLVmDK7onvjHWRnavh4R3aawRApY/DmqcCPJA=)
                          4: s4XGskQFU7_Cf6_mWSLuiAFByjk.roa (hash: nc4Vl3rpM+BRB2fbj+46n9BE/ubeond5FkvagoQcDxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Sep 2025 11:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:42:f3:20:05:fe:c8:8b:5d:30:77:d7:2d:9a:2d:34:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ca61567cb1099855117008fd1d36aa8ada96faf
        Validity
            Not Before: Sep 13 12:00:53 2025 GMT
            Not After : Sep 14 12:00:53 2025 GMT
        Subject: CN=c2721d9506b26800905cd448aaa9a75a278c678a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:b4:ce:cb:31:37:8f:e7:8c:2f:69:c7:99:
                    69:4b:45:67:c4:60:ef:af:81:df:51:33:2c:02:0e:
                    aa:17:d0:c1:73:c0:4e:fe:41:f6:84:2c:3b:41:b1:
                    9e:81:a5:62:a4:9c:e1:c2:f3:07:e0:cc:8a:4c:84:
                    af:a5:38:64:0a:80:28:8e:5c:a4:1a:91:4a:1e:70:
                    f8:cb:8f:d9:48:82:aa:74:99:c0:bb:34:78:cb:63:
                    bc:5b:d2:d6:c3:63:42:75:6f:bc:5b:6d:fc:cd:6c:
                    42:d0:3d:94:43:c4:02:48:13:4d:c2:a7:42:9a:53:
                    68:85:3e:f0:39:bc:8f:72:ad:b4:ae:c8:29:67:e3:
                    84:4d:d9:96:0d:11:31:2d:ca:a9:4a:f1:ef:b2:3e:
                    7c:33:63:cf:9e:9e:97:aa:09:89:4b:4c:00:b7:22:
                    10:f7:99:e7:1e:28:b3:52:2b:cc:08:54:a9:f4:97:
                    81:9c:30:42:cd:27:43:12:89:df:11:2b:a0:19:27:
                    f6:f4:55:0e:00:2d:29:12:f4:1b:5d:70:8e:42:27:
                    84:0b:d7:c2:87:81:f8:cb:45:3d:b2:f3:ce:da:ca:
                    44:28:34:5a:85:b2:2b:45:0e:3d:50:8c:fe:15:8f:
                    3f:a0:70:6f:5b:3c:36:f2:97:7b:b2:96:b8:43:6d:
                    a6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:72:1D:95:06:B2:68:00:90:5C:D4:48:AA:A9:A7:5A:27:8C:67:8A
            X509v3 Authority Key Identifier:
                keyid:2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:46:8d:63:ac:4c:11:78:60:31:4c:ed:c4:37:c7:67:88:9b:
         57:48:a1:72:ff:0c:8c:38:a7:68:f0:ba:cd:fe:a0:b9:36:cd:
         ef:41:45:3c:b2:27:8d:1f:91:25:e5:8a:b7:5f:9a:42:db:78:
         ce:b1:cc:19:b3:7b:c3:bc:bb:58:ae:6d:93:a4:55:f6:8e:82:
         fd:b6:26:49:98:f1:09:85:08:36:5c:f0:2d:36:5a:4a:11:e2:
         57:fc:6a:ba:1d:a8:00:f5:45:a3:b7:62:bf:95:79:03:ca:3b:
         cb:3f:8b:f9:ea:4e:ec:8f:c8:2c:02:e3:e1:c1:82:81:ec:03:
         b6:4b:08:f1:f9:f2:e6:26:4e:b2:99:7f:f9:e4:57:92:44:92:
         2c:a5:84:fa:d4:9e:94:74:93:bd:e5:24:f3:97:75:91:ad:76:
         df:5b:a2:c9:2d:c7:2e:40:ec:13:0b:26:b1:82:90:ec:d9:5b:
         da:82:35:ae:77:c6:20:ab:1f:a9:8d:3f:4a:64:99:c2:73:70:
         2a:89:87:a8:ad:0b:e0:5b:7f:55:3c:bc:11:60:82:87:13:6a:
         41:cc:60:9e:a4:05:22:b2:0d:c4:7c:98:ad:b7:c0:92:60:8f:
         ca:28:e5:bd:91:e9:ee:ad:af:af:e0:eb:1a:c0:46:42:98:c9:
         b0:be:9f:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlC8yAF/siLXTB31y2aLTT5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYTYxNTY3Y2IxMDk5ODU1MTE3MDA4ZmQxZDM2YWE4YWRh
OTZmYWYwHhcNMjUwOTEzMTIwMDUzWhcNMjUwOTE0MTIwMDUzWjAzMTEwLwYDVQQD
EyhjMjcyMWQ5NTA2YjI2ODAwOTA1Y2Q0NDhhYWE5YTc1YTI3OGM2NzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU60zssxN4/njC9px5lpS0VnxGDv
r4HfUTMsAg6qF9DBc8BO/kH2hCw7QbGegaVipJzhwvMH4MyKTISvpThkCoAojlyk
GpFKHnD4y4/ZSIKqdJnAuzR4y2O8W9LWw2NCdW+8W238zWxC0D2UQ8QCSBNNwqdC
mlNohT7wObyPcq20rsgpZ+OETdmWDRExLcqpSvHvsj58M2PPnp6XqgmJS0wAtyIQ
95nnHiizUivMCFSp9JeBnDBCzSdDEonfESugGSf29FUOAC0pEvQbXXCOQieEC9fC
h4H4y0U9svPO2spEKDRahbIrRQ49UIz+FY8/oHBvWzw28pd7spa4Q22mGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJyHZUGsmgAkFzUSKqpp1onjGeKMB8GA1UdIwQY
MBaAFCymFWfLEJmFURcAj9HTaqitqW+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEtZVlo4c1FtWVZSRndDUDBkTnFxSzJwYjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yYTcxNGUtYzdkMy00N2I1LThjNTct
Y2FhN2Q1YjQ4MmM1LzEvTEtZVlo4c1FtWVZSRndDUDBkTnFxSzJwYjY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yYTcxNGUtYzdkMy00N2I1LThjNTctY2FhN2Q1YjQ4MmM1
LzEvTEtZVlo4c1FtWVZSRndDUDBkTnFxSzJwYjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0aNY6xM
EXhgMUztxDfHZ4ibV0ihcv8MjDinaPC6zf6guTbN70FFPLInjR+RJeWKt1+aQtt4
zrHMGbN7w7y7WK5tk6RV9o6C/bYmSZjxCYUINlzwLTZaShHiV/xquh2oAPVFo7di
v5V5A8o7yz+L+epO7I/ILALj4cGCgewDtksI8fny5iZOspl/+eRXkkSSLKWE+tSe
lHSTveUk85d1ka1231uiyS3HLkDsEwsmsYKQ7Nlb2oI1rnfGIKsfqY0/SmSZwnNw
KomHqK0L4Ft/VTy8EWCChxNqQcxgnqQFIrINxHyYrbfAkmCPyijlvZHp7q2vr+Dr
GsBGQpjJsL6frw==
-----END CERTIFICATE-----
Generated at Sat Sep 13 19:17:31 2025 by rpki-client