
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
File:                     LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft (raw, json)
Hash identifier:          6ceYJo+b7qjGZwKzrCmaK7HXfyUyHL62tEnWaMsLDBM=
Subject key identifier:   27:72:69:6E:DE:21:F5:3C:B9:F3:F7:9B:67:49:36:DA:B8:01:BF:1C
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Certificate issuer:       /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial:       019A4D3CF255403FAF317384BD25717E53A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
Manifest number:          07AE
Signing time:             Tue 04 Nov 2025 05:00:31 +0000
Manifest this update:     Tue 04 Nov 2025 05:00:31 +0000
Manifest next update:     Wed 05 Nov 2025 05:00:31 +0000
Files and hashes:         1: 86xyLg9Vhu1lk5RReT6Rdf_tmoI.roa (hash: j1UEYdI/3BGkPHWxLGmlianOUX6y8XMwomdD1NaeQqE=)
                          2: DNGDsibsMhX2Jm35ON8Z46A3KTk.roa (hash: IiQeZ36+XfzMEhi+j/AEKPMJtu/iUB+BlQw1Cz0Efws=)
                          3: ISe6Pp3VA_kxRdnQPPWGbrrMrrw.roa (hash: jRDpIWsPHeWViUOgK2ZXMO2/p/iubNFjVCoGO2Bmfv0=)
                          4: LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl (hash: 2sRbK3BvEFwg644e28NaRS7fowvRqGunVTTqGgudMSQ=)
                          5: aEkNJUT61sGLTRPZbM8A8m6bdBA.roa (hash: Oa5uK8ZTSu+K2eTr8GSg09GYxr4c/ZbA9ZN9SGGpyMM=)
                          6: jjSMkguCrtN8dke8B6BypY8W9bE.roa (hash: FKDJSDKH8RGck3prDQ6XfAn1r+nBQFd0Ov1wTU/64lk=)
                          7: jvqaPKegN_TBTkX1iGxxtfLozMg.roa (hash: XuER/cHOoxfeKVPHA4CmD36sE1MXBYBHja2ydtJkaoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 05:00:31 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:3c:f2:55:40:3f:af:31:73:84:bd:25:71:7e:53:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
        Validity
            Not Before: Nov  4 05:00:31 2025 GMT
            Not After : Nov  5 05:00:31 2025 GMT
        Subject: CN=2772696ede21f53cb9f3f79b674936dab801bf1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c3:db:84:43:f6:a0:0d:d4:ac:a5:74:f1:05:
                    ed:69:e9:70:38:a4:7e:cb:1d:eb:20:82:0e:cd:c7:
                    5a:38:58:b5:89:4d:50:63:27:06:f7:a5:9f:f8:dc:
                    cf:b0:5d:60:75:f2:2b:fc:88:2a:6b:7d:07:3b:aa:
                    81:12:02:82:ec:92:85:73:fb:4f:c6:69:80:e5:28:
                    1d:bc:f4:07:63:43:39:e3:4c:da:42:1e:09:62:dd:
                    6c:27:34:2b:4b:eb:2e:45:a7:92:52:c8:3a:d6:ef:
                    a0:bf:2b:cf:25:2d:de:64:b6:a4:c1:95:b1:b0:1f:
                    3c:7e:6f:c5:bb:43:68:db:58:1c:53:5e:f2:7c:c6:
                    b3:f3:a4:23:44:36:1c:b7:73:5f:c4:dc:8e:78:ce:
                    e4:a7:d6:38:10:43:e0:11:6f:c3:61:f6:9a:ff:56:
                    36:94:94:44:72:6e:53:f4:66:c7:03:0c:ac:fc:9c:
                    7c:14:68:8e:74:ca:15:cd:87:18:dd:6e:c7:ea:2b:
                    92:bd:ef:5f:f2:b5:5d:f2:46:59:36:89:d1:31:08:
                    2e:b4:1d:7b:3e:cf:42:42:f2:52:28:36:25:81:83:
                    59:3b:d1:73:e4:87:20:7a:3d:47:ef:64:02:65:65:
                    d5:f8:07:66:68:ae:58:81:f3:fa:ec:8b:c5:5d:2f:
                    a6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:72:69:6E:DE:21:F5:3C:B9:F3:F7:9B:67:49:36:DA:B8:01:BF:1C
            X509v3 Authority Key Identifier:
                keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         1a:0a:77:18:71:d7:d3:90:75:9d:29:97:59:74:12:bb:ac:92:
         b6:51:17:25:92:dc:1e:e7:1d:33:13:00:34:82:c7:2c:5d:a0:
         65:73:25:54:2a:7d:22:94:13:96:4c:14:bb:9c:ca:1f:d9:08:
         15:62:27:1a:67:4f:e2:3a:6f:3e:da:24:d9:ee:40:91:b1:4d:
         87:03:ee:0f:0c:87:c9:9c:b2:04:fa:ef:fc:c2:f2:ec:22:d6:
         55:4d:4d:24:33:87:2b:1d:73:a2:c3:77:11:84:54:ac:52:f1:
         0f:01:19:ae:c7:96:74:44:b9:29:40:99:0a:3d:82:65:a6:9c:
         70:de:f8:dc:85:92:22:35:4a:78:2d:d6:57:9b:33:a7:9e:73:
         0e:9f:cc:1f:36:45:c1:3d:c3:55:81:3e:f5:d8:29:93:99:b7:
         5e:d9:1a:98:6a:27:af:91:01:f4:af:02:3c:4b:fa:d5:0a:2d:
         80:f5:27:c3:84:ec:4c:09:d9:bd:25:8b:c6:14:61:b3:77:dd:
         c7:4f:04:13:71:a3:c5:0b:e9:c5:04:ce:18:ad:ea:0b:00:ac:
         01:8b:90:ef:f3:bb:1c:d9:20:bf:ee:51:ca:a1:ce:38:47:6f:
         a1:52:c6:da:a2:0c:3f:f8:ba:cb:64:55:fa:85:11:80:b0:31:
         01:d0:7e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:46:38 2025 by rpki-client