Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
File:                     LMV0mVRsTv1zD_hx3zvRr787nwE.mft (raw, json)
Hash identifier:          mk0SN+W9xdeGBUoDgqNujryQ/7QfjyfJUQBwKK2VXZw=
Subject key identifier:   DF:53:D8:1D:22:C7:30:5A:AA:4A:46:1A:55:B1:C2:B7:1A:F0:ED:35
Authority key identifier: 2C:C5:74:99:54:6C:4E:FD:73:0F:F8:71:DF:3B:D1:AF:BF:3B:9F:01
Certificate issuer:       /CN=2cc57499546c4efd730ff871df3bd1afbf3b9f01
Certificate serial:       0198A084423A27CA1453F344D376C897769F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
Manifest number:          0DE0
Signing time:             Tue 12 Aug 2025 23:01:18 +0000
Manifest this update:     Tue 12 Aug 2025 23:01:18 +0000
Manifest next update:     Wed 13 Aug 2025 23:01:18 +0000
Files and hashes:         1: 57uU1mBBwf2NTWvRUYQ88syCG_0.roa (hash: 29c5vB9J3vlsLvhEYhn9hPcXbpkgWlHiPuRjoYcpg3A=)
                          2: LMV0mVRsTv1zD_hx3zvRr787nwE.crl (hash: IopPxvCvGWcdVVYUGTapjQj9MNgveNLFpFchh3ytnPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:84:42:3a:27:ca:14:53:f3:44:d3:76:c8:97:76:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cc57499546c4efd730ff871df3bd1afbf3b9f01
        Validity
            Not Before: Aug 12 23:01:18 2025 GMT
            Not After : Aug 13 23:01:18 2025 GMT
        Subject: CN=df53d81d22c7305aaa4a461a55b1c2b71af0ed35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:05:a7:23:40:3d:5d:5d:88:4a:df:73:3e:8f:
                    40:b5:68:fe:ed:9c:73:4b:bd:e4:68:fa:d1:fb:d8:
                    4f:f0:3c:06:99:ed:34:9c:67:dc:16:07:eb:c2:37:
                    34:95:fb:02:56:34:69:c2:cf:72:44:34:44:c5:d5:
                    f5:b7:93:3b:c5:bc:27:92:12:07:42:5c:a2:9a:29:
                    a6:da:b9:fe:19:ff:37:cb:73:c5:a1:59:17:b2:7b:
                    c4:00:a4:2c:32:04:19:d3:39:bd:bd:24:ae:8c:6f:
                    2e:8e:bd:31:87:2e:7d:2c:dd:9a:bf:48:90:89:88:
                    62:ff:f8:5b:4a:cc:fb:5a:9c:73:19:29:44:b8:45:
                    80:e4:8a:ab:eb:e6:25:e9:5a:0a:a7:06:81:0d:6b:
                    cb:f0:bb:8a:62:60:10:48:44:95:88:59:a1:37:92:
                    f2:06:5d:29:65:9d:b4:14:b0:42:44:dc:13:56:26:
                    20:4b:ee:06:f3:d8:11:ef:6b:00:80:19:3b:3a:2f:
                    68:59:55:a2:d8:eb:c0:86:c3:37:45:7c:fe:c5:94:
                    fa:d5:d3:2d:d6:64:d0:d4:e7:0a:24:b4:d8:f4:0b:
                    9a:b9:2a:6f:35:b9:29:53:30:f5:99:81:64:93:af:
                    f6:84:e8:74:74:89:24:57:9d:eb:31:65:1d:03:4a:
                    82:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:53:D8:1D:22:C7:30:5A:AA:4A:46:1A:55:B1:C2:B7:1A:F0:ED:35
            X509v3 Authority Key Identifier:
                keyid:2C:C5:74:99:54:6C:4E:FD:73:0F:F8:71:DF:3B:D1:AF:BF:3B:9F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:34:d8:4d:0b:41:1c:bd:93:66:6c:ca:a6:11:27:31:0c:e8:
         19:44:a6:79:23:7a:96:ef:23:40:b7:8b:ee:88:26:69:ab:eb:
         ad:15:b0:4b:14:6a:8c:ad:88:fe:0a:96:65:84:2b:0f:67:c5:
         d6:72:a4:0e:09:c6:b8:8d:1e:b5:ea:7f:95:31:a7:ea:09:f7:
         4e:98:38:e8:7a:29:ce:48:e3:24:b2:eb:ae:47:76:2f:96:08:
         ae:6f:ec:23:fa:41:b9:42:61:b9:14:41:8c:a4:ff:59:83:d9:
         e2:b8:f7:b5:ab:8a:76:cd:dc:e0:3e:4c:f3:92:3a:36:26:92:
         0e:bc:4a:d9:4f:3e:8a:c9:0c:63:49:7d:a2:0a:b0:07:fd:65:
         9a:51:65:6c:3c:0a:a5:ea:7c:dc:08:87:87:c7:35:4c:46:e5:
         e9:ff:69:ba:14:64:02:33:ab:c2:71:d0:68:fd:d7:6e:22:30:
         d0:44:b9:8a:81:f2:e9:49:ad:87:7f:3f:72:53:44:2a:71:fd:
         38:7f:2f:2d:bc:c6:89:c5:37:82:c7:69:4f:4a:16:9d:b9:d1:
         a8:3f:2f:3e:c0:7b:42:91:3a:19:58:60:2a:3c:51:e4:08:85:
         b5:29:39:9f:8d:e8:f6:18:d0:cd:2d:1c:09:65:ce:71:20:87:
         c3:42:a0:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZighEI6J8oUU/NE03bIl3afMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYzU3NDk5NTQ2YzRlZmQ3MzBmZjg3MWRmM2JkMWFmYmYz
YjlmMDEwHhcNMjUwODEyMjMwMTE4WhcNMjUwODEzMjMwMTE4WjAzMTEwLwYDVQQD
EyhkZjUzZDgxZDIyYzczMDVhYWE0YTQ2MWE1NWIxYzJiNzFhZjBlZDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywWnI0A9XV2ISt9zPo9AtWj+7Zxz
S73kaPrR+9hP8DwGme00nGfcFgfrwjc0lfsCVjRpws9yRDRExdX1t5M7xbwnkhIH
Qlyimimm2rn+Gf83y3PFoVkXsnvEAKQsMgQZ0zm9vSSujG8ujr0xhy59LN2av0iQ
iYhi//hbSsz7WpxzGSlEuEWA5Iqr6+Yl6VoKpwaBDWvL8LuKYmAQSESViFmhN5Ly
Bl0pZZ20FLBCRNwTViYgS+4G89gR72sAgBk7Oi9oWVWi2OvAhsM3RXz+xZT61dMt
1mTQ1OcKJLTY9AuauSpvNbkpUzD1mYFkk6/2hOh0dIkkV53rMWUdA0qCkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9T2B0ixzBaqkpGGlWxwrca8O01MB8GA1UdIwQY
MBaAFCzFdJlUbE79cw/4cd870a+/O58BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE1WMG1WUnNUdjF6RF9oeDN6dlJyNzg3bndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iNWJhMjktYjI5Zi00MDY1LTk4ZmIt
YjUyOWIwY2Y1NDExLzEvTE1WMG1WUnNUdjF6RF9oeDN6dlJyNzg3bndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iNWJhMjktYjI5Zi00MDY1LTk4ZmItYjUyOWIwY2Y1NDEx
LzEvTE1WMG1WUnNUdjF6RF9oeDN6dlJyNzg3bndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUTTYTQtB
HL2TZmzKphEnMQzoGUSmeSN6lu8jQLeL7ogmaavrrRWwSxRqjK2I/gqWZYQrD2fF
1nKkDgnGuI0etep/lTGn6gn3Tpg46HopzkjjJLLrrkd2L5YIrm/sI/pBuUJhuRRB
jKT/WYPZ4rj3tauKds3c4D5M85I6NiaSDrxK2U8+iskMY0l9ogqwB/1lmlFlbDwK
pep83AiHh8c1TEbl6f9puhRkAjOrwnHQaP3XbiIw0ES5ioHy6Umth38/clNEKnH9
OH8vLbzGicU3gsdpT0oWnbnRqD8vPsB7QpE6GVhgKjxR5AiFtSk5n43o9hjQzS0c
CWXOcSCHw0Kg6Q==
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:56 2025 by rpki-client