Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
File:                     LG88xdeFlC5gSAk8dDOXOusV_iI.mft (raw, json)
Hash identifier:          y1LMnLd2UO/WTjsvuYwni7/ZzrP27uaFGxvNkfKqDsA=
Subject key identifier:   25:12:CC:25:E2:05:CC:23:2B:7B:CD:D5:C3:49:0C:F8:66:7B:74:C1
Authority key identifier: 2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22
Certificate issuer:       /CN=2c6f3cc5d785942e6048093c7433973aeb15fe22
Certificate serial:       019A50E307300CF00EC194DA8E1AE8D00D62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
Manifest number:          170D
Signing time:             Tue 04 Nov 2025 22:00:47 +0000
Manifest this update:     Tue 04 Nov 2025 22:00:47 +0000
Manifest next update:     Wed 05 Nov 2025 22:00:47 +0000
Files and hashes:         1: LG88xdeFlC5gSAk8dDOXOusV_iI.crl (hash: H/KF9eI1rCX+q/ZVcEbU5H572pNY42f+Wcj+ijlJZ8Y=)
                          2: r-LdmNgDJxor_chtzxn23ViAn4E.roa (hash: MPImeKuP5zzvcwvgc9vgO37r54W5h9GJtWUTmdVepC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e3:07:30:0c:f0:0e:c1:94:da:8e:1a:e8:d0:0d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c6f3cc5d785942e6048093c7433973aeb15fe22
        Validity
            Not Before: Nov  4 22:00:47 2025 GMT
            Not After : Nov  5 22:00:47 2025 GMT
        Subject: CN=2512cc25e205cc232b7bcdd5c3490cf8667b74c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4a:6c:0c:5d:2c:01:17:c6:68:73:5c:02:28:
                    11:8b:89:b9:ad:6e:a8:68:9a:2e:73:0c:92:c7:96:
                    bf:b0:2b:fa:bb:bb:24:14:71:20:71:cf:c0:42:ea:
                    fe:63:ce:0e:67:9d:f7:2c:10:ba:db:7b:45:ba:d9:
                    82:0c:cd:5e:f5:d7:15:43:cf:44:a1:fc:f0:9d:be:
                    5e:c8:28:44:86:db:bc:c1:cb:7e:0c:b1:13:c4:fa:
                    f8:11:14:e7:77:cb:c0:0f:a9:9c:60:a9:a1:b4:07:
                    fa:4b:11:a5:d4:4d:ad:7c:19:93:2c:7b:19:ba:79:
                    7f:ef:86:28:50:2e:a5:17:29:c5:14:b4:07:36:66:
                    8a:d1:68:fb:4b:47:a0:50:a9:f7:56:a2:9d:ad:b1:
                    28:06:02:f9:71:8f:a6:87:64:46:17:38:08:58:ad:
                    fe:fe:57:10:61:99:c4:a0:7e:68:85:30:de:81:bc:
                    fa:0d:2e:fa:83:75:56:a0:db:7d:98:f4:af:8b:8a:
                    75:73:13:b2:4b:02:23:37:9e:31:c6:68:21:94:81:
                    4e:a0:64:7e:a9:a2:b8:77:1d:7f:89:f5:a9:11:0d:
                    6a:46:6c:c6:37:ca:e9:a7:9c:db:f7:55:13:2a:c0:
                    3f:bc:2d:66:83:6f:31:9a:db:76:eb:49:79:37:ae:
                    f3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:12:CC:25:E2:05:CC:23:2B:7B:CD:D5:C3:49:0C:F8:66:7B:74:C1
            X509v3 Authority Key Identifier:
                keyid:2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:fb:9e:2e:ae:30:38:99:d1:bf:31:fe:0a:92:96:15:f9:72:
         2d:ad:20:16:eb:48:8f:d9:2f:44:d1:29:c4:7a:80:61:57:28:
         dc:27:31:49:d8:a6:ac:1d:2d:fe:99:86:3c:ec:b8:a0:f2:a1:
         3e:41:7f:2b:e4:2d:47:b6:80:4e:09:cc:74:9e:1b:94:73:9b:
         dd:f5:e3:7d:af:e4:10:79:4e:d2:7e:a7:d0:de:fa:a6:29:27:
         65:67:c1:96:ed:b5:5b:f3:c8:f5:06:31:36:dd:54:d4:e0:a9:
         d4:6e:b8:c0:58:82:34:22:c4:d5:94:1b:79:69:9f:9e:41:99:
         2a:2c:d6:34:82:ed:32:a9:83:1e:aa:07:d5:a9:b9:81:b0:7d:
         6a:33:e3:60:c6:82:d6:d3:04:b1:0c:7d:91:ca:95:4c:b5:c4:
         be:b7:f9:c5:2f:ab:96:8e:a2:0f:50:01:fc:92:a3:eb:b1:90:
         38:9e:ca:54:1f:2e:cf:f7:82:16:10:2e:6c:93:5f:4b:45:f8:
         fb:2e:7f:e6:4c:c1:11:6c:6d:65:5c:06:ff:73:4d:d0:aa:31:
         0a:e1:4d:19:1c:8d:a3:85:66:62:90:e7:5b:2e:45:2a:9e:b9:
         0d:60:91:55:4a:6c:c2:f0:8b:50:5e:85:1c:cf:3c:44:cd:e3:
         12:fe:8f:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4wcwDPAOwZTajhro0A1iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNmYzY2M1ZDc4NTk0MmU2MDQ4MDkzYzc0MzM5NzNhZWIx
NWZlMjIwHhcNMjUxMTA0MjIwMDQ3WhcNMjUxMTA1MjIwMDQ3WjAzMTEwLwYDVQQD
EygyNTEyY2MyNWUyMDVjYzIzMmI3YmNkZDVjMzQ5MGNmODY2N2I3NGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0psDF0sARfGaHNcAigRi4m5rW6o
aJoucwySx5a/sCv6u7skFHEgcc/AQur+Y84OZ533LBC623tFutmCDM1e9dcVQ89E
ofzwnb5eyChEhtu8wct+DLETxPr4ERTnd8vAD6mcYKmhtAf6SxGl1E2tfBmTLHsZ
unl/74YoUC6lFynFFLQHNmaK0Wj7S0egUKn3VqKdrbEoBgL5cY+mh2RGFzgIWK3+
/lcQYZnEoH5ohTDegbz6DS76g3VWoNt9mPSvi4p1cxOySwIjN54xxmghlIFOoGR+
qaK4dx1/ifWpEQ1qRmzGN8rpp5zb91UTKsA/vC1mg28xmtt260l5N67zUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUSzCXiBcwjK3vN1cNJDPhme3TBMB8GA1UdIwQY
MBaAFCxvPMXXhZQuYEgJPHQzlzrrFf4iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEc4OHhkZUZsQzVnU0FrOGRET1hPdXNWX2lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9jNzkxZGQtOGIxNy00OWM1LWExZWYt
NmNmMWNhNTA4ZDFhLzEvTEc4OHhkZUZsQzVnU0FrOGRET1hPdXNWX2lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9jNzkxZGQtOGIxNy00OWM1LWExZWYtNmNmMWNhNTA4ZDFh
LzEvTEc4OHhkZUZsQzVnU0FrOGRET1hPdXNWX2lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvueLq4w
OJnRvzH+CpKWFflyLa0gFutIj9kvRNEpxHqAYVco3CcxSdimrB0t/pmGPOy4oPKh
PkF/K+QtR7aATgnMdJ4blHOb3fXjfa/kEHlO0n6n0N76piknZWfBlu21W/PI9QYx
Nt1U1OCp1G64wFiCNCLE1ZQbeWmfnkGZKizWNILtMqmDHqoH1am5gbB9ajPjYMaC
1tMEsQx9kcqVTLXEvrf5xS+rlo6iD1AB/JKj67GQOJ7KVB8uz/eCFhAubJNfS0X4
+y5/5kzBEWxtZVwG/3NN0KoxCuFNGRyNo4VmYpDnWy5FKp65DWCRVUpswvCLUF6F
HM88RM3jEv6Pdg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:08 2025 by rpki-client