Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
File:                     lmbCOPf_2s8VyALjILUuCYCGnOw.mft (raw, json)
Hash identifier:          ImPUy6jUpn4I7RQa87XDQbnXI1OxKn1APvjqdnt8k04=
Subject key identifier:   6E:CF:DB:F7:FA:0B:EF:B8:0E:EC:CC:04:02:FB:89:16:AE:DE:07:85
Authority key identifier: 96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC
Certificate issuer:       /CN=9666c238f7ffdacf15c802e320b52e0980869cec
Certificate serial:       0196771F10D2181D72A78687197761B6BFF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
Manifest number:          0E4E
Signing time:             Sun 27 Apr 2025 12:00:46 +0000
Manifest this update:     Sun 27 Apr 2025 12:00:46 +0000
Manifest next update:     Mon 28 Apr 2025 12:00:46 +0000
Files and hashes:         1: jlwHUlpX8poK-lsEjw4bFjVjclo.roa (hash: 7wHJRVYqlI2qLXTgACst4p/Vf4MlPLZtc3YhuGhcwsY=)
                          2: lmbCOPf_2s8VyALjILUuCYCGnOw.crl (hash: /7ANV+fdMbH0fdbS/QUmS61iyPWZjlyXqzD+Quin5M4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:1f:10:d2:18:1d:72:a7:86:87:19:77:61:b6:bf:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9666c238f7ffdacf15c802e320b52e0980869cec
        Validity
            Not Before: Apr 27 12:00:46 2025 GMT
            Not After : Apr 28 12:00:46 2025 GMT
        Subject: CN=6ecfdbf7fa0befb80eeccc0402fb8916aede0785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:92:57:f7:c4:34:d3:db:8f:e7:66:fd:f5:7a:
                    8a:26:95:13:c9:dd:e6:be:06:59:d4:ac:c8:d1:7b:
                    79:de:3d:7b:d6:c0:05:a1:a4:73:cc:1d:e6:29:c5:
                    f5:61:13:c8:3d:18:23:70:c6:92:0b:f7:88:9a:5b:
                    61:c9:ee:17:6a:02:54:b8:4a:86:2d:25:69:a6:5b:
                    20:2b:79:68:a2:0c:ca:f2:51:58:5d:b5:37:1f:5c:
                    b5:87:eb:cd:7c:00:ea:f9:d7:de:c5:9e:a7:72:81:
                    62:3c:41:59:ec:05:50:4e:3a:c5:08:1b:42:7b:b5:
                    d7:8e:88:c1:66:bb:f5:ec:70:84:6d:aa:b9:95:5f:
                    0a:20:d2:d5:08:8b:ea:44:6f:12:df:46:5b:6e:2a:
                    e2:42:a7:43:e7:22:bb:cd:b7:cc:1b:d3:0f:ad:1e:
                    86:01:e6:ba:00:ed:2b:19:86:5b:f5:c3:08:aa:b0:
                    8d:73:80:c8:6b:a7:8c:43:58:88:77:cd:74:bf:93:
                    a9:c5:b5:37:c7:88:78:80:5e:42:d7:63:8a:2b:c1:
                    41:78:be:e7:3c:a8:09:6d:b4:20:cc:60:bb:5f:98:
                    24:26:d2:88:8d:e2:54:3d:1f:f1:25:69:0a:ba:cf:
                    17:c5:42:38:90:e6:b9:a3:23:88:d7:3f:0d:56:25:
                    b7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CF:DB:F7:FA:0B:EF:B8:0E:EC:CC:04:02:FB:89:16:AE:DE:07:85
            X509v3 Authority Key Identifier:
                keyid:96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:5e:d5:72:c9:de:9a:c6:f3:e4:df:d2:10:fb:24:fc:c3:b0:
         ff:1c:eb:a7:cb:39:28:17:f5:f6:47:5e:ea:5f:c5:53:12:1d:
         93:cb:e9:b1:41:fa:99:d2:1e:38:1f:89:96:9d:20:9d:26:33:
         60:d3:5e:ff:83:5b:18:9d:f9:32:a1:5f:ce:41:c9:09:2a:48:
         a2:38:c6:3a:b4:bd:f4:4b:83:38:9c:89:e6:04:49:94:22:f4:
         d1:f2:23:fd:fd:07:2b:d1:be:70:63:b8:87:db:8b:2f:7a:89:
         0a:c1:51:fd:1b:a1:b6:e5:4c:a8:e9:67:26:0c:66:43:03:e5:
         28:8f:db:40:36:3d:b9:51:f0:91:3b:2a:59:0e:ab:69:ae:d5:
         a3:89:d1:a7:88:11:9f:38:68:e3:cb:82:00:5a:a0:a5:5b:96:
         35:b0:50:84:ab:1f:66:df:57:de:55:8e:f0:33:10:f0:82:d9:
         be:44:d3:6f:6a:08:90:08:08:22:63:9c:23:a1:04:9e:be:79:
         39:a5:1c:29:5f:25:47:74:de:12:e6:09:71:53:95:2b:82:d2:
         47:d6:88:c5:3c:7c:32:4c:ee:07:75:73:54:2d:1f:16:73:ec:
         19:b3:26:f7:7d:1a:6a:79:d7:ac:8e:6a:3b:f4:4d:f9:d2:3e:
         a7:a3:7c:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3HxDSGB1yp4aHGXdhtr/5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NjZjMjM4ZjdmZmRhY2YxNWM4MDJlMzIwYjUyZTA5ODA4
NjljZWMwHhcNMjUwNDI3MTIwMDQ2WhcNMjUwNDI4MTIwMDQ2WjAzMTEwLwYDVQQD
Eyg2ZWNmZGJmN2ZhMGJlZmI4MGVlY2NjMDQwMmZiODkxNmFlZGUwNzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZJX98Q009uP52b99XqKJpUTyd3m
vgZZ1KzI0Xt53j171sAFoaRzzB3mKcX1YRPIPRgjcMaSC/eImlthye4XagJUuEqG
LSVpplsgK3loogzK8lFYXbU3H1y1h+vNfADq+dfexZ6ncoFiPEFZ7AVQTjrFCBtC
e7XXjojBZrv17HCEbaq5lV8KINLVCIvqRG8S30ZbbiriQqdD5yK7zbfMG9MPrR6G
Aea6AO0rGYZb9cMIqrCNc4DIa6eMQ1iId810v5OpxbU3x4h4gF5C12OKK8FBeL7n
PKgJbbQgzGC7X5gkJtKIjeJUPR/xJWkKus8XxUI4kOa5oyOI1z8NViW3zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7P2/f6C++4DuzMBAL7iRau3geFMB8GA1UdIwQY
MBaAFJZmwjj3/9rPFcgC4yC1LgmAhpzsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG1iQ09QZl8yczhWeUFMaklMVXVDWUNHbk93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81MDc1M2EtOTFhYS00NDdiLWIyMzIt
YTAwMGQ3NjllMDI2LzEvbG1iQ09QZl8yczhWeUFMaklMVXVDWUNHbk93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS81MDc1M2EtOTFhYS00NDdiLWIyMzItYTAwMGQ3NjllMDI2
LzEvbG1iQ09QZl8yczhWeUFMaklMVXVDWUNHbk93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAll7Vcsne
msbz5N/SEPsk/MOw/xzrp8s5KBf19kde6l/FUxIdk8vpsUH6mdIeOB+Jlp0gnSYz
YNNe/4NbGJ35MqFfzkHJCSpIojjGOrS99EuDOJyJ5gRJlCL00fIj/f0HK9G+cGO4
h9uLL3qJCsFR/RuhtuVMqOlnJgxmQwPlKI/bQDY9uVHwkTsqWQ6raa7Vo4nRp4gR
nzho48uCAFqgpVuWNbBQhKsfZt9X3lWO8DMQ8ILZvkTTb2oIkAgIImOcI6EEnr55
OaUcKV8lR3TeEuYJcVOVK4LSR9aIxTx8MkzuB3VzVC0fFnPsGbMm930aannXrI5q
O/RN+dI+p6N8Aw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:44:44 2025 by rpki-client