Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft
File:                     lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft (raw, json)
Hash identifier:          3+T1qVTZOHiC7r79qicdpaCY7+tI4bextmmEIc4yuH4=
Subject key identifier:   79:CA:97:4B:50:B1:2B:04:83:6A:F8:0E:6A:E5:1B:B2:9B:86:55:46
Authority key identifier: 96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
Certificate issuer:       /CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Certificate serial:       019A500730DCD6E852FF90BB364FDC5F340D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft
Manifest number:          1718
Signing time:             Tue 04 Nov 2025 18:00:39 +0000
Manifest this update:     Tue 04 Nov 2025 18:00:39 +0000
Manifest next update:     Wed 05 Nov 2025 18:00:39 +0000
Files and hashes:         1: Hn6t5wN5CzL2TppRa9ysCpUxEJ4.roa (hash: K5S02B/Gi2bHkxhJ8aF28VCnMZBi3s2rFauNCvnOiEw=)
                          2: UIdIZEUaxJjlUmS0DfjMepB-HoU.roa (hash: 7c/wtDjgeQptynstoYum4n7aAfpOsb4reHajWBMyT4A=)
                          3: bk2E2MwznVO9fyeEdSNKPr5qf4g.roa (hash: koJYcFmVjppjNe30QYkPLjnztCXTOqE8zj4CJBsH3wk=)
                          4: lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl (hash: PjnvcHoyWmygqxOnNLQaB+38ruObEbvO/HJsTTesKIg=)
                          5: ti67mfJ02xdUJebE8kVITWH-K94.roa (hash: mNTROQB2r5DCdwCoKjtHCnrpF/RYqwhzp7iVZ86dAsQ=)
                          6: wciPWRp0S7jDGsgBUMCQv3rtcf0.roa (hash: nUbkTnm2+bif0gS51JkC+xvx+yRO0T+FclDoI4aytYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:07:30:dc:d6:e8:52:ff:90:bb:36:4f:dc:5f:34:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96bfc5a172654dd6009db1d82d92ffaf71234120
        Validity
            Not Before: Nov  4 18:00:39 2025 GMT
            Not After : Nov  5 18:00:39 2025 GMT
        Subject: CN=79ca974b50b12b04836af80e6ae51bb29b865546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ea:64:d2:fd:37:e7:15:b4:d2:1f:f1:20:8d:
                    85:05:34:2e:40:f3:51:5f:31:94:65:e7:c4:29:02:
                    45:96:83:a2:0d:69:93:37:e6:01:c7:be:24:13:b7:
                    47:dd:62:2a:99:3f:2d:b8:f6:9c:03:d7:e4:d2:7f:
                    f4:06:73:64:23:e5:3b:ef:48:bb:f5:78:a4:47:e9:
                    7b:a2:13:7a:25:0d:d9:fe:f3:be:12:15:33:78:fa:
                    f5:fd:0e:14:22:22:34:78:12:55:43:27:02:1d:a9:
                    70:28:51:fd:42:df:3f:bd:a7:32:56:6d:23:02:65:
                    39:1f:92:74:85:9a:45:3f:63:28:8f:8d:8a:e9:78:
                    a0:09:d5:45:22:a4:20:f2:68:85:1d:b9:18:8b:d2:
                    8a:94:c5:17:5c:45:6d:3e:fc:19:70:e1:e3:39:65:
                    fd:62:29:d4:0e:9e:85:3d:95:44:3d:c8:cb:56:96:
                    52:19:57:69:19:c8:ef:10:bc:07:84:b8:3d:4f:32:
                    74:c0:54:70:4f:1c:db:66:05:ef:16:53:14:69:bc:
                    c7:99:87:a2:d4:f0:92:e4:25:a7:7c:61:4a:2d:1b:
                    35:46:17:6b:32:16:20:0b:1b:fa:75:a9:88:dd:13:
                    71:8b:ad:67:e0:08:47:d8:cf:20:64:50:99:53:5f:
                    a2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CA:97:4B:50:B1:2B:04:83:6A:F8:0E:6A:E5:1B:B2:9B:86:55:46
            X509v3 Authority Key Identifier:
                keyid:96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ca:b6:87:59:3a:ed:d0:7f:e5:c5:11:6d:28:00:59:50:07:
         39:65:32:ef:65:0c:1c:a9:2b:18:cf:9d:92:62:f5:8d:fc:e4:
         d8:a8:44:7e:29:f8:90:78:5d:40:c5:01:54:c8:17:9d:50:e2:
         41:ad:19:8a:c2:bb:dd:14:d8:06:0a:03:d2:70:76:19:46:50:
         0c:66:53:d1:de:25:67:09:11:78:08:ce:f0:ea:cd:d1:af:da:
         14:a7:6b:d5:f5:ff:43:7a:0a:88:4e:60:c7:cd:ac:b4:89:90:
         fc:c2:89:30:88:5f:a7:5e:7c:c2:ab:51:4b:81:80:81:9d:66:
         36:23:e2:98:fc:bb:36:fb:9e:d6:4a:9c:50:37:a5:cb:00:a0:
         0f:75:15:81:34:3c:8e:04:2b:75:2d:2f:a2:66:ef:3d:85:b7:
         b1:1e:88:6a:47:3e:09:97:02:18:87:fd:93:b5:af:02:33:76:
         21:45:3f:8c:f2:75:58:5e:13:0c:0f:dc:f9:f7:cd:9c:e8:86:
         28:f3:7a:8f:76:07:c2:2c:9f:f6:90:2c:00:30:e4:3f:c8:d3:
         8f:d2:3b:18:76:4c:ed:30:7e:6d:ec:2f:be:ed:a2:23:9f:40:
         8f:3e:df:06:4b:bc:07:ab:8d:3a:d6:65:2a:85:5c:1c:8c:86:
         54:c2:41:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQBzDc1uhS/5C7Nk/cXzQNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YmZjNWExNzI2NTRkZDYwMDlkYjFkODJkOTJmZmFmNzEy
MzQxMjAwHhcNMjUxMTA0MTgwMDM5WhcNMjUxMTA1MTgwMDM5WjAzMTEwLwYDVQQD
Eyg3OWNhOTc0YjUwYjEyYjA0ODM2YWY4MGU2YWU1MWJiMjliODY1NTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+pk0v035xW00h/xII2FBTQuQPNR
XzGUZefEKQJFloOiDWmTN+YBx74kE7dH3WIqmT8tuPacA9fk0n/0BnNkI+U770i7
9XikR+l7ohN6JQ3Z/vO+EhUzePr1/Q4UIiI0eBJVQycCHalwKFH9Qt8/vacyVm0j
AmU5H5J0hZpFP2Moj42K6XigCdVFIqQg8miFHbkYi9KKlMUXXEVtPvwZcOHjOWX9
YinUDp6FPZVEPcjLVpZSGVdpGcjvELwHhLg9TzJ0wFRwTxzbZgXvFlMUabzHmYei
1PCS5CWnfGFKLRs1RhdrMhYgCxv6damI3RNxi61n4AhH2M8gZFCZU1+iawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnKl0tQsSsEg2r4DmrlG7KbhlVGMB8GA1UdIwQY
MBaAFJa/xaFyZU3WAJ2x2C2S/69xI0EgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHJfRm9YSmxUZFlBbmJIWUxaTF9yM0VqUVNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zNjMwY2ItZWJlYy00ZDg2LWIxMmIt
YmZmYjc1N2MzMTM0LzEvbHJfRm9YSmxUZFlBbmJIWUxaTF9yM0VqUVNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zNjMwY2ItZWJlYy00ZDg2LWIxMmItYmZmYjc1N2MzMTM0
LzEvbHJfRm9YSmxUZFlBbmJIWUxaTF9yM0VqUVNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsq2h1k6
7dB/5cURbSgAWVAHOWUy72UMHKkrGM+dkmL1jfzk2KhEfin4kHhdQMUBVMgXnVDi
Qa0ZisK73RTYBgoD0nB2GUZQDGZT0d4lZwkReAjO8OrN0a/aFKdr1fX/Q3oKiE5g
x82stImQ/MKJMIhfp158wqtRS4GAgZ1mNiPimPy7Nvue1kqcUDelywCgD3UVgTQ8
jgQrdS0vombvPYW3sR6Iakc+CZcCGIf9k7WvAjN2IUU/jPJ1WF4TDA/c+ffNnOiG
KPN6j3YHwiyf9pAsADDkP8jTj9I7GHZM7TB+bewvvu2iI59Ajz7fBku8B6uNOtZl
KoVcHIyGVMJBnA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:25 2025 by rpki-client