Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft
File:                     LvuebXVm3--dXLmNkpy3AyPTifI.mft (raw, json)
Hash identifier:          PT1xshfsRBcMiYV9SxrmpLu3RrXkD7Uff8w56iihPtA=
Subject key identifier:   FF:75:DD:52:5F:74:9E:36:9E:83:7D:4A:1E:D4:5F:A1:36:B5:23:A1
Authority key identifier: 2E:FB:9E:6D:75:66:DF:EF:9D:5C:B9:8D:92:9C:B7:03:23:D3:89:F2
Certificate issuer:       /CN=2efb9e6d7566dfef9d5cb98d929cb70323d389f2
Certificate serial:       0198D47280B23ADD8EC23E9713E91B7524A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 01:02:10 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:10 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:10 +0000
Files and hashes:         1: LvuebXVm3--dXLmNkpy3AyPTifI.crl (hash: AtDgYYE7dQ2Ttpo6juzrXIcQFFQyvan+0tsIA4Syrc4=)
                          2: crLPMCLXufFmk5JWVKp5VcK8TgM.roa (hash: YNo5LlcmxdPpx/UYh+crxJHa+r1xiA2h5iT8bwm5x4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:80:b2:3a:dd:8e:c2:3e:97:13:e9:1b:75:24:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2efb9e6d7566dfef9d5cb98d929cb70323d389f2
        Validity
            Not Before: Aug 23 01:02:10 2025 GMT
            Not After : Aug 24 01:02:10 2025 GMT
        Subject: CN=ff75dd525f749e369e837d4a1ed45fa136b523a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4d:fd:27:de:2a:99:a9:8a:3d:df:d8:86:a9:
                    2a:99:92:17:ad:8f:b7:d2:e1:3c:c0:a6:f0:a9:d2:
                    ab:ca:05:0d:28:46:5d:78:7b:b9:24:f7:71:9a:39:
                    00:c4:e0:19:4d:da:1e:da:37:a7:1f:70:4c:84:11:
                    6a:e8:05:09:4a:0d:05:53:22:12:1f:8e:03:aa:d6:
                    ab:0b:40:01:0c:4a:56:c3:5e:24:eb:20:4f:8b:90:
                    c4:2a:ca:1b:f5:86:79:ce:39:f7:73:04:91:8e:11:
                    41:a5:fc:a1:18:d7:ca:0d:6f:a1:db:f6:4d:c6:c3:
                    b4:50:f7:5c:78:af:88:40:aa:7d:b6:c2:a6:65:94:
                    16:99:49:a6:49:fd:88:1c:25:a4:f4:f8:82:7c:56:
                    8f:5e:16:ec:bb:ba:e0:d6:fb:bc:86:08:70:19:8c:
                    1c:dd:ea:59:33:19:0d:ad:50:6d:23:46:37:4f:d1:
                    2f:3e:8d:98:19:93:e6:86:06:de:7a:3b:6a:22:cf:
                    29:59:19:ef:01:4c:d5:cd:b7:26:2f:5c:cb:14:bd:
                    4c:66:d8:6e:93:ab:be:82:b8:29:f5:ed:1e:3e:75:
                    28:04:a3:50:76:ef:c9:46:62:75:7b:27:6a:ea:db:
                    e4:5a:af:be:0b:1d:cb:8c:8e:e2:e5:0e:ba:73:b7:
                    7e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:75:DD:52:5F:74:9E:36:9E:83:7D:4A:1E:D4:5F:A1:36:B5:23:A1
            X509v3 Authority Key Identifier:
                keyid:2E:FB:9E:6D:75:66:DF:EF:9D:5C:B9:8D:92:9C:B7:03:23:D3:89:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:bc:6d:4b:8f:fe:81:7c:85:ce:7e:d9:8b:9c:c7:b4:5f:e4:
         9b:45:39:83:8e:91:56:78:70:71:37:6f:12:15:11:eb:33:7f:
         7f:1c:14:c5:ac:02:cc:01:06:61:26:52:8a:a7:ba:b4:4c:31:
         24:0a:37:98:83:55:1b:1a:cc:53:31:b4:53:52:e8:b4:b8:33:
         1b:6b:d1:39:32:06:40:73:0a:08:3e:11:8e:76:52:07:42:95:
         f5:b5:a6:8a:82:d2:b1:eb:39:c9:3a:a1:8c:c1:fd:3b:63:f7:
         61:cf:cb:7f:c9:a1:dc:0d:4b:3a:78:01:4f:06:30:e1:48:58:
         14:04:de:58:ce:c0:85:f2:9b:74:13:52:20:34:bc:8d:c6:ea:
         a1:a8:32:1a:b4:64:81:3f:83:46:26:0f:4e:72:61:f1:40:79:
         6b:54:74:8e:70:58:6c:75:c0:69:ac:02:53:24:9d:56:94:f0:
         e3:69:12:17:dd:1e:ff:f4:ad:04:ab:c8:57:49:fd:f9:e7:5e:
         a6:66:15:cd:46:90:c5:7e:90:57:53:5c:1b:a2:c2:02:ba:2c:
         ea:b8:d4:dd:37:10:f1:81:d0:59:0e:dc:a7:d9:f5:32:7e:e3:
         e0:e6:12:98:90:4e:33:41:6b:e1:03:7d:1b:d8:02:ca:05:21:
         66:0f:16:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:36 2025 by rpki-client