Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
File:                     LKVMSc_kyVm2nIriZoMm8QX2K50.mft (raw, json)
Hash identifier:          E2KgTyBe6+fTOTAbVE+qn+ZYuyOWgXaZW7BvWoHoKqg=
Subject key identifier:   50:66:D6:84:0F:A0:2B:10:68:86:4B:FB:2A:3D:E6:95:B9:8E:12:F2
Authority key identifier: 2C:A5:4C:49:CF:E4:C9:59:B6:9C:8A:E2:66:83:26:F1:05:F6:2B:9D
Certificate issuer:       /CN=2ca54c49cfe4c959b69c8ae2668326f105f62b9d
Certificate serial:       0199FCFD2DF451920DB3C71786FBD3A45D9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
Manifest number:          06C4
Signing time:             Sun 19 Oct 2025 15:01:14 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:14 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:14 +0000
Files and hashes:         1: LKVMSc_kyVm2nIriZoMm8QX2K50.crl (hash: GNQ06jpA3xY9Vn/iC4aRQCOALiznUWi5c62MPNPho0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:2d:f4:51:92:0d:b3:c7:17:86:fb:d3:a4:5d:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ca54c49cfe4c959b69c8ae2668326f105f62b9d
        Validity
            Not Before: Oct 19 15:01:14 2025 GMT
            Not After : Oct 20 15:01:14 2025 GMT
        Subject: CN=5066d6840fa02b1068864bfb2a3de695b98e12f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:61:e7:77:f9:e9:25:97:29:dd:88:d5:38:e7:
                    a8:d4:7e:22:a5:6d:7a:4b:17:a8:54:78:34:6e:ab:
                    98:11:fd:a2:47:43:6a:88:d4:2d:5c:91:7e:a8:fb:
                    4e:33:25:86:12:99:73:77:c1:1b:8a:36:18:8f:91:
                    05:39:de:da:e3:62:8d:47:41:7e:e1:ed:b9:25:de:
                    a2:63:ed:0d:96:af:68:70:5e:8c:a9:8b:3f:47:5c:
                    20:bc:3c:ca:38:c2:d7:9e:34:29:f1:67:9b:d0:fd:
                    3d:a0:84:04:97:50:f8:36:0b:ed:95:9a:5f:a9:e0:
                    14:55:75:f7:b0:a6:77:ab:25:ec:6e:39:3e:3e:f5:
                    17:46:86:af:7f:3b:11:14:e8:d9:39:c0:62:2c:ee:
                    9a:77:3d:ab:64:4e:57:e4:7c:83:be:77:b5:79:46:
                    b3:8b:2c:ac:c1:46:e9:2d:56:2e:df:0c:ca:12:bd:
                    70:eb:4b:93:dd:ea:dd:dd:43:5b:66:95:75:9f:e6:
                    6c:0a:6a:eb:cb:ae:43:be:6f:ad:73:6c:66:7d:4f:
                    75:ee:d7:a0:d4:4e:24:0d:b4:ee:1e:d2:d6:19:92:
                    95:15:61:bc:db:54:01:d8:7c:f3:29:69:70:77:58:
                    01:b3:ad:09:57:aa:f7:bf:56:13:30:38:1d:0b:a8:
                    61:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:66:D6:84:0F:A0:2B:10:68:86:4B:FB:2A:3D:E6:95:B9:8E:12:F2
            X509v3 Authority Key Identifier:
                keyid:2C:A5:4C:49:CF:E4:C9:59:B6:9C:8A:E2:66:83:26:F1:05:F6:2B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:e1:02:ab:33:e4:7b:22:4a:7b:85:87:c6:1b:5e:32:14:8d:
         d0:39:2a:75:a2:e9:e6:a8:70:ca:d3:8a:19:e1:3f:b8:3c:62:
         bb:e4:f0:5c:e6:2d:e7:39:02:e1:06:a3:a9:d1:77:90:eb:4b:
         17:3e:64:f5:eb:2c:8d:31:36:de:af:a6:c0:4d:59:51:cb:ec:
         17:ff:07:d5:ea:c1:d5:29:1a:71:bb:09:a7:36:08:ad:7c:38:
         9e:3d:8d:a4:39:ad:c5:fa:62:7e:46:cb:07:19:31:3b:0d:87:
         78:8f:75:c4:a4:35:e1:13:ce:4e:6d:a9:b8:d2:81:a6:46:2d:
         b5:75:d6:b6:0a:7b:be:3e:a5:0f:22:37:79:03:3c:e0:4a:cf:
         2d:91:6f:7c:e0:7f:13:73:1f:01:cc:52:ac:27:56:0e:43:58:
         e5:80:98:84:9a:ce:53:1c:b8:32:e1:45:62:c8:e3:a7:78:b0:
         7a:99:79:88:7e:c4:67:d5:11:c9:cd:79:6b:79:9d:77:4d:82:
         34:bc:c9:a8:fd:7f:90:ab:ed:29:54:dc:b7:d2:97:9e:fe:1c:
         f5:91:9d:b0:59:7c:6b:f9:27:89:bd:eb:28:de:51:72:e1:34:
         85:ce:12:97:3d:5e:7f:99:11:6a:32:96:33:f3:14:70:e0:8e:
         be:80:7b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:29:37 2025 by rpki-client