Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
File:                     lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json)
Hash identifier:          Q4lOb6N0AqvihrpnCqZhwspST0uv6ihCizIUQDueNVk=
Subject key identifier:   0E:8F:1B:6F:53:15:44:C9:8D:7E:58:FD:08:34:F1:54:6C:8C:6B:0B
Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
Certificate issuer:       /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Certificate serial:       0196A72FB01954682079BBE543743B79B0E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
Manifest number:          079E
Signing time:             Tue 06 May 2025 20:00:42 +0000
Manifest this update:     Tue 06 May 2025 20:00:42 +0000
Manifest next update:     Wed 07 May 2025 20:00:42 +0000
Files and hashes:         1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: Q3YfQjJfaSK4SXsLP2Yp/I4c8ET2APnEMFxYL6DCy38=)
                          2: yyEfKYzfWifnZltk7ctCY5A-44M.roa (hash: Bx/CCORj4vVt+Qie6xpQv8J6eghjTLCeuziTvvg5CUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:2f:b0:19:54:68:20:79:bb:e5:43:74:3b:79:b0:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
        Validity
            Not Before: May  6 20:00:42 2025 GMT
            Not After : May  7 20:00:42 2025 GMT
        Subject: CN=0e8f1b6f531544c98d7e58fd0834f1546c8c6b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:27:28:dd:9a:b4:13:0f:09:19:13:30:38:55:
                    24:c9:09:94:d2:51:d6:c2:33:da:81:86:82:88:02:
                    69:dc:ef:ab:7f:b9:f7:69:3f:93:9e:d8:25:a3:bb:
                    11:67:8d:16:27:2f:e6:c3:37:d6:f8:b4:dd:7f:42:
                    c0:98:e7:1e:0e:3b:83:07:99:23:93:29:d7:bb:fb:
                    cf:0f:1f:54:e7:21:d2:c1:10:a2:c7:5b:a7:b1:8f:
                    81:0b:33:48:d1:7e:07:19:0a:6c:e8:83:44:af:ae:
                    e3:44:82:c0:78:58:47:ff:97:77:5a:af:08:6a:c9:
                    2b:2f:49:27:66:8e:e2:e6:d9:40:9a:2a:e8:e7:11:
                    76:0a:59:7c:c2:b1:24:92:77:95:e7:71:3f:20:40:
                    ff:fa:35:57:63:32:bf:dc:57:ad:9c:33:dc:07:60:
                    da:d4:ca:27:32:bd:30:61:4b:e6:dd:d7:20:83:5f:
                    33:b8:b6:cb:c3:53:91:e4:c2:e9:91:19:6a:f6:6a:
                    ee:31:d8:75:f7:9d:1c:a9:c8:7d:2d:cd:dd:5d:59:
                    19:6d:27:36:1a:7e:91:32:7e:0f:03:72:c5:b0:ee:
                    0f:ad:9d:e4:4b:e3:a1:cc:4c:14:9a:c1:40:f0:94:
                    f1:8b:84:f5:d8:94:91:80:83:c7:54:d5:c4:09:2f:
                    ce:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8F:1B:6F:53:15:44:C9:8D:7E:58:FD:08:34:F1:54:6C:8C:6B:0B
            X509v3 Authority Key Identifier:
                keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:fb:6c:86:3a:d5:85:3a:46:0c:f8:13:ac:7d:db:b7:df:cb:
         8d:0b:70:2e:e5:65:25:0c:04:9f:e9:c1:d9:0b:09:c1:54:c4:
         9f:45:2f:dd:6b:90:77:4a:02:30:68:0a:67:98:59:57:78:4f:
         ae:a4:a8:9e:c1:2a:b5:f3:ae:6a:cd:4e:79:51:38:2c:2b:c4:
         d9:bb:17:75:7a:5a:9f:d7:b5:6e:25:43:f7:25:8e:83:23:7e:
         4f:24:3b:16:b9:60:ab:a1:95:f7:71:42:90:1a:db:43:dc:58:
         99:24:01:30:30:28:41:26:8b:77:a6:ab:cf:45:0d:bc:2d:55:
         38:8a:25:5a:06:4a:02:9a:7a:5a:ec:1e:e7:0a:33:30:9c:58:
         f8:f2:83:fc:62:d5:cf:c0:df:04:d3:72:d9:9e:c3:89:42:cb:
         27:44:8c:9b:eb:da:6e:c7:91:7e:72:ec:ef:a1:26:a1:ed:ed:
         7d:c0:d7:eb:ed:80:27:de:6d:6d:37:76:53:79:16:3c:26:af:
         6e:fa:41:95:8a:61:35:53:ee:82:c8:6e:2a:1a:46:e3:cc:95:
         c2:a3:56:0b:5d:a1:13:35:54:87:e6:05:c3:2f:be:4d:22:d9:
         82:6f:98:5f:1b:a8:64:87:77:53:ed:9a:67:a4:d3:be:5e:ca:
         d0:96:51:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:04:19 2025 by rpki-client