Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
File:                     LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft (raw, json)
Hash identifier:          1g3oI40lUmBP8i/Qf1aLAXtlKslf7dHtXD4LQmve12A=
Subject key identifier:   A3:61:77:52:49:19:8C:D6:56:D8:A7:79:75:4B:12:F9:61:CA:74:BC
Authority key identifier: 2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF
Certificate issuer:       /CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf
Certificate serial:       0198D66117E550603615F71F958B4CBAC67B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
Manifest number:          0F7E
Signing time:             Sat 23 Aug 2025 10:02:23 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:23 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:23 +0000
Files and hashes:         1: LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl (hash: oGL4WDHN00ILPVltnY5WG8BANQ4shdVLilHo5wn5OdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:17:e5:50:60:36:15:f7:1f:95:8b:4c:ba:c6:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf
        Validity
            Not Before: Aug 23 10:02:23 2025 GMT
            Not After : Aug 24 10:02:23 2025 GMT
        Subject: CN=a361775249198cd656d8a779754b12f961ca74bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:97:64:67:84:e2:07:80:f8:73:c1:8a:2a:62:
                    01:e8:1e:31:ca:34:0c:09:a4:d1:25:69:d9:40:b2:
                    9c:5d:89:f6:4e:7e:cd:03:86:84:91:7b:ee:d0:67:
                    99:31:df:16:ac:da:7e:79:be:15:10:e9:7e:80:53:
                    01:8f:0b:86:63:a5:95:9a:1d:fe:b5:f3:9d:e7:58:
                    69:1c:a0:ad:d4:63:81:e2:d4:20:d2:eb:82:2d:c4:
                    2f:3f:61:7f:3c:0a:66:52:b3:a3:8d:0d:ea:f5:60:
                    8e:66:d7:95:60:41:e3:1e:9f:92:25:3c:68:7d:55:
                    1f:c5:1b:4d:5a:9c:48:a9:05:98:43:41:2b:f5:a6:
                    19:7f:a6:c2:43:ce:27:da:f9:7a:08:48:7a:41:7a:
                    08:77:0b:8c:d2:73:f3:ef:4a:2a:6f:7b:fc:76:2f:
                    ac:bc:da:4c:f8:5f:30:90:51:b3:8a:45:00:aa:f6:
                    a1:a9:ed:70:d3:a3:6b:59:e4:d6:4d:39:a5:3a:ce:
                    94:e9:b5:aa:7d:d0:02:a3:f4:bd:13:0d:a4:47:d6:
                    0b:ef:9e:1c:ad:8b:bf:21:1c:8a:ca:24:fc:5f:3b:
                    86:bd:e7:e7:76:e1:4a:f5:22:7c:2d:2c:16:41:6f:
                    9e:97:34:35:94:01:2a:6a:0b:92:74:b4:d7:30:af:
                    91:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:61:77:52:49:19:8C:D6:56:D8:A7:79:75:4B:12:F9:61:CA:74:BC
            X509v3 Authority Key Identifier:
                keyid:2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:67:c3:51:03:5b:04:a6:0c:73:cd:24:4b:0f:42:c7:fd:ae:
         8d:4b:9b:68:d0:27:2f:55:7f:ff:1e:cd:97:ba:79:7c:64:ea:
         65:16:b5:18:63:69:61:62:16:76:76:a8:4b:da:90:e1:45:07:
         5c:36:79:a3:6e:9f:6f:ad:84:f2:cf:eb:af:52:1f:f7:4a:2f:
         cf:1d:6b:41:24:38:6e:86:00:13:a1:a7:b8:24:f1:4a:1a:cc:
         de:c9:6c:40:a6:6d:27:5b:ad:74:60:b3:a1:ec:d1:cd:94:d2:
         45:b2:8a:6d:10:d2:d7:48:21:f5:8f:37:73:69:a3:85:83:38:
         23:0a:99:c1:66:8a:13:c4:bb:6c:d5:55:cf:f7:e4:45:dc:03:
         d2:3f:ec:8c:5b:5a:ca:5a:33:ce:9d:8e:1c:f7:09:bf:ad:2a:
         54:03:2d:6d:53:54:2e:3e:99:ba:45:05:3d:ff:f3:6c:df:0a:
         ce:66:50:03:4e:41:4b:7f:1d:f7:29:2b:fc:25:ab:40:cd:ff:
         12:0c:04:72:9e:b3:6d:02:31:a1:1e:81:bb:1c:36:f1:db:f3:
         c6:06:22:d9:29:54:90:78:df:b1:b3:ff:19:09:86:9a:a2:67:
         c2:2b:eb:e1:91:6c:4e:7a:c2:19:de:f9:8c:fb:75:41:f7:e7:
         57:9e:ee:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:31:04 2025 by rpki-client