Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft
File:                     lvMFpB83TbAVgTN3CNHHnr6nlxw.mft (raw, json)
Hash identifier:          sRoRyAJN2cSMBC0kI3Un4LApwYAhk0ysQpu2euVFHj4=
Subject key identifier:   AA:DC:7B:46:36:5A:CA:CE:3A:2C:97:AE:47:2F:F2:46:27:53:63:34
Authority key identifier: 96:F3:05:A4:1F:37:4D:B0:15:81:33:77:08:D1:C7:9E:BE:A7:97:1C
Certificate issuer:       /CN=96f305a41f374db01581337708d1c79ebea7971c
Certificate serial:       0198D697EAAD266246FA0DA260E1A37D580C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvMFpB83TbAVgTN3CNHHnr6nlxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft
Manifest number:          04CC
Signing time:             Sat 23 Aug 2025 11:02:16 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:16 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:16 +0000
Files and hashes:         1: lvMFpB83TbAVgTN3CNHHnr6nlxw.crl (hash: qDi/muNtZrRa0Y4qVsz+JOAHFAsj0VYqgOzIvPb4dgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lvMFpB83TbAVgTN3CNHHnr6nlxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:97:ea:ad:26:62:46:fa:0d:a2:60:e1:a3:7d:58:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f305a41f374db01581337708d1c79ebea7971c
        Validity
            Not Before: Aug 23 11:02:16 2025 GMT
            Not After : Aug 24 11:02:16 2025 GMT
        Subject: CN=aadc7b46365acace3a2c97ae472ff24627536334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:16:78:dc:a2:f4:ca:e8:7a:ab:4f:02:ee:
                    06:98:28:62:ed:5c:12:5b:0f:61:bd:13:c8:9c:b0:
                    a1:56:7b:21:59:d1:ad:c5:7a:7b:0b:6b:0e:9a:04:
                    fb:d7:7c:0e:69:af:40:71:68:bb:d8:d6:da:b1:ea:
                    62:a0:5e:56:36:90:80:42:69:94:3a:4e:63:bc:ac:
                    ca:d1:e8:92:66:2e:e5:74:7a:7a:0b:b2:8e:21:06:
                    bc:33:e4:83:a0:42:e5:71:5f:5c:eb:97:64:ed:81:
                    a8:92:c6:2b:51:5d:a7:70:ed:6c:09:cb:4b:a9:cd:
                    14:fd:ae:80:80:1d:23:ee:9e:81:02:1a:b7:ab:95:
                    22:37:bc:17:33:a1:ec:d9:e0:b3:5d:46:18:98:21:
                    51:a2:58:04:60:78:ac:d9:da:99:5c:f0:06:ab:ec:
                    f3:74:ab:9f:c4:03:b8:62:31:c9:f5:42:0a:4c:02:
                    ec:28:d4:73:92:ee:1e:83:c3:39:c9:9c:35:e0:ba:
                    17:d3:e9:9e:44:dd:20:70:5a:84:6b:bc:fb:d4:a1:
                    a9:67:e5:28:a7:df:a2:c1:4b:9e:e1:4d:28:00:bf:
                    db:8f:80:27:7f:5b:07:fc:7e:ec:ee:52:fc:9d:b3:
                    14:b4:4f:43:c5:69:09:e9:c2:ab:4b:f0:e2:4e:46:
                    ab:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DC:7B:46:36:5A:CA:CE:3A:2C:97:AE:47:2F:F2:46:27:53:63:34
            X509v3 Authority Key Identifier:
                keyid:96:F3:05:A4:1F:37:4D:B0:15:81:33:77:08:D1:C7:9E:BE:A7:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvMFpB83TbAVgTN3CNHHnr6nlxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:83:72:55:95:f0:03:63:7b:d0:32:4c:42:b4:c4:32:23:8e:
         6a:26:86:3e:25:8d:dd:a8:b3:04:32:9e:d2:44:6a:81:1a:ef:
         35:f2:71:15:b0:b4:88:0e:ec:9b:ca:84:90:bc:c6:5a:0e:66:
         08:6e:e1:da:80:2d:2e:ad:e2:38:3a:57:7f:39:89:bb:83:bc:
         7e:be:d1:6d:06:ca:5c:f3:79:77:7d:b2:6d:b1:f8:03:a5:e1:
         88:59:fb:41:ea:11:95:d0:6f:83:62:9e:d6:7a:8a:e1:f9:fd:
         56:ac:3d:09:90:51:82:a1:1f:81:d2:9f:01:ce:92:e3:30:46:
         85:56:00:45:58:c3:83:24:b7:ff:09:ca:e9:47:a1:21:d7:92:
         69:77:d3:99:4f:d8:c5:25:a0:60:f4:cc:ce:26:85:1e:14:1f:
         bc:44:ca:74:7f:02:a4:76:78:06:51:d0:c9:ac:01:d2:bb:ec:
         a3:2c:4b:76:77:18:7b:47:a4:90:5e:98:c6:cb:da:04:1b:6e:
         01:43:83:e2:7c:1e:3f:3f:0e:ce:59:c0:fb:44:30:e1:73:5c:
         4a:aa:3c:47:e5:17:97:8e:59:ae:7b:03:dd:0e:93:83:9f:5d:
         a5:25:80:81:51:e5:7e:b1:a2:32:0a:60:af:7d:aa:4a:6a:49:
         3f:e8:94:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:53 2025 by rpki-client