Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
File:                     LVI5glUpDjKGgNboyAzZGPhkF4Q.mft (raw, json)
Hash identifier:          XKR7cl3mSNN/nmYMsZmyh1yji95FmtsMROcmwcKDCis=
Subject key identifier:   D3:1E:51:7F:8B:F7:97:44:BA:04:B6:5F:45:E3:3A:AB:F6:8F:2B:60
Authority key identifier: 2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
Certificate issuer:       /CN=2d52398255290e328680d6e8c80cd918f8641784
Certificate serial:       0198D54DDEB88A7188636588A78B0C6DC3B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
Manifest number:          136E
Signing time:             Sat 23 Aug 2025 05:01:46 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:46 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:46 +0000
Files and hashes:         1: LVI5glUpDjKGgNboyAzZGPhkF4Q.crl (hash: 4Z+vDKKdu78L+fPsLQLVhXZJAQBEBdZZiKlhtkSHm0Q=)
                          2: _bmYfKJFyK9blFnDt5sQ68mX470.roa (hash: /IaqLo5gnKUuY45J9bE0d2C3v3+D2fXVryN2uunSGag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:de:b8:8a:71:88:63:65:88:a7:8b:0c:6d:c3:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d52398255290e328680d6e8c80cd918f8641784
        Validity
            Not Before: Aug 23 05:01:46 2025 GMT
            Not After : Aug 24 05:01:46 2025 GMT
        Subject: CN=d31e517f8bf79744ba04b65f45e33aabf68f2b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ac:01:b1:cd:82:e7:78:5e:e8:30:14:60:db:
                    ef:29:02:2a:27:4a:e7:f5:5c:53:45:3f:fd:b7:82:
                    c2:fb:12:f8:1c:4f:91:0f:5f:6f:58:95:ed:20:06:
                    a3:fb:d0:85:2b:75:82:6a:1a:ab:27:81:a6:27:ca:
                    c3:71:58:71:d1:a9:d3:98:5e:1d:b3:45:81:46:cf:
                    1a:4a:20:71:91:87:d1:5a:60:dc:26:ad:d2:4f:22:
                    98:1e:d3:c1:af:6d:b6:0a:bf:f5:b9:68:0d:ed:da:
                    29:b9:39:08:69:53:20:96:30:bb:13:0e:e4:33:b7:
                    52:97:3b:d0:7b:d0:13:79:af:20:c9:23:23:95:1c:
                    10:62:4a:f6:68:41:76:f5:cf:53:84:fb:bf:af:f5:
                    64:f8:a0:6f:fc:61:c5:bb:e3:36:3c:38:e4:55:38:
                    70:7b:28:71:b5:31:65:cc:af:9e:78:a3:a8:69:51:
                    98:62:b6:ea:3d:d2:bf:d3:26:14:89:d5:83:7e:dd:
                    c6:e1:9a:fd:d1:3d:c6:73:8a:c2:62:aa:fe:b7:1b:
                    16:eb:de:03:e9:08:e1:71:d1:77:5f:18:a6:f4:72:
                    e0:a7:43:38:1e:11:72:d7:a8:e9:f7:2f:8f:cf:f3:
                    63:fc:ac:1c:88:ee:36:a0:72:a2:4a:b8:b0:29:d5:
                    58:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1E:51:7F:8B:F7:97:44:BA:04:B6:5F:45:E3:3A:AB:F6:8F:2B:60
            X509v3 Authority Key Identifier:
                keyid:2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:0b:e4:08:f0:d7:d9:a4:6b:8c:a1:28:f3:0d:0d:a0:1e:7f:
         aa:91:7b:1f:2f:91:a7:05:e5:ab:13:06:64:80:a0:e0:d8:26:
         ba:56:b3:f4:03:8a:82:82:0c:88:02:a4:df:ce:84:e0:be:93:
         a7:a1:b6:91:cc:f3:ca:aa:0e:14:71:6c:97:cd:b9:af:f1:da:
         a9:0f:50:c8:c0:83:11:01:a0:b0:26:20:2a:56:85:93:31:34:
         dd:95:0c:0a:60:87:9a:6c:cd:e0:70:81:2d:8b:ba:87:ef:39:
         de:36:dc:c4:04:5b:62:aa:f9:23:a2:b3:c7:0d:64:cd:c2:81:
         4f:8d:2b:cc:c2:9f:3f:ea:e3:1b:3b:c9:a3:86:79:a7:c5:a6:
         5b:f0:ec:43:bd:b3:17:9f:57:29:d6:e0:65:1f:35:03:d2:a6:
         19:7c:86:05:1c:eb:5e:c2:ca:94:3a:86:cc:31:b3:04:08:79:
         59:49:e3:cf:74:a6:27:8c:2a:e6:ce:b3:22:dd:bd:74:00:94:
         41:6a:4b:b3:39:5d:4e:ef:44:4a:08:3e:e3:29:f2:2d:98:3e:
         3e:6b:e0:8f:21:64:2b:84:f9:00:8f:60:87:5c:aa:45:24:54:
         94:60:cb:54:a8:24:36:69:0f:13:7b:f7:14:26:9e:a4:99:3c:
         8c:89:a0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:52 2025 by rpki-client