Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
File:                     lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft (raw, json)
Hash identifier:          Kt19J5QGP3Z/7ncNmFMdAYCrOOca/dpQCgJUqTEcdlM=
Subject key identifier:   3D:54:E8:E8:DF:EB:1D:CC:40:E4:AB:E0:C6:B9:85:7E:8B:39:4C:24
Authority key identifier: 96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
Certificate issuer:       /CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Certificate serial:       0197B820E785F67D2B65F6167A252666C846
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
Manifest number:          0FE8
Signing time:             Sat 28 Jun 2025 20:00:53 +0000
Manifest this update:     Sat 28 Jun 2025 20:00:53 +0000
Manifest next update:     Sun 29 Jun 2025 20:00:53 +0000
Files and hashes:         1: Glr6u_s5CXtQU33JFdKRNodC1Uw.roa (hash: xJAriWKl+PmbnYJ4BpPrX2q/YRb7AyfnBhDH2V2YYdU=)
                          2: UpeD63AhvaLPHL7cT3GFojz3Ckk.roa (hash: mEkJtV27z/pufpdRebXs4QzlDSFPeuvtLb6yKnLyJS8=)
                          3: lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl (hash: RIW+kt07TLy+X5AM3WbT6CiSfeO6EmwjHsHNy5/s0YA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:20:e7:85:f6:7d:2b:65:f6:16:7a:25:26:66:c8:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f71b2273ab34ed4a5481176ef70fad867ef166
        Validity
            Not Before: Jun 28 20:00:53 2025 GMT
            Not After : Jun 29 20:00:53 2025 GMT
        Subject: CN=3d54e8e8dfeb1dcc40e4abe0c6b9857e8b394c24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6c:f9:52:e0:97:f2:01:9c:3c:c7:cb:ef:5e:
                    eb:bb:1a:57:75:4c:93:e8:85:f1:ca:55:2e:67:4f:
                    71:b1:31:c6:4e:0c:ca:f6:79:58:49:a8:b5:81:d9:
                    97:7b:9b:65:3a:41:b5:e5:cd:77:0c:07:17:e4:eb:
                    0e:b7:3a:b9:19:57:b6:22:74:3d:5d:c6:e5:c9:dc:
                    b4:de:a0:d5:1a:60:d6:f8:cb:b0:0c:dd:47:0b:b9:
                    83:38:b3:83:9b:ed:80:66:25:85:3b:03:1c:dc:50:
                    4a:bf:62:3c:81:3d:c5:43:d9:49:60:bd:63:cc:21:
                    bd:34:47:65:72:5d:56:b0:2d:73:e5:d3:c5:bf:a4:
                    89:83:68:9a:47:ca:36:86:d5:bf:a0:dd:8a:ae:73:
                    f5:0a:89:a8:1f:ff:e3:9e:16:3f:5a:96:59:22:9c:
                    02:e2:da:2d:ee:2a:00:74:86:6c:43:e8:3f:b3:96:
                    68:52:ef:f2:2a:0c:20:6e:9c:a2:7c:47:8d:56:ef:
                    36:fa:f7:56:9b:68:c2:24:30:9f:f8:9b:38:b7:03:
                    c2:66:fd:f6:42:a2:82:39:08:c3:16:dd:a9:81:fa:
                    5a:24:f6:78:d2:47:ed:63:d3:9f:e4:c0:1b:53:25:
                    c0:a9:d4:22:9f:f7:fc:21:9d:c2:8d:80:a3:a9:9d:
                    7d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:54:E8:E8:DF:EB:1D:CC:40:E4:AB:E0:C6:B9:85:7E:8B:39:4C:24
            X509v3 Authority Key Identifier:
                keyid:96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:4c:e7:69:80:32:fe:5c:5e:2a:a4:d9:2a:76:25:c8:46:fd:
         a7:97:36:c4:57:a1:79:a6:c2:d2:96:c0:4b:05:d4:ee:d7:f7:
         43:55:fb:c9:d5:fd:14:f0:18:18:4a:87:f9:bd:35:75:df:00:
         29:b9:89:43:51:a6:ec:c0:e7:13:c2:78:52:89:49:48:48:de:
         b3:23:d9:40:38:b9:48:9f:27:3f:43:c6:51:fd:ed:63:ad:2a:
         c0:eb:37:c6:3b:88:37:9f:b9:8c:b6:d1:a2:b9:79:45:c1:94:
         2c:1f:45:7a:c6:c3:68:35:72:eb:52:af:bb:dd:92:0c:b5:9a:
         6c:9b:8b:9a:d7:cf:f1:e9:71:49:9f:06:ae:1c:04:d1:0b:4a:
         80:6e:ee:51:c3:c5:99:5d:80:56:28:ce:6d:d3:44:cc:e8:44:
         6b:66:73:bc:1a:61:eb:76:5a:aa:44:f0:a4:ef:8a:85:8d:50:
         d8:dc:ff:ce:35:16:fc:f3:eb:b6:0e:a4:20:cf:50:ff:9c:a1:
         15:0d:36:f2:d0:9f:0d:2a:5f:43:d6:20:53:dd:2e:da:47:13:
         0f:d2:e0:8e:96:58:8d:d5:ca:b8:f5:9b:92:8e:ed:9a:f3:03:
         f2:6d:9b:76:8c:d0:b7:80:6b:69:3f:ce:a0:55:18:14:81:24:
         84:06:b0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:37 2025 by rpki-client