Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
File:                     levYBm8QkMMRnNtp6dTcQNkDBPg.mft (raw, json)
Hash identifier:          AiOubBlZ+D8Q/OBwUVj90dTnJLqqJrZMhfoIyTPdhVM=
Subject key identifier:   E7:69:2E:19:FF:58:65:06:34:79:EE:0A:38:BD:C2:80:39:6A:93:BB
Authority key identifier: 95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
Certificate issuer:       /CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Certificate serial:       01985AC7873085B6ABF25AB46F6D06F469F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
Manifest number:          1611
Signing time:             Wed 30 Jul 2025 10:01:22 +0000
Manifest this update:     Wed 30 Jul 2025 10:01:22 +0000
Manifest next update:     Thu 31 Jul 2025 10:01:22 +0000
Files and hashes:         1: levYBm8QkMMRnNtp6dTcQNkDBPg.crl (hash: odZ7vF3TVPfMu1R1OruyYWqZIt27Dx3JmoLvzexprxo=)
                          2: wRukRujev3BO2RN4ND9D6D63w5k.roa (hash: BYKbibBqJO+JvICBVUX/a9TBtkzvHJs+kP8dXi4jNhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 31 Jul 2025 10:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:5a:c7:87:30:85:b6:ab:f2:5a:b4:6f:6d:06:f4:69:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
        Validity
            Not Before: Jul 30 10:01:22 2025 GMT
            Not After : Jul 31 10:01:22 2025 GMT
        Subject: CN=e7692e19ff5865063479ee0a38bdc280396a93bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f0:b8:09:7e:71:e5:9e:5a:c7:ea:dd:77:5f:
                    bc:d3:99:74:38:0b:09:59:25:4d:e1:90:cd:51:26:
                    f2:0a:28:00:43:9e:34:be:f1:e9:26:83:2e:08:5c:
                    97:82:14:67:eb:d6:a5:c2:12:b3:ca:48:bc:a2:47:
                    8a:e3:0f:e0:9f:0a:5b:6f:0d:d8:63:a7:22:34:71:
                    98:ef:fa:cf:10:56:55:c4:58:b8:fb:64:b9:af:64:
                    32:f0:39:34:62:83:7b:ea:d4:16:88:3e:98:d3:16:
                    3b:4f:45:48:4b:47:7e:f1:0c:a3:f2:36:2d:e4:c5:
                    97:08:79:8a:df:0f:14:5f:3e:0d:36:5d:54:d9:78:
                    c3:9e:6b:aa:f1:d6:44:a3:9d:24:73:61:d4:67:3f:
                    b8:68:36:31:8e:e2:4d:53:d9:9e:c4:6a:e1:c5:b3:
                    81:37:09:cc:a6:41:37:46:80:39:a1:f0:74:ac:34:
                    7e:d3:1e:80:8e:75:1e:13:e1:d2:ff:25:08:b5:c0:
                    d0:61:b4:bd:0f:f1:cf:66:39:fb:22:06:90:a1:58:
                    c4:1f:cd:5b:3c:98:26:aa:32:4e:67:8f:6b:9f:cb:
                    af:d6:cb:d6:ef:c5:85:d4:35:28:db:c5:49:10:6f:
                    fb:4c:2f:e9:ef:2d:d7:d3:2f:54:fd:b0:21:94:f7:
                    b8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:69:2E:19:FF:58:65:06:34:79:EE:0A:38:BD:C2:80:39:6A:93:BB
            X509v3 Authority Key Identifier:
                keyid:95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:da:6e:00:9b:6d:20:52:55:f0:2a:22:cd:fe:26:ec:15:2a:
         cd:02:c4:c2:b5:99:10:11:81:cb:c4:8e:0f:b9:8b:9e:f3:11:
         3c:8f:1f:2f:4b:83:d0:33:5f:5f:cb:68:d8:63:83:17:83:9d:
         6b:1b:89:76:e6:73:17:f2:b1:34:6a:a9:f7:d0:83:3b:63:52:
         3f:8f:0f:aa:9e:f1:eb:36:3e:36:a0:e0:44:63:cf:1f:60:7d:
         41:ed:61:d4:70:23:13:c4:90:4f:08:46:32:bc:76:91:b6:4d:
         79:38:d9:95:c6:81:3c:69:0d:13:a1:91:e9:f7:01:82:69:b2:
         aa:21:73:99:f0:3c:c4:6d:e9:94:fd:60:76:fc:8e:4c:16:fb:
         69:13:60:31:12:98:0c:e8:71:98:6a:b9:33:f5:6d:3a:43:dc:
         d0:d3:05:87:14:0d:93:22:52:ee:02:6d:d3:eb:74:da:b4:be:
         71:f6:3b:c4:e6:9b:cc:44:74:4a:3a:90:eb:4a:c6:03:b7:ff:
         77:6a:22:0d:1b:ee:ad:e9:18:e3:ee:bf:c2:21:fe:e3:6c:4e:
         ff:bb:ee:0e:b7:73:71:22:65:f1:00:51:93:5c:85:8b:95:cc:
         f4:1c:c1:fd:88:f8:09:d5:eb:f1:8f:43:10:4a:51:4a:72:72:
         24:ad:78:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 18:11:47 2025 by rpki-client