Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
File:                     LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft (raw, json)
Hash identifier:          Jp9qABiSAwFpGO/gHUHTI1jg2Y1RH25Hp+1wD3pUJi4=
Subject key identifier:   EE:7A:65:44:98:CC:B6:16:81:2A:5F:18:52:61:D4:E4:2C:D9:8A:C8
Authority key identifier: 2E:40:7E:B7:64:E0:83:85:5A:25:81:30:8F:34:1D:5B:A7:D8:B2:47
Certificate issuer:       /CN=2e407eb764e083855a2581308f341d5ba7d8b247
Certificate serial:       0198481B98436F10817AE545AEA6BE63D3DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
Manifest number:          05AB
Signing time:             Sat 26 Jul 2025 19:00:24 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:24 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:24 +0000
Files and hashes:         1: LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl (hash: 7HlsC4S4tEOUwmJgqSFzHl5aDfTxHGb9jldHf0wGjS0=)
                          2: r5qx5bv9vQTvcbqQmzIlloI4Pqo.roa (hash: M9wDMgC7kb97z4Tf7FppQBmD+yOsS5ArXp6NW17Hl7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 19:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1b:98:43:6f:10:81:7a:e5:45:ae:a6:be:63:d3:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e407eb764e083855a2581308f341d5ba7d8b247
        Validity
            Not Before: Jul 26 19:00:24 2025 GMT
            Not After : Jul 27 19:00:24 2025 GMT
        Subject: CN=ee7a654498ccb616812a5f185261d4e42cd98ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:61:e4:62:f4:04:67:ea:8e:8b:02:2b:bd:c6:
                    9d:8f:0a:fb:bd:cb:df:66:a7:8e:a8:cb:ff:00:7d:
                    20:f2:87:50:66:1e:0b:18:0b:34:20:93:78:7e:1f:
                    14:a6:66:6d:e0:01:6d:db:8b:47:50:34:56:ef:9c:
                    6f:d8:41:77:7f:60:59:19:70:36:be:7f:f9:fd:ac:
                    56:8d:07:5f:23:41:14:bb:6c:1c:50:4b:7d:e5:da:
                    3d:f6:ec:82:18:c5:e2:03:a1:bf:a6:6a:09:02:3f:
                    df:56:84:e1:59:d5:19:6c:45:61:d9:1f:e3:48:33:
                    ee:1d:43:45:9c:90:f3:69:27:d5:39:13:e2:d6:e7:
                    d0:1b:b1:1a:08:69:1a:0f:54:03:9f:01:3d:eb:ad:
                    6f:ef:ed:9a:8e:19:11:62:7a:47:69:53:91:26:12:
                    85:d6:e4:1b:0a:f8:4a:b2:9f:d8:48:15:02:b8:69:
                    3f:b3:c7:92:d6:75:da:99:0e:60:6f:2a:ee:4d:9e:
                    6b:ab:16:5d:1f:6e:b6:2b:d7:cb:e5:e0:6e:04:27:
                    91:8a:6f:13:71:53:29:4d:0c:2b:1c:0b:73:84:87:
                    bd:77:00:ed:e1:a2:09:f4:4f:41:f7:90:0b:c4:82:
                    92:f2:ce:39:fe:8d:5a:de:61:5c:17:55:55:9a:0c:
                    bc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7A:65:44:98:CC:B6:16:81:2A:5F:18:52:61:D4:E4:2C:D9:8A:C8
            X509v3 Authority Key Identifier:
                keyid:2E:40:7E:B7:64:E0:83:85:5A:25:81:30:8F:34:1D:5B:A7:D8:B2:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:41:e8:6c:e6:57:82:47:63:4c:d3:08:04:1f:90:01:07:9a:
         4b:24:b1:d4:45:1b:29:e6:63:95:82:44:d5:1e:58:21:fe:bf:
         4e:ce:8f:b7:1c:6a:a3:71:e0:ae:c5:86:a3:cd:01:5f:b6:2f:
         7c:53:bf:9e:8a:62:0e:29:72:de:4c:82:07:4a:3b:2e:c7:44:
         d7:af:06:4a:7e:d9:34:4b:53:15:e9:36:45:09:4b:9a:5f:4d:
         ce:0b:42:5a:eb:b5:f1:79:24:58:7c:4b:a2:98:02:71:51:b9:
         6e:5e:64:1b:84:c8:57:e0:ef:1f:34:2a:15:f9:b9:62:f5:83:
         b4:22:e2:9e:4b:1f:89:12:34:17:46:53:26:68:6c:4e:d4:49:
         59:5a:2d:40:57:33:19:8a:fc:77:0c:6c:4c:5d:42:53:bb:ec:
         92:33:0a:5d:98:f8:cd:28:5c:1b:33:cc:8d:cb:76:80:36:7a:
         03:d1:a6:6c:33:02:a2:ae:38:58:41:43:e4:b8:e3:41:bd:3b:
         b1:82:f9:2f:9b:98:1f:ca:93:29:dd:ce:aa:df:19:d2:76:82:
         77:46:d9:8a:5e:c1:e3:81:ef:83:96:ff:be:91:a9:c0:8e:d4:
         e7:c3:de:1c:b5:56:56:73:4f:86:99:0b:19:1b:ef:6b:a5:5f:
         43:2d:9c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:25:02 2025 by rpki-client