Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
File:                     LKVMSc_kyVm2nIriZoMm8QX2K50.mft (raw, json)
Hash identifier:          35VE7fdH/PIk4SzPd5egmCo/CMXKiPjasWgqOa7gUus=
Subject key identifier:   39:35:57:62:EC:1A:1D:DB:1A:D6:E7:CA:2F:01:18:11:51:47:21:1B
Authority key identifier: 2C:A5:4C:49:CF:E4:C9:59:B6:9C:8A:E2:66:83:26:F1:05:F6:2B:9D
Certificate issuer:       /CN=2ca54c49cfe4c959b69c8ae2668326f105f62b9d
Certificate serial:       019848899EDA643A5602846EE4003FAAC04E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
Manifest number:          05E2
Signing time:             Sat 26 Jul 2025 21:00:35 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:35 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:35 +0000
Files and hashes:         1: LKVMSc_kyVm2nIriZoMm8QX2K50.crl (hash: 7tWuk2UtofVAqwQSzQS2k0xppxR8WxpX3qkY/syVM6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:9e:da:64:3a:56:02:84:6e:e4:00:3f:aa:c0:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ca54c49cfe4c959b69c8ae2668326f105f62b9d
        Validity
            Not Before: Jul 26 21:00:35 2025 GMT
            Not After : Jul 27 21:00:35 2025 GMT
        Subject: CN=39355762ec1a1ddb1ad6e7ca2f0118115147211b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cf:6d:ab:af:e4:4a:2b:9d:6f:37:96:43:07:
                    7d:ef:2b:ef:9b:67:c1:e9:e9:2e:22:c2:16:1a:20:
                    35:04:a7:2f:86:ee:49:8f:9d:7d:6b:62:2c:ff:98:
                    d2:44:d3:b7:b1:7b:35:8e:f3:8f:1b:f1:ad:f8:89:
                    23:84:08:5c:64:ec:56:23:49:6f:f6:22:d0:57:e3:
                    f7:0f:ad:5e:b0:d1:60:2f:ea:a4:b3:79:34:12:1c:
                    41:6e:77:84:81:53:6f:9d:15:01:37:79:e0:cf:7b:
                    13:14:6a:57:d6:31:87:e0:e7:6e:8b:cf:03:fd:e2:
                    60:34:da:ad:5d:64:a9:9b:f6:ab:f4:b0:b2:65:ec:
                    e0:b1:63:b3:36:2b:f0:94:f2:e4:ec:30:a1:62:f1:
                    aa:22:6c:80:09:88:c5:c9:f1:f8:11:c6:dd:90:0b:
                    68:6d:95:22:22:ea:17:11:9d:ea:70:5f:fd:f1:b9:
                    8e:7f:24:74:1a:20:a1:1d:6f:16:43:25:93:ef:24:
                    1e:07:87:51:c3:e5:92:27:e7:0e:51:b9:ee:d2:11:
                    18:ec:e5:16:41:82:b3:56:bb:f0:40:16:c1:07:80:
                    f7:dd:f0:c1:9b:75:c6:bc:3f:e9:92:96:39:83:02:
                    8b:46:06:90:9f:1b:e9:ae:93:14:57:1f:ba:2e:9f:
                    ae:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:35:57:62:EC:1A:1D:DB:1A:D6:E7:CA:2F:01:18:11:51:47:21:1B
            X509v3 Authority Key Identifier:
                keyid:2C:A5:4C:49:CF:E4:C9:59:B6:9C:8A:E2:66:83:26:F1:05:F6:2B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:cf:ed:8c:47:95:51:5b:de:90:d6:78:4e:fa:33:e0:1a:3b:
         09:80:dc:95:ed:ad:d9:44:3c:77:9e:6a:7d:57:d9:ba:c9:30:
         1d:3c:71:51:a8:c3:a6:dd:f3:93:e7:25:3d:86:3f:df:ae:1e:
         21:f3:cb:9a:ea:fe:5c:5f:03:43:b5:1d:7e:0a:55:35:17:2d:
         08:af:7a:37:5d:91:f1:28:15:4c:ac:5e:aa:f1:54:4b:84:45:
         e6:dd:9e:2e:0e:f9:ba:b5:e9:a1:9f:6a:61:a8:cd:d0:cf:bc:
         65:65:97:56:22:4f:ca:6a:8d:a1:dd:f0:d8:56:55:39:04:63:
         b2:5c:7f:9a:44:07:ff:f2:fd:a5:78:c7:9e:f8:28:09:9f:4b:
         18:91:1c:0c:d2:31:0e:67:55:0f:ba:51:82:16:1e:0c:48:2b:
         cc:11:08:13:6a:97:24:b2:9c:5e:4e:da:ee:da:b2:35:e3:38:
         35:31:15:5c:49:06:ee:bc:ad:09:86:cd:fe:d7:25:72:7f:98:
         18:f4:2a:c6:e9:76:43:f3:61:3d:c0:e8:c5:ef:87:07:3e:0d:
         e1:38:1f:c3:c3:04:e4:9c:2a:53:13:af:a4:46:11:a4:25:ab:
         4a:f8:8c:c2:6b:14:3a:df:6a:e4:27:8b:73:22:08:4f:44:78:
         ae:d6:26:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:40:59 2025 by rpki-client