Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
File:                     lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft (raw, json)
Hash identifier:          +DX6mwdpZ4gWdeeVGBJOlefayKL6x/oWEqyXQWpJax0=
Subject key identifier:   B3:3B:BA:5C:C1:B3:F5:DD:DA:EE:E8:D6:2D:68:7B:1D:1C:05:AE:E1
Authority key identifier: 96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6
Certificate issuer:       /CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6
Certificate serial:       019849D3A949B31C566282639D39680C0C6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
Manifest number:          04CB
Signing time:             Sun 27 Jul 2025 03:01:04 +0000
Manifest this update:     Sun 27 Jul 2025 03:01:04 +0000
Manifest next update:     Mon 28 Jul 2025 03:01:04 +0000
Files and hashes:         1: lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl (hash: QNg7G6xMNTA5KhPq594JfNo7EanwOwRD4eIX2zhFOEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:a9:49:b3:1c:56:62:82:63:9d:39:68:0c:0c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6
        Validity
            Not Before: Jul 27 03:01:04 2025 GMT
            Not After : Jul 28 03:01:04 2025 GMT
        Subject: CN=b33bba5cc1b3f5dddaeee8d62d687b1d1c05aee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3c:66:20:cb:be:68:a0:10:d0:a9:68:8c:a6:
                    a3:d1:f2:e2:71:1e:48:4a:dd:4e:bc:49:9e:00:39:
                    12:02:bd:8e:6a:bb:0a:96:a2:6d:1e:c7:51:a2:0a:
                    2c:46:fc:e4:46:65:de:65:6c:b1:99:12:3f:d0:5b:
                    2b:02:91:f4:bd:8c:fa:05:8e:7c:75:21:09:13:0b:
                    ba:43:8e:a0:a1:7b:92:c4:9a:83:0d:6e:5f:74:7d:
                    71:4a:fe:5c:e6:76:9b:9e:b2:4b:c1:ab:37:15:d4:
                    71:1e:62:be:92:3b:bc:f3:6e:88:1c:57:09:f5:a0:
                    6b:da:c0:50:4b:c2:3f:e4:22:b9:d9:91:3a:42:ec:
                    f0:ea:81:f9:ba:fd:d0:d1:95:0a:d7:00:3d:ea:fb:
                    45:82:ed:95:a2:e9:ae:16:a6:4c:53:28:a3:c4:30:
                    2c:a0:1c:0a:f7:46:5c:45:1a:96:0e:19:af:6b:cf:
                    0a:1d:4f:7c:2d:be:22:15:7c:81:d2:29:0f:e2:98:
                    a8:83:7f:1c:2b:81:84:cb:ec:cb:44:96:8c:9b:ee:
                    3d:7a:49:11:09:17:77:f3:7d:68:0e:72:db:76:e5:
                    06:e0:2c:17:60:e9:0b:7d:20:a3:f1:95:0b:eb:d9:
                    a3:38:07:c4:08:b5:f5:ce:b5:80:32:3d:a3:cc:ed:
                    5e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3B:BA:5C:C1:B3:F5:DD:DA:EE:E8:D6:2D:68:7B:1D:1C:05:AE:E1
            X509v3 Authority Key Identifier:
                keyid:96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:23:41:0d:d5:64:c2:8a:cb:ef:7d:4e:9d:53:af:03:54:64:
         9f:69:99:fd:6b:16:04:67:8f:6d:b0:8e:17:ec:bf:72:81:c1:
         5a:a5:1d:32:ad:71:a3:ed:3e:ae:a6:6d:c1:7a:d7:80:92:93:
         6f:42:b7:20:5c:c1:e6:3d:c2:07:5a:3b:43:d0:3e:e3:e6:53:
         d3:40:c0:e7:10:a7:65:85:5f:3e:a9:43:82:56:23:85:f4:e8:
         ea:ad:8c:d2:57:00:96:e9:1a:dc:f3:c5:d9:21:de:c4:45:2f:
         b6:6e:65:3f:77:eb:db:eb:5b:1e:53:19:01:d9:27:8b:0e:66:
         a6:87:dc:eb:61:a3:eb:87:4b:97:74:da:06:bf:a0:14:84:41:
         51:88:5a:4f:e1:45:ed:7a:9c:04:f4:3d:f3:6a:a7:fa:dd:a4:
         b9:90:c9:38:67:b1:6f:7a:48:be:4f:ba:86:f3:cf:a4:c7:e6:
         9e:f5:1c:6e:71:1a:3d:67:88:36:2b:83:1b:6b:5e:b8:c9:c6:
         3d:e6:46:e5:e9:c0:cb:a5:c3:c2:4c:d4:fa:6d:91:b1:ad:0e:
         83:f5:96:2b:5e:41:8b:12:4d:21:f9:9f:ad:2a:83:0c:c9:cf:
         df:54:f4:d3:ee:2c:29:8e:82:4b:a6:c2:ea:b2:c2:dc:4a:41:
         66:0f:d2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:14:19 2025 by rpki-client