Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
File:                     lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft (raw, json)
Hash identifier:          tAA2GWUlqEokZ4rW1gqcgv53BmDNsju9atFDnOp9LWo=
Subject key identifier:   FD:11:33:35:4F:D4:4F:AB:16:42:49:87:88:62:04:35:EA:83:3F:19
Authority key identifier: 96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
Certificate issuer:       /CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Certificate serial:       01984709075FD2076B710B2D008CC0216313
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
Manifest number:          1032
Signing time:             Sat 26 Jul 2025 14:00:30 +0000
Manifest this update:     Sat 26 Jul 2025 14:00:30 +0000
Manifest next update:     Sun 27 Jul 2025 14:00:30 +0000
Files and hashes:         1: Glr6u_s5CXtQU33JFdKRNodC1Uw.roa (hash: xJAriWKl+PmbnYJ4BpPrX2q/YRb7AyfnBhDH2V2YYdU=)
                          2: UpeD63AhvaLPHL7cT3GFojz3Ckk.roa (hash: mEkJtV27z/pufpdRebXs4QzlDSFPeuvtLb6yKnLyJS8=)
                          3: lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl (hash: ncmr6wergd0S4Rjf5nT7/i7eU4GQX1ByX9GSd/CvnFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:09:07:5f:d2:07:6b:71:0b:2d:00:8c:c0:21:63:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f71b2273ab34ed4a5481176ef70fad867ef166
        Validity
            Not Before: Jul 26 14:00:30 2025 GMT
            Not After : Jul 27 14:00:30 2025 GMT
        Subject: CN=fd1133354fd44fab1642498788620435ea833f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:38:e5:91:ec:f0:4e:55:20:5e:10:b1:77:fb:
                    d9:5f:ff:e6:79:ef:c1:ab:e4:6f:64:1f:a6:f5:c5:
                    98:c9:35:c2:d3:ee:a8:da:ed:3b:d7:04:19:06:b9:
                    67:a4:5c:8e:ea:05:6e:a8:a0:1b:52:76:6c:04:94:
                    2f:6a:24:c3:30:ab:a8:63:71:25:5b:75:c7:22:06:
                    2c:3a:de:60:94:e7:91:8f:a0:95:a6:43:8b:41:f3:
                    a8:87:4b:d0:c4:92:8f:1f:42:48:7f:be:ba:39:06:
                    f6:f1:75:37:ee:54:28:bc:f5:ca:64:6a:7c:79:bb:
                    1b:fb:85:3e:28:b1:93:14:04:2d:aa:a5:89:c7:e4:
                    19:7f:d6:bd:57:4e:1d:2c:0b:dc:be:5c:19:42:e7:
                    84:c9:8b:12:9b:88:91:9b:9b:7a:7b:cf:93:95:2c:
                    3f:d6:44:a2:cc:3c:a2:6a:a3:92:a9:97:5e:48:63:
                    88:7c:9a:dd:61:8f:b9:c2:12:bf:78:5d:50:74:8b:
                    44:1c:d5:be:75:a6:1c:25:13:0c:35:02:28:47:f5:
                    03:1d:c7:22:2d:15:97:ad:d5:81:ad:8c:cf:5c:c1:
                    0a:5b:6d:7c:df:b9:f0:51:7f:81:ea:b2:fd:1d:8f:
                    bc:98:cd:03:18:2e:1d:60:c2:31:af:80:c8:e2:d3:
                    51:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:11:33:35:4F:D4:4F:AB:16:42:49:87:88:62:04:35:EA:83:3F:19
            X509v3 Authority Key Identifier:
                keyid:96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:89:39:19:17:da:96:f4:4c:0e:a3:fb:75:e6:da:e1:f1:d1:
         54:23:21:68:c8:41:39:8e:61:0f:70:fb:12:0d:e4:a8:68:de:
         73:2b:3b:c8:e2:f8:3c:5b:eb:38:4c:a1:9c:b8:6b:a2:02:d8:
         8c:61:04:d6:82:51:2a:30:b7:d5:67:1b:eb:9d:dd:b0:bb:e1:
         a8:31:70:da:48:cc:1c:e2:ca:21:88:cf:33:6c:24:92:dc:16:
         9a:d8:7e:7c:dc:d4:93:60:b7:33:13:df:45:4f:34:76:ba:7d:
         7a:01:b2:db:82:31:43:3d:93:25:a0:bd:07:35:91:e6:5d:a7:
         3c:fe:b9:bb:3b:cf:6d:51:4d:ad:c5:35:33:9d:8b:71:fa:e2:
         52:a1:f7:75:b0:f8:49:fe:ea:92:40:67:99:36:1b:79:bb:fe:
         5c:2d:76:85:40:52:00:6e:9a:77:1f:93:f2:b4:60:f8:7c:60:
         3a:51:7c:b3:a1:2f:96:eb:76:d0:f9:d0:95:95:da:99:aa:58:
         89:b7:63:96:24:85:64:ac:c3:5b:1b:2e:b2:ac:f5:d7:c2:e8:
         76:44:15:56:5b:3c:1f:7e:b2:01:e8:45:85:98:dc:d0:b6:5b:
         9a:e8:db:04:31:9b:72:89:90:fa:b7:e5:2b:76:36:0f:33:33:
         20:a4:52:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:11:57 2025 by rpki-client