Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
File:                     levYBm8QkMMRnNtp6dTcQNkDBPg.mft (raw, json)
Hash identifier:          RPra58JD/BboMkSzNRp+k1awJJXKhLilIBWt6Yc4ubI=
Subject key identifier:   A8:1A:0C:D4:9B:E1:79:9D:DB:67:86:9A:A0:0D:92:03:59:1C:8A:AA
Authority key identifier: 95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
Certificate issuer:       /CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Certificate serial:       01962C73A1F49F6393F679CB4F584EF5FE50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 00:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 00:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 00:01:37 +0000
Files and hashes:         1: levYBm8QkMMRnNtp6dTcQNkDBPg.crl (hash: +yqC281I1yxn/fim7cAwDKqJIPCBQrAdxdB6Et7fweQ=)
                          2: wRukRujev3BO2RN4ND9D6D63w5k.roa (hash: BYKbibBqJO+JvICBVUX/a9TBtkzvHJs+kP8dXi4jNhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 23:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2c:73:a1:f4:9f:63:93:f6:79:cb:4f:58:4e:f5:fe:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
        Validity
            Not Before: Apr 13 00:01:37 2025 GMT
            Not After : Apr 14 00:01:37 2025 GMT
        Subject: CN=a81a0cd49be1799ddb67869aa00d9203591c8aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2e:a2:fe:3d:fe:74:ef:80:b7:51:cd:ac:de:
                    d8:06:03:de:f3:25:e7:e3:ac:09:fb:3c:9d:82:ea:
                    5c:a5:b0:fd:33:83:71:58:8a:12:56:d3:d5:de:13:
                    41:68:15:f9:94:de:f5:0d:c3:00:1d:a4:72:48:77:
                    a9:c5:77:26:1a:43:32:5d:1e:99:18:bd:cf:bf:42:
                    41:c5:29:cf:2a:1d:02:86:76:f2:10:73:af:52:f2:
                    da:73:81:ac:2d:90:4e:66:59:ec:15:89:9a:a3:95:
                    73:4b:15:2d:4a:b7:9f:7b:8e:10:1b:00:d7:25:46:
                    88:e2:90:c5:18:49:eb:9f:b8:f0:b5:58:07:db:30:
                    bb:d7:95:c9:42:cc:f4:2d:c4:92:bb:2e:fc:f1:b6:
                    27:f3:fb:5e:0d:26:49:e5:dd:43:2d:c0:7d:b5:74:
                    a1:98:d2:e4:f7:a3:04:41:48:af:ad:22:8a:7f:94:
                    75:42:b3:e2:e7:b6:24:99:6f:0f:3b:9d:9d:a9:38:
                    d0:ac:73:80:65:6e:bf:7c:89:f1:6f:af:62:1a:68:
                    cc:66:62:d2:aa:f8:61:cf:ad:88:ae:f9:97:88:eb:
                    9f:0e:86:08:9b:11:2f:c3:b7:cd:a4:19:40:a6:f9:
                    1f:be:45:9c:fc:f8:50:fe:6a:01:d1:f3:67:25:ae:
                    9e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1A:0C:D4:9B:E1:79:9D:DB:67:86:9A:A0:0D:92:03:59:1C:8A:AA
            X509v3 Authority Key Identifier:
                keyid:95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c3:52:5e:ec:88:a8:ef:db:88:32:1b:a9:51:b0:a6:98:1b:
         d3:b7:57:95:2d:95:e2:47:43:17:2a:58:f7:b9:b3:59:d1:98:
         48:0e:6c:f9:af:4a:f7:86:50:48:d9:4d:94:3a:a5:55:9d:77:
         f0:34:51:ff:08:75:1c:19:16:84:5b:2e:c8:9b:b1:40:12:d5:
         7f:a7:80:3d:73:e6:d8:43:ee:1b:da:0d:7c:8a:cc:b5:c1:d3:
         6f:a7:8d:f9:9a:4e:90:3d:55:4d:50:91:f6:da:d1:a3:28:93:
         8e:18:bf:3c:6f:87:72:d7:7b:be:52:1d:54:8f:67:9e:89:e5:
         f1:fe:d7:72:b9:f4:ea:0f:a9:b5:13:11:70:64:6f:93:27:77:
         8d:a8:de:c5:76:41:00:3f:ac:6b:ce:3b:5b:fb:a5:b4:ca:bf:
         3e:48:09:23:23:8d:58:af:48:e7:99:1e:2f:1e:93:e8:52:46:
         69:85:af:a3:49:40:8d:de:16:2a:9d:a3:a5:69:fb:ea:46:1b:
         23:2b:95:fe:4b:8e:2a:8b:73:8c:e4:3f:38:a7:34:c6:11:bb:
         a0:88:39:97:07:69:17:11:03:54:7f:dc:ed:d7:0e:58:75:8a:
         c0:09:92:09:84:d3:ec:fe:47:65:18:ad:45:b7:18:b6:c9:47:
         40:26:90:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:28:08 2025 by rpki-client