Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
File:                     levYBm8QkMMRnNtp6dTcQNkDBPg.mft (raw, json)
Hash identifier:          EM3/IB22jTg2eC2eKKbgBkV6gN0doOdw9ze/sUPSBpc=
Subject key identifier:   33:9B:F7:08:A7:3B:C4:6E:59:B0:5D:D7:4D:98:86:8A:70:F4:87:B8
Authority key identifier: 95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
Certificate issuer:       /CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Certificate serial:       0197789CDB5C904337E2568731D97B941F74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
Manifest number:          159C
Signing time:             Mon 16 Jun 2025 12:00:34 +0000
Manifest this update:     Mon 16 Jun 2025 12:00:34 +0000
Manifest next update:     Tue 17 Jun 2025 12:00:34 +0000
Files and hashes:         1: levYBm8QkMMRnNtp6dTcQNkDBPg.crl (hash: oYS4N7HstIjaEWbmNsHCP6lyr7CB21zmgw+IvnMLXD4=)
                          2: wRukRujev3BO2RN4ND9D6D63w5k.roa (hash: BYKbibBqJO+JvICBVUX/a9TBtkzvHJs+kP8dXi4jNhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:9c:db:5c:90:43:37:e2:56:87:31:d9:7b:94:1f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
        Validity
            Not Before: Jun 16 12:00:34 2025 GMT
            Not After : Jun 17 12:00:34 2025 GMT
        Subject: CN=339bf708a73bc46e59b05dd74d98868a70f487b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bd:b2:e9:f6:2f:9e:b8:5f:9c:d2:1c:9a:e4:
                    01:3f:98:05:83:39:a1:8c:36:be:4a:84:60:80:10:
                    8d:ef:86:22:fc:11:97:29:1f:04:22:5d:5a:c0:d5:
                    30:32:3f:16:d1:f6:96:e3:ba:17:0f:a1:f5:ef:e4:
                    f1:ae:ea:df:39:56:09:34:67:52:ea:03:95:d4:58:
                    0a:29:62:83:ef:11:e5:3a:25:6f:19:06:e7:57:11:
                    2f:67:d8:3a:b6:c6:7c:95:29:8a:54:fa:fd:23:fb:
                    f8:79:b7:f6:e9:af:08:78:64:5b:30:0d:2a:1c:05:
                    f0:7c:5b:5e:a0:bd:1e:95:42:b6:35:1b:4b:06:37:
                    60:c6:8d:be:16:98:93:e6:39:ff:80:0b:70:c3:8b:
                    fe:97:97:e5:11:b3:94:d1:9f:d5:74:97:d7:a5:88:
                    52:91:b0:d0:ec:d4:cf:19:61:b5:9a:f1:a7:3c:35:
                    4b:93:0f:75:f1:6d:41:cc:f3:62:7c:b8:8b:7a:b3:
                    13:cd:00:37:6f:1b:ea:ce:80:bd:2b:a7:20:49:ab:
                    20:be:5e:b4:5d:4a:78:0b:ff:16:23:a6:f3:7c:06:
                    5f:84:13:76:18:a4:08:e7:55:14:21:df:cf:04:ef:
                    54:4a:4f:b2:b1:00:5f:a8:7a:2f:46:ef:4a:ec:bb:
                    65:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9B:F7:08:A7:3B:C4:6E:59:B0:5D:D7:4D:98:86:8A:70:F4:87:B8
            X509v3 Authority Key Identifier:
                keyid:95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:2e:56:71:63:e7:0c:b6:51:cb:e1:2f:05:dd:2b:80:f3:48:
         6d:f2:41:19:4e:07:37:d6:55:7f:bd:3e:c4:3c:b4:ff:19:a8:
         f8:97:06:51:97:99:ef:e3:73:cc:ad:87:20:75:7b:31:31:6e:
         86:d5:cb:1d:dc:f3:43:12:7a:cf:be:0e:3c:8f:3f:41:83:14:
         e5:61:7c:fb:5c:81:bd:cf:c8:e1:9c:4e:e5:dd:a5:45:bb:30:
         17:c4:31:55:3e:de:e0:fb:54:a1:1b:60:e3:1f:bd:09:a5:51:
         ad:7c:d1:4c:43:1a:8d:8a:49:53:e9:9b:c7:bc:b5:69:8c:82:
         aa:1f:24:47:5d:f9:e8:e8:12:8d:06:6a:b3:82:b8:f2:aa:85:
         e2:cd:77:1d:ba:9a:b0:74:fd:93:05:aa:a4:fb:de:e4:32:c9:
         c7:df:78:42:89:47:c5:37:97:a3:62:c2:7c:39:e7:fd:fa:8f:
         72:f0:c0:47:7c:32:d9:13:44:d8:dd:19:a7:f2:92:c4:52:3d:
         f7:a5:2f:26:5d:76:88:eb:55:8a:65:c7:de:2c:4e:88:74:ac:
         44:5c:ba:55:44:84:cc:10:f9:7b:08:b9:01:b2:79:06:f6:0b:
         47:25:6e:0c:f5:51:72:3f:c5:ec:bc:9b:a3:33:e2:7d:f4:2d:
         e4:43:86:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:10:16 2025 by rpki-client