Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
File:                     lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft (raw, json)
Hash identifier:          1F/4MzMz7G2QeGQiowdfz5wWEm/4YZYraHN6SLI+Sso=
Subject key identifier:   0B:AD:10:CE:36:F9:13:9D:0A:10:D9:7E:84:17:31:D5:2E:57:25:5D
Authority key identifier: 96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A
Certificate issuer:       /CN=960e68c8389b09dc345464a400af276568e7f96a
Certificate serial:       0198A0F20DF83FB5898EE9110719BA85D3E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
Manifest number:          0EB0
Signing time:             Wed 13 Aug 2025 01:01:14 +0000
Manifest this update:     Wed 13 Aug 2025 01:01:14 +0000
Manifest next update:     Thu 14 Aug 2025 01:01:14 +0000
Files and hashes:         1: lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl (hash: 58ZIksNXihWv5virDuA7GMJl/DfIHvv2txO6+nGsmWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:f2:0d:f8:3f:b5:89:8e:e9:11:07:19:ba:85:d3:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960e68c8389b09dc345464a400af276568e7f96a
        Validity
            Not Before: Aug 13 01:01:14 2025 GMT
            Not After : Aug 14 01:01:14 2025 GMT
        Subject: CN=0bad10ce36f9139d0a10d97e841731d52e57255d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:53:3b:a4:b3:1b:55:2e:f3:82:73:fa:23:
                    ac:26:e0:62:6c:ba:f6:ca:cf:d7:3d:81:ff:57:8f:
                    e5:69:dd:06:0c:2f:b6:3a:c0:a8:01:94:62:85:ff:
                    ac:cf:ff:87:2b:a3:fc:1a:3f:f1:3d:11:0a:f7:f1:
                    e5:08:ce:e2:e4:52:38:07:78:2e:93:5c:89:2c:30:
                    be:e8:77:e2:59:27:06:2b:e7:3f:f0:53:7e:95:53:
                    57:62:b9:16:f3:d5:22:67:b2:28:6d:e3:4a:1e:e7:
                    20:7f:2b:39:07:60:fd:8b:7c:a6:df:88:f5:fc:77:
                    8f:d2:e7:b5:4f:af:1c:b9:6f:34:a5:e9:00:6b:60:
                    40:70:e3:0d:0c:cd:3b:ce:36:7c:d8:6d:00:7d:c8:
                    e4:f6:25:a3:3f:21:ad:2e:00:aa:97:e8:d2:ff:e8:
                    77:d0:fb:c8:da:43:24:c3:79:6b:63:77:1a:ec:0f:
                    82:aa:57:50:cc:1c:7d:09:0e:39:ef:cb:29:0d:2d:
                    7d:c5:1e:60:11:fd:a0:c4:e7:48:3e:a2:c2:4f:c9:
                    e9:ed:a5:ce:fa:c5:9f:8e:41:2c:b3:ea:cc:7e:eb:
                    27:4b:98:e4:12:fb:f0:7c:ac:b0:d8:63:0a:29:88:
                    f1:7f:36:44:4a:de:ef:6e:e9:15:06:07:b3:94:21:
                    00:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AD:10:CE:36:F9:13:9D:0A:10:D9:7E:84:17:31:D5:2E:57:25:5D
            X509v3 Authority Key Identifier:
                keyid:96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:11:1c:8e:33:27:95:49:c8:77:d6:cd:0b:12:30:ab:08:1c:
         f2:e5:3b:b6:a7:ae:92:0a:a8:cb:e1:69:36:0e:41:3f:81:dd:
         51:3f:89:89:98:2f:b4:c2:dc:a9:40:b8:41:60:ee:64:1e:eb:
         a1:d0:23:2b:e7:47:72:f0:4b:e3:84:6b:22:7e:20:d8:69:56:
         3d:a2:6d:ad:4b:46:c9:99:a5:c5:54:e3:a6:0e:66:9b:b0:b3:
         08:4e:4d:39:90:df:c6:e1:bf:a8:a4:bc:6c:f4:93:26:7e:93:
         32:c2:51:38:52:58:c2:c8:c8:d9:79:87:ca:2c:87:30:3e:dc:
         0c:38:be:ae:ac:d2:56:1f:25:be:60:8c:f0:fc:cf:14:5a:1b:
         f0:6e:df:11:b0:78:60:53:ff:d8:c4:79:76:e9:04:fe:42:40:
         5c:09:e1:a9:20:ce:46:7f:e3:86:2b:97:54:7a:b8:1e:9f:52:
         36:bc:9d:09:9e:aa:dd:2a:72:17:ba:c0:7b:55:fe:8d:0e:05:
         7a:9b:37:04:80:e4:84:09:fa:b9:a7:80:23:b3:79:42:ab:05:
         ec:bc:f3:cf:c5:50:01:50:d4:f7:4e:a0:10:b8:9d:0a:71:fb:
         45:60:46:b1:12:ff:1f:3c:0d:8d:b0:c7:42:33:8c:da:0d:42:
         e1:c2:1e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:25:51 2025 by rpki-client