Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft
File:                     lvMFpB83TbAVgTN3CNHHnr6nlxw.mft (raw, json)
Hash identifier:          UzYrhVfxMoV84sOz39OBsuqwkA0TkAYhO4zV1YD8wSI=
Subject key identifier:   9D:08:A9:5F:12:B7:B5:45:EE:90:B8:F4:79:5A:04:69:2E:A7:10:92
Authority key identifier: 96:F3:05:A4:1F:37:4D:B0:15:81:33:77:08:D1:C7:9E:BE:A7:97:1C
Certificate issuer:       /CN=96f305a41f374db01581337708d1c79ebea7971c
Certificate serial:       01987418EEB2C2753C744CDBDCFB5932F4F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvMFpB83TbAVgTN3CNHHnr6nlxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft
Manifest number:          0499
Signing time:             Mon 04 Aug 2025 08:00:47 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:47 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:47 +0000
Files and hashes:         1: lvMFpB83TbAVgTN3CNHHnr6nlxw.crl (hash: pLXZsTilSZI2qn05mGSdaWJW3P//eV5cSvTD7G9/V1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lvMFpB83TbAVgTN3CNHHnr6nlxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:ee:b2:c2:75:3c:74:4c:db:dc:fb:59:32:f4:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f305a41f374db01581337708d1c79ebea7971c
        Validity
            Not Before: Aug  4 08:00:47 2025 GMT
            Not After : Aug  5 08:00:47 2025 GMT
        Subject: CN=9d08a95f12b7b545ee90b8f4795a04692ea71092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:83:b2:bf:cf:f9:00:3a:fe:78:7e:6a:77:6c:
                    33:b6:87:48:60:d2:65:44:7f:34:56:ad:b6:8a:73:
                    4c:0a:10:5f:d9:6c:0b:a6:9c:a6:39:21:2d:cd:ff:
                    c2:50:b6:bd:8d:9b:d7:59:b7:34:2b:77:a3:a2:b3:
                    39:3b:de:64:ba:9d:ca:b9:61:96:85:17:34:2a:3d:
                    52:58:66:c9:b9:5e:37:06:34:15:bd:46:c0:b5:7d:
                    a5:fc:c6:1d:d0:10:ec:79:53:27:e6:de:05:da:96:
                    fd:2e:17:ec:be:b5:28:bf:ea:e6:86:18:1c:8d:e6:
                    5f:4b:02:cc:55:44:48:3b:c8:ef:40:49:53:b6:5c:
                    8b:01:d2:f2:b4:d7:0d:45:ff:7e:8b:f3:93:5d:09:
                    e2:04:2e:d9:e8:45:ff:4e:b8:a2:78:f9:e6:13:41:
                    a9:c4:d7:5e:9e:39:01:f7:7e:fa:e3:d1:79:01:6b:
                    02:4c:2a:7e:1c:97:1f:ba:b0:6a:3e:17:9f:8c:4d:
                    b1:97:fb:ca:f7:d3:dc:1d:88:8f:4d:b9:45:b7:5a:
                    82:1a:bc:ec:38:55:12:73:53:7d:12:a8:36:5b:52:
                    62:5f:5b:cf:09:20:9c:70:65:67:d0:62:3d:01:5f:
                    8b:ab:8d:77:43:db:d0:f0:01:ef:a2:3d:c1:9b:1a:
                    8f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:08:A9:5F:12:B7:B5:45:EE:90:B8:F4:79:5A:04:69:2E:A7:10:92
            X509v3 Authority Key Identifier:
                keyid:96:F3:05:A4:1F:37:4D:B0:15:81:33:77:08:D1:C7:9E:BE:A7:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvMFpB83TbAVgTN3CNHHnr6nlxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:db:11:81:5e:c9:bf:04:9b:5b:60:53:17:de:96:c5:f4:36:
         63:d7:1b:7c:52:81:2d:5a:ac:b8:0d:45:ed:2a:03:5d:38:55:
         86:75:3f:2e:5e:15:b8:a8:fa:84:0c:ee:d1:f5:65:24:ec:a9:
         4b:55:df:cf:9b:e9:fa:4a:8a:d0:4c:3f:ae:9b:46:b4:8f:ca:
         1e:ac:10:32:c2:3c:c4:ae:e5:eb:77:a5:3f:c9:fc:5c:68:f1:
         88:e7:ab:a1:7d:75:81:45:62:9d:2e:29:55:05:6d:18:8e:3a:
         1a:4f:8b:a8:96:4b:f2:16:1a:09:6c:83:49:96:a1:aa:1f:74:
         2c:74:6c:42:1f:66:7b:ef:99:6f:ab:9c:cc:a0:ea:30:cb:72:
         8f:35:fc:16:ff:7d:71:80:58:84:0e:e9:33:40:b8:d3:1a:21:
         a4:94:6a:1c:62:d9:b4:0f:e5:a2:ab:d9:4c:fb:77:a1:ff:b2:
         81:b1:10:87:85:0c:46:0a:44:83:15:97:64:c2:f9:ec:49:c6:
         4c:d6:e7:3b:b8:7f:05:d2:fb:94:db:c2:39:bc:59:77:f5:ac:
         3e:c1:ce:4b:c3:11:a7:b2:0b:14:aa:99:4b:36:d1:03:66:74:
         51:00:06:17:2e:49:da:6d:d1:8d:aa:e2:23:cc:9f:70:04:ae:
         25:16:d1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:49 2025 by rpki-client