Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
File:                     LOlVOpsse8oStoG8CmMF4z-2QMg.mft (raw, json)
Hash identifier:          lzXwDbleWvInkbP0y6EViDHRGuT0umcPN/svpxk0qRk=
Subject key identifier:   B5:96:6B:77:49:5C:9A:00:C8:96:CC:53:0D:E7:ED:88:70:74:9F:87
Authority key identifier: 2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8
Certificate issuer:       /CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8
Certificate serial:       0198733D7E29E11731DD3C21ECB9DDBB9634
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
Manifest number:          0D92
Signing time:             Mon 04 Aug 2025 04:01:06 +0000
Manifest this update:     Mon 04 Aug 2025 04:01:06 +0000
Manifest next update:     Tue 05 Aug 2025 04:01:06 +0000
Files and hashes:         1: LOlVOpsse8oStoG8CmMF4z-2QMg.crl (hash: febEuF6MB3nrTAcg9EyGfj7MEkUB8bzRxfXzOS3v5cA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:7e:29:e1:17:31:dd:3c:21:ec:b9:dd:bb:96:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8
        Validity
            Not Before: Aug  4 04:01:06 2025 GMT
            Not After : Aug  5 04:01:06 2025 GMT
        Subject: CN=b5966b77495c9a00c896cc530de7ed8870749f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:89:e3:b2:11:74:4c:d1:87:f3:71:36:a7:6d:
                    52:9a:c0:8c:37:cd:ba:60:19:3c:f8:ee:79:96:70:
                    72:56:eb:29:d9:3f:21:1a:d9:4b:c3:e6:bc:d4:ca:
                    e3:54:a6:d5:69:a4:08:76:0f:b6:cb:0e:06:e7:3c:
                    15:62:55:df:66:30:2d:7d:0e:fd:1f:48:97:ad:34:
                    fb:6c:fa:bb:f0:99:1d:54:a7:39:10:dc:df:24:a5:
                    87:f1:b7:4d:86:48:63:cc:10:32:d6:c5:d0:78:ea:
                    ad:08:92:1b:57:20:ee:6f:03:2f:7b:0c:98:7c:ae:
                    d7:0f:81:81:b0:ce:cf:e1:5b:e9:26:06:ff:b4:65:
                    e9:fd:b1:5c:25:95:e6:40:ad:34:af:f4:bf:9c:db:
                    24:11:b8:d7:70:1d:ae:6c:6b:6e:f7:16:f4:27:93:
                    a4:6c:e5:e2:f5:01:fb:ea:4b:73:bc:36:46:aa:b6:
                    91:8b:95:fe:da:2c:c1:e3:d5:52:c2:e3:03:a2:ff:
                    c5:ce:0d:52:a9:0b:55:42:e9:bc:8c:03:f1:49:50:
                    1c:5b:42:76:72:1a:e8:6b:58:31:3b:fc:dd:81:d8:
                    02:79:a6:3c:ae:ad:b7:55:37:eb:63:bb:ee:d8:46:
                    c7:03:99:de:e4:4e:f0:76:f3:8e:d9:9f:9c:8a:30:
                    ec:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:96:6B:77:49:5C:9A:00:C8:96:CC:53:0D:E7:ED:88:70:74:9F:87
            X509v3 Authority Key Identifier:
                keyid:2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:1e:0c:a3:11:d0:28:99:56:34:d7:1a:65:54:18:e2:e4:b7:
         2e:c1:7e:b0:e7:b7:81:65:e4:e8:63:2b:21:aa:b3:b5:d3:13:
         d3:0d:57:de:33:69:bf:9b:c1:34:66:3c:40:84:f8:b5:f1:c7:
         36:2e:20:3e:81:f2:77:14:66:e8:03:a4:46:06:ee:f4:7e:f4:
         c6:82:74:59:f1:a6:72:f0:fa:02:71:9c:0f:7a:13:a5:37:62:
         4c:3f:50:0d:57:45:b8:2d:5d:c7:d5:70:0e:28:e5:9f:25:92:
         72:16:89:b2:ba:a1:40:a9:a8:13:a1:da:f3:24:82:44:ba:5b:
         58:84:86:c3:cb:ca:a4:93:90:e9:7a:d4:44:d1:f5:96:78:a2:
         9b:02:32:bb:6b:c4:ed:56:0d:56:21:fb:67:18:d2:f4:20:96:
         d9:d1:e3:77:0a:c2:68:a7:9c:ae:73:ce:01:d4:7f:31:a6:e3:
         01:05:dc:6a:c9:d6:43:dc:fc:f8:1e:ce:f9:af:40:f2:06:58:
         cd:4b:9f:17:2c:b0:f3:6f:2e:63:b1:56:e9:11:9a:64:bc:9f:
         8f:53:4b:68:29:98:b7:81:d5:bb:3b:0c:32:3a:3f:2f:20:ba:
         ef:f3:e8:37:55:b4:b0:1c:dc:7b:1c:5e:99:e8:7a:02:55:4e:
         3e:45:bf:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:07 2025 by rpki-client