Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
File:                     LR08AN6C--6zs4rsMv19LHyamOs.mft (raw, json)
Hash identifier:          vhixiySHfalA08NH4EmhL1VwjvpRKSz3Wz1X2crI5l4=
Subject key identifier:   13:2A:47:CB:55:8B:2F:42:3B:92:53:0C:BC:56:C0:08:D7:86:ED:84
Authority key identifier: 2D:1D:3C:00:DE:82:FB:EE:B3:B3:8A:EC:32:FD:7D:2C:7C:9A:98:EB
Certificate issuer:       /CN=2d1d3c00de82fbeeb3b38aec32fd7d2c7c9a98eb
Certificate serial:       01988166AFF8270C5FF6F8C9F7521EDFA499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
Manifest number:          0345
Signing time:             Wed 06 Aug 2025 22:00:47 +0000
Manifest this update:     Wed 06 Aug 2025 22:00:47 +0000
Manifest next update:     Thu 07 Aug 2025 22:00:47 +0000
Files and hashes:         1: LR08AN6C--6zs4rsMv19LHyamOs.crl (hash: BGBZNlkPv9q8ThnLoSoHKz0Ic+MTBD0UYzvTZwpOdE0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:66:af:f8:27:0c:5f:f6:f8:c9:f7:52:1e:df:a4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1d3c00de82fbeeb3b38aec32fd7d2c7c9a98eb
        Validity
            Not Before: Aug  6 22:00:47 2025 GMT
            Not After : Aug  7 22:00:47 2025 GMT
        Subject: CN=132a47cb558b2f423b92530cbc56c008d786ed84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:95:7b:c5:e8:76:73:c8:ab:66:2a:52:67:da:
                    3d:46:d9:5e:e8:40:b3:b6:6d:30:40:7d:27:36:10:
                    88:0e:95:67:13:3c:6d:63:ff:53:4a:46:10:1a:4a:
                    4a:76:00:03:e1:c7:74:74:3e:66:dc:0c:02:c2:14:
                    5b:4e:9b:73:bb:34:1a:47:af:e2:72:7c:7b:68:8d:
                    7e:d5:75:35:9f:fb:9e:1c:9c:41:3e:30:6a:6c:cc:
                    0a:45:36:0d:5d:5d:4f:ae:b6:0c:01:11:bb:56:23:
                    ab:9d:36:fc:59:dc:0d:d7:8a:34:4a:5b:7e:89:77:
                    16:d4:6a:06:fd:e2:4b:17:55:6f:bc:8f:6f:ec:f9:
                    45:f8:dc:bf:cf:91:b8:7a:31:aa:32:4c:e1:1e:4b:
                    ae:3f:78:43:36:97:5b:d8:96:38:cf:32:80:34:16:
                    07:cb:ae:c3:ce:f0:56:19:c0:ee:ed:42:5f:ea:9f:
                    6d:f5:07:02:36:6d:1b:d1:2d:b8:94:51:d2:41:de:
                    7f:3d:07:fb:2f:15:2c:d2:8f:64:43:0a:d4:39:4d:
                    b3:03:c4:ed:d4:63:0f:33:90:53:be:0a:19:a9:04:
                    a4:82:5a:d7:a1:1b:d2:89:aa:a9:ed:b0:5d:2e:1f:
                    ee:f9:32:85:e4:e2:be:ad:ae:90:54:1a:6f:d0:22:
                    5a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2A:47:CB:55:8B:2F:42:3B:92:53:0C:BC:56:C0:08:D7:86:ED:84
            X509v3 Authority Key Identifier:
                keyid:2D:1D:3C:00:DE:82:FB:EE:B3:B3:8A:EC:32:FD:7D:2C:7C:9A:98:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:bc:07:88:8a:43:5f:e3:a9:db:22:83:be:95:b3:64:54:28:
         72:2f:c3:03:c6:a4:29:87:0b:f5:88:fb:94:04:14:86:5f:65:
         dc:3c:88:59:ec:a8:0a:76:70:aa:cc:22:b4:06:0b:ec:9c:d5:
         b7:e9:84:87:e9:40:de:b5:a5:4b:dc:d9:8b:92:1e:3d:c0:b6:
         9e:ba:ae:4a:4e:4b:fd:40:3a:01:87:fc:10:84:59:88:0a:63:
         aa:93:b7:2b:dd:fd:6d:3c:c1:a9:74:60:43:a7:68:12:34:67:
         81:0e:55:a5:8b:43:aa:01:5b:e2:b6:92:f8:96:bd:16:e8:81:
         33:20:46:81:cb:cd:bc:7a:32:9d:1e:80:f4:a7:04:12:06:7d:
         88:59:4a:74:71:34:c5:38:e6:f2:01:fd:f9:77:ed:b6:90:8c:
         09:00:ab:74:e3:04:ca:7d:e9:d5:90:2c:72:9d:d7:9c:89:07:
         3f:f8:b3:8e:45:c9:26:6c:d5:35:8b:00:c6:2a:b0:f4:c0:57:
         73:53:7b:f6:76:96:92:d6:d1:f0:32:5d:68:23:4e:25:3d:73:
         df:47:00:fd:d9:59:d1:dd:1c:c0:9c:39:05:ca:1d:f7:20:67:
         56:13:1b:9c:15:d0:04:7e:96:59:51:46:eb:55:92:f7:5d:92:
         2a:f0:0d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:51 2025 by rpki-client