Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
File:                     KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft (raw, json)
Hash identifier:          pLbRXdQ4XzgBwBob14V4Yj54LiT2+gjzNkMNO6/3cc4=
Subject key identifier:   A7:58:04:2F:79:A2:01:DC:DF:23:D0:45:ED:09:E1:09:C1:7C:D1:0F
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Certificate issuer:       /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial:       0197684E1AD21DDF18CBFD6AC9FBF8EDC70E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
Manifest number:          0D86
Signing time:             Fri 13 Jun 2025 08:00:38 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:38 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:38 +0000
Files and hashes:         1: 3tVWAqpuhZmIvirALPURMbWbRUo.roa (hash: 8vZgncUoPoI0S65ff9n3cIU9sKbrNMXpH1mUnl/CdOM=)
                          2: GerACxDWw1b6KGz6kGs5iVp2ois.roa (hash: 4GcODZKqecND9v8xjlb0j4xGLtBy9xZhAi6ymZShRcQ=)
                          3: KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl (hash: tGvlXA+J9wq06zQA1+mbIZ5A1g2xrN6rWhfpAekkSn8=)
                          4: LEyJ2WNBj9cTPetK4hsEfLcBcEI.roa (hash: WmOLEifdPoH/joG2SNYp6mcbI8myXya9UUZozRyBF44=)
                          5: Qy3Q7lh00t0205L0nhmAvt2uoOs.roa (hash: a4ie5/FL3GVO5YHgzPjyXYH6PIkYqfX1mb+x+F8lR9c=)
                          6: X35BdP6fZcPzqxMLjnciq7uISgs.roa (hash: X6IFONVs0ZqJ9lk+Np5sgqP+DTo255gzewtTiaP3PC0=)
                          7: eGuHIFNh-O-K6vz68gcxBeLPa18.roa (hash: G6cEnCf7JWL4wnvSWWO7ELeSvpGDDJYGerFFAWSt9CA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:1a:d2:1d:df:18:cb:fd:6a:c9:fb:f8:ed:c7:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
        Validity
            Not Before: Jun 13 08:00:38 2025 GMT
            Not After : Jun 14 08:00:38 2025 GMT
        Subject: CN=a758042f79a201dcdf23d045ed09e109c17cd10f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a1:72:3c:0e:47:3f:d5:06:dd:ac:03:b5:f6:
                    39:d1:3b:c1:b3:87:d6:d4:aa:91:bc:95:fe:c5:79:
                    ff:14:70:6c:d5:4c:e0:49:48:35:4b:0f:63:77:c2:
                    29:a6:c4:c5:9f:8b:27:23:68:86:c8:31:46:e6:76:
                    84:39:36:6f:30:ec:66:56:61:5b:ed:10:43:07:e6:
                    f8:27:b8:e1:6f:49:d9:81:13:5d:ae:9a:6c:ec:df:
                    90:4b:bf:d2:a9:9c:4e:45:0e:e0:99:79:30:ad:4f:
                    4d:a5:ab:6d:5c:de:fc:dc:f8:33:cb:86:8e:f0:ac:
                    5f:3e:4c:17:1f:75:37:14:1c:8e:23:ff:14:78:ee:
                    70:c5:27:01:97:76:23:32:c3:c8:04:a3:45:a0:2d:
                    b4:ca:8e:a5:5d:06:7d:92:1c:a1:e7:51:dc:28:4d:
                    95:95:45:da:af:a1:ad:3a:65:3f:0b:1b:67:69:1e:
                    08:fe:59:18:39:11:4e:18:7d:e9:e7:93:0a:da:2d:
                    03:1a:0f:28:06:a9:8e:9b:34:58:ac:6c:c2:0a:03:
                    6a:24:44:06:17:eb:bb:dd:6e:fa:90:75:83:c8:33:
                    b8:33:e4:87:5e:f9:c0:16:98:9d:c9:29:23:85:05:
                    1a:e8:11:9d:d6:d5:1f:43:0c:4f:00:5d:aa:4a:c1:
                    cb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:58:04:2F:79:A2:01:DC:DF:23:D0:45:ED:09:E1:09:C1:7C:D1:0F
            X509v3 Authority Key Identifier:
                keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c7:ca:22:8c:6b:1d:76:55:9a:14:7a:42:64:ea:1f:be:98:
         21:33:04:f0:f8:38:b8:cd:d8:03:73:8e:e8:c0:90:ac:1c:07:
         dd:f2:e9:4a:56:f7:90:38:b3:f9:a9:07:57:43:c6:bc:ac:bf:
         84:15:88:bf:42:7a:8c:20:88:c7:c1:77:76:4f:a6:b0:88:f3:
         09:b9:fd:84:7f:0a:46:2b:56:2b:69:69:f6:78:1c:6c:5f:2f:
         a4:96:5c:68:7d:2e:9a:ce:38:a6:9f:e4:34:12:af:37:08:59:
         a3:03:90:12:23:2e:4d:bc:66:b5:4c:8e:dd:41:a4:31:e7:bd:
         d4:0c:57:00:5e:8b:ba:f6:52:64:a4:2b:9a:32:0c:e0:ea:0b:
         94:16:a7:d3:6c:e1:2d:6a:6b:53:08:9c:f7:15:a2:05:41:e6:
         1f:f1:73:03:28:bf:63:32:29:09:9b:d0:6f:bd:b7:ee:7b:96:
         61:f0:ca:94:77:20:10:30:6c:47:6c:6b:7b:c0:e0:e0:c9:33:
         8c:c5:8c:0d:69:bd:1d:78:49:0e:3f:73:9d:87:eb:3f:a6:93:
         0d:4a:63:50:28:1d:1d:4f:5a:3a:63:58:7f:3c:f0:6e:1b:ab:
         6f:32:31:91:be:52:9b:ec:7a:a6:f2:f7:d7:a9:6d:31:e1:5d:
         8b:ec:d7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:30:26 2025 by rpki-client