Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
File:                     KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json)
Hash identifier:          S0z/fMtSqXQKmF1Va92gPS2so5Zx89FgH20ystxttdk=
Subject key identifier:   45:DE:D7:93:B6:64:90:32:70:44:8E:97:70:6C:7D:15:50:E8:3D:EE
Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
Certificate issuer:       /CN=28178243a0866b091272d1e1eb451e71e413b99a
Certificate serial:       0198808B4F37F7D086CE5CABB07A2EAD787C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
Manifest number:          0660
Signing time:             Wed 06 Aug 2025 18:01:09 +0000
Manifest this update:     Wed 06 Aug 2025 18:01:09 +0000
Manifest next update:     Thu 07 Aug 2025 18:01:09 +0000
Files and hashes:         1: 9b2tSpH9I_YDuaAeaEvrPjYTSYA.roa (hash: CQ+HO3gorMuwRRve3+ZDJ9LD5LzYPKSs3rQmvQ37N3I=)
                          2: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: 9ase8qo2FNGgMGzKeWxTYgsK0krdfkTCZtFuvn5IzzE=)
                          3: aXUaEE4Rc3FPn930-LUjFOMalKE.roa (hash: k4xvVX6CkM3fxWMUWFx76Dj4mkNerIxARf8E+Dyy4rw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:8b:4f:37:f7:d0:86:ce:5c:ab:b0:7a:2e:ad:78:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a
        Validity
            Not Before: Aug  6 18:01:09 2025 GMT
            Not After : Aug  7 18:01:09 2025 GMT
        Subject: CN=45ded793b664903270448e97706c7d1550e83dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9b:86:75:04:aa:07:09:92:ec:22:15:9a:e6:
                    fc:fb:3a:56:3b:18:3a:59:85:22:b0:71:6d:80:6c:
                    de:8c:af:28:92:39:d8:fa:43:8f:e2:19:19:b4:82:
                    bd:bb:60:3c:26:5f:79:d0:c5:ed:6d:ea:c6:c9:e6:
                    62:a6:db:b1:55:d8:f7:f7:e3:a1:77:7e:79:bf:d7:
                    58:13:6c:9a:86:84:50:28:ee:e1:7d:cd:fe:47:70:
                    3c:6b:4d:7b:01:99:a8:17:f0:c6:9b:b5:4e:d9:4b:
                    56:45:a3:d9:b0:36:b1:e2:d9:05:52:97:f6:d6:c3:
                    f5:83:54:f9:73:0e:ae:7d:80:a4:c4:6d:c8:36:b1:
                    35:42:17:ca:cc:b6:cb:3c:f2:b6:aa:07:dc:46:89:
                    a7:30:cd:71:95:c0:d8:5e:2e:f8:ad:3e:70:62:36:
                    07:d6:04:5e:2b:c6:8b:d9:36:dd:ec:f5:df:74:90:
                    c0:9e:6f:4d:7f:d7:89:45:9b:b8:98:5b:78:aa:db:
                    b7:4c:7d:dd:ea:cd:7d:29:b0:69:6c:ed:4d:f9:bf:
                    07:00:51:a7:4b:66:15:9a:65:b9:17:f5:38:5d:4e:
                    83:72:c6:73:34:bd:60:49:79:cb:a4:f3:a8:3b:2b:
                    da:b5:9a:58:a6:a8:09:64:26:e6:0f:15:4b:35:46:
                    dc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DE:D7:93:B6:64:90:32:70:44:8E:97:70:6C:7D:15:50:E8:3D:EE
            X509v3 Authority Key Identifier:
                keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:9e:ed:55:3b:74:4f:bc:7c:64:57:77:a6:39:f5:57:86:e7:
         6a:9b:f4:76:d4:1d:ad:80:4b:09:71:6c:07:4f:74:23:a0:87:
         2b:94:bd:22:af:c5:59:a6:41:3f:0f:42:ef:59:f0:36:90:ac:
         0c:15:96:d3:af:cd:ee:81:b5:03:cd:a0:0e:0b:cb:10:2e:ff:
         c7:5d:09:f4:2d:de:15:e2:4d:8f:9e:53:e9:ba:a0:de:61:1e:
         21:1c:39:a1:30:e9:7a:07:58:a1:d1:97:37:04:69:57:f3:53:
         42:64:cf:8d:14:b2:65:28:13:9d:39:67:96:41:b3:0f:74:af:
         de:cd:59:0a:79:a2:eb:3e:01:95:58:89:67:6c:bb:38:4b:8b:
         1b:56:85:d3:b1:89:eb:08:42:00:aa:a5:a5:56:b2:07:c6:1b:
         77:5d:e1:73:26:1a:4c:0e:b0:c2:85:b0:95:df:1a:13:7a:34:
         bf:75:68:fd:64:f6:5e:bf:99:f6:2b:57:ab:19:5d:0f:35:36:
         bd:79:df:3b:4e:51:4f:c6:ec:02:02:2b:69:de:52:c2:ea:9a:
         46:44:44:e8:db:5b:14:c5:d0:82:cc:ff:6e:f1:52:c2:66:d6:
         b2:00:58:d4:7f:e9:f6:a8:a9:bf:e1:0c:61:2a:ec:03:71:09:
         7d:f1:0e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:30:48 2025 by rpki-client