Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
File:                     KXNk9QJTTodxoMYll5TCbibUvKQ.mft (raw, json)
Hash identifier:          shUwi7wbW2pqo7QJya1AvRFurW0oywEcIFpsoM3L33Q=
Subject key identifier:   52:71:07:ED:C2:D9:76:C3:C6:64:55:C2:23:EE:B5:10:EB:7F:D0:22
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Certificate issuer:       /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial:       019889218A99F4FA65CBEFDFB35B3B9EF6E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
Manifest number:          148D
Signing time:             Fri 08 Aug 2025 10:02:13 +0000
Manifest this update:     Fri 08 Aug 2025 10:02:13 +0000
Manifest next update:     Sat 09 Aug 2025 10:02:13 +0000
Files and hashes:         1: 2Cp_JC-1gSdENPjM_UWn9lNVG7o.roa (hash: +35xjqek9Nhlc/Z0+VDCYx/DAJw10REdvRuvu6t5M3s=)
                          2: 30p15OIB4xzHle9tD78XYhbRDYI.roa (hash: 9HVb43mRInURyExw74+VWFanW5TCiRHL7zKkRNQfWwc=)
                          3: 46l3zcDNK_2V63AreaLMsQrAgaE.roa (hash: yY63fb353nPGfB15WkNs5SfqIg+XAt04c2yklxwzqUk=)
                          4: DrQJgIgCadGbo__38qvLm4f2buQ.roa (hash: Wx23py7fw++y8qecqXEe1C97qUaOVg6INU3OjKvg+YE=)
                          5: KXNk9QJTTodxoMYll5TCbibUvKQ.crl (hash: Fn4xAyQnHXEuG/SmFgxW7vta0EXtm7RC5AHtShX+iqk=)
                          6: Kc-1Z4R9k1b9QbprK1lrnIRFuzo.roa (hash: mIf5b4mKVeZgEr7VsdotpcNIdYch/DFkBdwgO8kit9A=)
                          7: lTAav4yQpZ87qw_zIchzIsq-5gM.roa (hash: 3b9+qDTSwpfJP/SrqHspJoxR/TN3seQEWvBLhEVGMW0=)
                          8: x8RX4rKBNmZcMpsvt4Nm7APSjAM.roa (hash: zc30VoGi96Z1iHoOnbaFFXszAPpJE3UJpyJWRy15Byo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 10:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:21:8a:99:f4:fa:65:cb:ef:df:b3:5b:3b:9e:f6:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
        Validity
            Not Before: Aug  8 10:02:13 2025 GMT
            Not After : Aug  9 10:02:13 2025 GMT
        Subject: CN=527107edc2d976c3c66455c223eeb510eb7fd022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0e:82:a4:6d:71:2a:bf:77:60:8d:4e:5a:1f:
                    df:1d:36:cb:ce:c9:83:ea:4e:90:2c:2b:f6:c6:0f:
                    53:75:8b:18:b5:21:03:24:04:6f:eb:30:8a:5d:5a:
                    80:6f:4e:58:95:cd:a9:44:76:8e:6a:81:45:df:a5:
                    9a:99:97:3c:e3:c9:63:0e:5e:c6:a3:e7:9f:f6:da:
                    2c:dd:08:33:dd:95:ef:6d:df:48:f6:fe:37:e6:8b:
                    ab:12:db:d0:7b:b7:b9:4e:a1:32:c1:8d:93:07:0c:
                    b3:30:03:5e:35:ec:5b:43:45:0c:c7:de:a7:2a:fd:
                    5d:7a:80:e9:87:cc:53:92:72:89:b9:ed:33:bf:a8:
                    a3:8c:5c:8d:b9:b0:aa:51:de:29:1a:fd:3e:ae:9e:
                    fb:fc:08:1b:84:28:95:d3:0d:db:6d:ae:ba:e8:70:
                    d4:25:7c:51:53:b5:e1:93:3f:2f:0d:aa:b9:e2:1e:
                    1b:e8:0d:00:72:ea:55:76:c2:07:06:9b:c0:e4:2f:
                    9d:4d:5f:48:be:b0:f9:17:a1:3b:db:75:8f:ba:e9:
                    55:b2:bb:c1:92:eb:15:d1:f6:21:0d:33:29:9c:f5:
                    09:78:e8:a3:bb:ad:a6:51:c0:fb:ce:ce:c3:0d:5a:
                    72:d6:2f:37:4e:e4:f2:f9:5d:fc:1d:c7:cb:9b:67:
                    b2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:71:07:ED:C2:D9:76:C3:C6:64:55:C2:23:EE:B5:10:EB:7F:D0:22
            X509v3 Authority Key Identifier:
                keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:43:3a:94:98:15:43:b4:09:86:8b:ae:36:0d:95:70:9e:df:
         2d:e9:04:85:2d:0a:e5:11:ea:28:bb:e7:05:33:60:ee:3e:3c:
         1e:dd:f5:52:92:02:bb:00:e2:74:c1:5c:a1:a6:d9:6d:8d:ef:
         0b:d2:05:b2:a3:53:97:54:d5:11:2b:ba:b6:ec:64:af:00:4a:
         81:aa:5b:e1:fb:35:81:c5:e8:e7:92:5f:07:0f:58:ea:c2:37:
         77:fa:4e:ef:7c:ed:28:17:c4:eb:92:bc:00:55:11:82:28:40:
         fd:91:6e:00:dd:a2:21:2a:d7:1a:8b:85:5f:75:1d:a1:e8:91:
         a8:30:7d:1f:3b:d0:5c:0f:5b:d0:d3:20:cc:9a:de:54:a5:e8:
         75:d5:b0:ea:e0:2a:83:31:52:e4:f8:16:78:33:a8:69:ad:27:
         2f:11:fd:2b:fd:06:6e:66:69:3e:eb:25:92:87:2e:bb:bf:59:
         3f:15:2f:2a:ae:d7:5e:f4:e1:f1:3e:24:17:31:4e:63:ec:98:
         4c:ef:e7:28:3d:86:d2:49:37:f8:91:ff:86:1d:40:55:52:46:
         e7:6a:90:6a:4a:f4:ba:85:1a:54:93:52:ab:45:97:55:fc:9d:
         fc:bc:02:e2:83:0b:1d:0e:2f:85:8a:ed:12:6b:f1:d5:a8:cb:
         f8:cb:87:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:02:12 2025 by rpki-client