Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
File:                     kGDG8B34XUoDPxJWU-Exe29Chk4.mft (raw, json)
Hash identifier:          F/zC+PebUakIUhPl3C+V6EtT/XBbT1hZz3urQrtEXWY=
Subject key identifier:   94:BD:C6:6D:4E:0F:AE:20:76:93:61:C6:21:B6:1D:83:56:E2:67:FD
Authority key identifier: 90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
Certificate issuer:       /CN=9060c6f01df85d4a033f125653e1317b6f42864e
Certificate serial:       0198726202FCA4F48AA332A38E000E7F269B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
Manifest number:          1015
Signing time:             Mon 04 Aug 2025 00:01:22 +0000
Manifest this update:     Mon 04 Aug 2025 00:01:22 +0000
Manifest next update:     Tue 05 Aug 2025 00:01:22 +0000
Files and hashes:         1: 1-p8SrWJ5THOyKbL_R9fZqVDF5Lg.roa (hash: Dpj5AMuFNg0086YuEbRvx4oDSlmmrMJ7GujnIQgUfaA=)
                          2: kGDG8B34XUoDPxJWU-Exe29Chk4.crl (hash: TkvnnirZPS1ORwmZrfo+hEPqkyJMXp4j2Z1Fu7flfR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 00:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:62:02:fc:a4:f4:8a:a3:32:a3:8e:00:0e:7f:26:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9060c6f01df85d4a033f125653e1317b6f42864e
        Validity
            Not Before: Aug  4 00:01:22 2025 GMT
            Not After : Aug  5 00:01:22 2025 GMT
        Subject: CN=94bdc66d4e0fae20769361c621b61d8356e267fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:49:9a:bb:ad:16:ca:22:71:34:e1:17:55:b0:
                    86:b0:f2:88:b6:bb:28:c6:c2:ec:27:86:ce:3b:68:
                    f5:4b:37:52:c2:c8:4e:92:62:68:88:9c:71:e6:36:
                    e6:da:4c:c2:c2:7f:75:74:06:ab:ee:61:e5:80:23:
                    6d:bb:67:85:1c:17:47:8b:bb:09:17:07:ef:9b:f9:
                    c4:94:22:bb:53:ed:d7:10:4b:ac:54:a9:8e:53:cf:
                    51:3b:b7:79:ec:d1:0e:92:ef:e0:1c:69:34:7f:d7:
                    fd:83:db:b4:77:e7:d6:d2:ce:3b:98:1e:1b:4a:2e:
                    c9:e0:95:51:d7:09:4e:b1:75:f8:7a:96:4b:c2:3e:
                    dc:0f:ea:2c:f9:f6:48:5a:82:57:8a:3e:1b:da:96:
                    5e:06:26:c6:1e:3d:a9:25:3a:f3:24:9c:50:23:9f:
                    06:c2:db:20:6a:76:d5:7b:d7:fe:1b:5c:07:da:28:
                    95:e7:77:30:95:26:55:6d:f0:cf:2d:2b:9d:b9:52:
                    4c:78:8f:e3:c8:f2:3e:6e:49:73:d2:3a:ad:64:9b:
                    43:a8:c4:07:f9:ac:3f:db:ad:49:dc:21:ee:90:02:
                    24:ea:b8:27:d9:12:90:e8:1f:aa:e8:96:ee:cd:80:
                    f7:93:85:50:01:f4:c5:52:64:2c:79:0b:73:67:56:
                    cf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BD:C6:6D:4E:0F:AE:20:76:93:61:C6:21:B6:1D:83:56:E2:67:FD
            X509v3 Authority Key Identifier:
                keyid:90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:7e:2b:34:63:af:bc:dd:3e:9c:e1:d7:41:c7:47:dc:12:d4:
         b9:d4:15:06:c1:36:fa:00:99:bd:d1:b1:98:e1:7b:e2:c9:42:
         3a:a9:c4:30:d0:8d:a3:bd:0d:70:73:1f:d5:92:82:a2:30:ce:
         a0:d6:a6:27:c2:7c:95:5a:3a:a6:bb:fc:8d:f5:4a:c7:f2:4e:
         e1:9e:52:d6:9b:08:e3:36:63:11:29:18:bb:bf:ea:8e:e4:8e:
         56:2b:13:0b:05:dc:aa:55:7a:44:b9:bc:49:95:05:1b:ef:32:
         64:57:03:8b:2e:e3:aa:77:41:14:bc:30:fb:d2:75:4a:28:39:
         75:d2:77:56:1c:f5:5c:e7:dc:57:06:1f:43:65:4f:e6:2e:4f:
         33:c6:9b:72:7e:65:d8:65:4a:cd:14:c8:8f:57:70:77:07:d8:
         26:e9:e1:28:13:0d:85:6d:55:b1:fe:71:c8:b9:11:d0:94:e5:
         13:90:ac:84:4b:cc:30:ab:ed:af:b6:2c:df:c9:6a:96:ee:cc:
         59:2b:0e:88:8f:d2:d0:5e:05:cf:81:5c:4b:ce:7b:46:dc:b2:
         32:41:9d:44:ac:80:73:57:5e:5c:b5:a3:06:b4:45:d7:3a:38:
         f9:9a:8a:27:5c:5b:d3:a2:22:89:3a:12:94:4d:b2:32:39:6f:
         e3:7b:cd:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyYgL8pPSKozKjjgAOfyabMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNjBjNmYwMWRmODVkNGEwMzNmMTI1NjUzZTEzMTdiNmY0
Mjg2NGUwHhcNMjUwODA0MDAwMTIyWhcNMjUwODA1MDAwMTIyWjAzMTEwLwYDVQQD
Eyg5NGJkYzY2ZDRlMGZhZTIwNzY5MzYxYzYyMWI2MWQ4MzU2ZTI2N2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Emau60WyiJxNOEXVbCGsPKItrso
xsLsJ4bOO2j1SzdSwshOkmJoiJxx5jbm2kzCwn91dAar7mHlgCNtu2eFHBdHi7sJ
Fwfvm/nElCK7U+3XEEusVKmOU89RO7d57NEOku/gHGk0f9f9g9u0d+fW0s47mB4b
Si7J4JVR1wlOsXX4epZLwj7cD+os+fZIWoJXij4b2pZeBibGHj2pJTrzJJxQI58G
wtsganbVe9f+G1wH2iiV53cwlSZVbfDPLSuduVJMeI/jyPI+bklz0jqtZJtDqMQH
+aw/261J3CHukAIk6rgn2RKQ6B+q6JbuzYD3k4VQAfTFUmQseQtzZ1bPMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJS9xm1OD64gdpNhxiG2HYNW4mf9MB8GA1UdIwQY
MBaAFJBgxvAd+F1KAz8SVlPhMXtvQoZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0dERzhCMzRYVW9EUHhKV1UtRXhlMjlDaGs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82N2QwN2MtYTU2MS00NTdmLWEwNDQt
Y2UwYjhhNTFhNDUxLzEva0dERzhCMzRYVW9EUHhKV1UtRXhlMjlDaGs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82N2QwN2MtYTU2MS00NTdmLWEwNDQtY2UwYjhhNTFhNDUx
LzEva0dERzhCMzRYVW9EUHhKV1UtRXhlMjlDaGs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwn4rNGOv
vN0+nOHXQcdH3BLUudQVBsE2+gCZvdGxmOF74slCOqnEMNCNo70NcHMf1ZKCojDO
oNamJ8J8lVo6prv8jfVKx/JO4Z5S1psI4zZjESkYu7/qjuSOVisTCwXcqlV6RLm8
SZUFG+8yZFcDiy7jqndBFLww+9J1Sig5ddJ3Vhz1XOfcVwYfQ2VP5i5PM8abcn5l
2GVKzRTIj1dwdwfYJunhKBMNhW1Vsf5xyLkR0JTlE5CshEvMMKvtr7Ys38lqlu7M
WSsOiI/S0F4Fz4FcS857RtyyMkGdRKyAc1deXLWjBrRF1zo4+ZqKJ1xb06IiiToS
lE2yMjlv43vNDQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:38 2025 by rpki-client