Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File:                     k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier:          5Tiox5jSYE8sHOcr09lowjiIbLchlrksRwQEXlv9JQI=
Subject key identifier:   7E:0E:93:54:C0:80:5C:ED:FA:75:A9:4C:95:7E:76:62:58:0D:3A:76
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer:       /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial:       019881D589746A9BF2378512E4DD073519D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number:          1083
Signing time:             Thu 07 Aug 2025 00:01:51 +0000
Manifest this update:     Thu 07 Aug 2025 00:01:51 +0000
Manifest next update:     Fri 08 Aug 2025 00:01:51 +0000
Files and hashes:         1: 1-CkrT83J2r6H2IArRB97VaFfjh0.roa (hash: BhTDJ77YgLb9cA09YBYRFayzA/zGCXfnlywl/s38PZA=)
                          2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: N4Gb6JO1Wi8AUPFR+lQdMSmaXM4ADxtl1eecsQVHZtg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:d5:89:74:6a:9b:f2:37:85:12:e4:dd:07:35:19:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
        Validity
            Not Before: Aug  7 00:01:51 2025 GMT
            Not After : Aug  8 00:01:51 2025 GMT
        Subject: CN=7e0e9354c0805cedfa75a94c957e7662580d3a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d5:5e:96:fa:a3:28:8a:e9:74:93:44:1d:91:
                    fd:12:ce:1d:10:1e:ac:c0:9b:ec:2f:a2:06:97:76:
                    c2:15:c1:38:b8:b0:74:59:c7:80:01:c7:e9:ca:84:
                    ca:d1:7e:ba:2c:4a:b8:69:c5:ce:28:c1:c2:e8:76:
                    d7:2d:55:d0:06:78:45:8d:a7:25:ce:a0:5b:b7:68:
                    8c:46:8d:58:9e:6e:b7:dd:28:70:20:6e:77:df:8a:
                    a6:60:a1:d7:41:12:ac:e0:fd:7c:7f:ca:1e:b5:c6:
                    07:87:5b:e4:88:d8:c1:ec:63:96:82:8d:12:61:00:
                    39:69:bc:84:75:00:83:26:cb:5f:09:26:91:52:cd:
                    45:8d:14:54:86:6c:db:3b:85:dd:ba:45:00:0e:1e:
                    73:f7:ea:ab:b3:3c:fd:45:fc:8a:e3:25:20:ef:28:
                    0e:86:5d:40:41:dc:8b:12:74:a1:da:d9:62:77:db:
                    56:c7:b1:a6:48:53:92:e8:e5:75:b7:75:a1:13:92:
                    24:43:c3:84:60:0e:47:53:88:54:29:b4:c8:a6:19:
                    b0:57:a0:bb:b3:22:3c:b2:f9:fb:5c:ff:2f:ca:25:
                    6b:7b:ff:e5:9d:fa:bf:60:85:78:f5:4b:86:90:d3:
                    94:71:6e:c2:0a:1b:b9:b6:0b:4b:33:f0:f1:3a:56:
                    59:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0E:93:54:C0:80:5C:ED:FA:75:A9:4C:95:7E:76:62:58:0D:3A:76
            X509v3 Authority Key Identifier:
                keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:1c:7b:99:38:5a:ae:8e:98:67:f5:02:fb:0d:47:a5:b0:c7:
         c6:09:0b:e8:79:5d:6d:c4:eb:93:f1:a7:7f:10:b4:9b:00:4c:
         db:c0:d7:5d:1f:02:7a:5a:f1:29:9d:27:e9:9d:e3:70:6c:40:
         a8:72:6d:cf:e2:29:00:a9:41:85:2d:d8:1b:7a:d3:fc:be:63:
         01:13:ee:4b:2e:e7:4d:56:16:ba:d2:57:a7:e2:5b:0b:30:f8:
         f2:2e:57:b4:7a:94:52:94:7c:b9:46:7e:a8:44:54:8f:b1:3a:
         00:a1:c5:21:ea:ad:b7:a2:ad:5f:ea:08:49:56:88:68:d6:a7:
         9d:80:bf:9c:e4:69:d9:f9:2a:17:08:2a:fb:5c:de:56:1e:12:
         a0:15:96:89:33:d1:6b:08:5f:fe:95:3a:aa:23:a0:67:30:c9:
         13:8c:1a:3d:9b:25:95:0e:ee:d8:dc:1c:50:dc:44:01:7f:d0:
         b2:4a:ad:27:28:5e:85:6f:9a:5c:b6:32:ff:82:25:e1:bd:5e:
         17:6e:a2:d1:df:11:35:9a:c3:0f:fb:6a:2b:49:f6:07:0a:a2:
         16:0c:78:f3:a9:ab:1f:e0:29:ad:c0:73:9d:79:3c:ef:e8:86:
         8d:f2:5b:b4:59:cc:f2:36:d4:8e:73:3b:87:d0:20:ff:0f:4f:
         a5:0b:ab:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:20:04 2025 by rpki-client