Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
File:                     KYNUhhlzcozivlBfcnCkNk2U5pE.mft (raw, json)
Hash identifier:          6/PBXrFabDWAFVgZQ8Q+mlbmPuIlAK9E9TWdu1HuYHE=
Subject key identifier:   44:3F:F7:3B:DC:06:F8:B6:88:5F:0F:CE:3E:5D:D8:EF:C8:81:E1:58
Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
Certificate issuer:       /CN=298354861973728ce2be505f7270a4364d94e691
Certificate serial:       01988FC7A023EF2D4BA2EF9CCEE73B21CBEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
Manifest number:          1628
Signing time:             Sat 09 Aug 2025 17:01:21 +0000
Manifest this update:     Sat 09 Aug 2025 17:01:21 +0000
Manifest next update:     Sun 10 Aug 2025 17:01:21 +0000
Files and hashes:         1: KYNUhhlzcozivlBfcnCkNk2U5pE.crl (hash: odnLYYoCtEaDzW63NWjNwSpKAafjxyhV9Vpo5eUdHMk=)
                          2: eoUI00v5kHG-99ELxP-BBcjXoAc.roa (hash: wGk7AZgmxRmrZlb/Q0cgAj09IR2rbdkkeiUHejBRKws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:c7:a0:23:ef:2d:4b:a2:ef:9c:ce:e7:3b:21:cb:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=298354861973728ce2be505f7270a4364d94e691
        Validity
            Not Before: Aug  9 17:01:21 2025 GMT
            Not After : Aug 10 17:01:21 2025 GMT
        Subject: CN=443ff73bdc06f8b6885f0fce3e5dd8efc881e158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d1:e8:fb:6a:25:6d:eb:08:c7:a6:88:78:68:
                    a9:2a:9e:95:cb:5c:7a:ef:ec:dd:b6:5b:f3:4e:32:
                    3d:99:c3:28:c9:a5:63:ee:b5:c7:cc:0b:3d:01:63:
                    e9:76:c5:aa:07:22:2a:b7:f1:49:e4:5d:f2:b1:75:
                    1c:ab:95:77:b3:dd:e8:ce:a1:91:90:8e:cf:22:bf:
                    61:0c:c4:8d:b2:2e:09:02:23:e7:5a:5c:24:d7:11:
                    58:de:9e:d9:5e:5d:19:b8:7c:92:20:cd:d4:41:7f:
                    64:d2:9f:f2:f2:28:f7:f8:2e:d6:3c:20:12:2d:4f:
                    68:97:01:51:c8:8a:ce:32:a6:b3:93:a5:4f:0a:89:
                    89:58:eb:b8:ec:44:83:3a:fd:ec:03:df:d5:37:85:
                    6f:e9:ac:8f:e2:4f:44:6b:18:f7:48:26:d6:79:39:
                    dd:8e:84:c7:58:e5:b3:23:51:10:92:e5:2e:a2:ea:
                    d5:10:09:d7:08:03:5f:a4:3b:49:d8:22:41:97:1a:
                    f6:27:22:b2:3b:8a:f1:5c:cb:7f:38:e1:49:94:d8:
                    f2:94:14:0d:75:fd:40:1a:a9:bf:9f:90:ac:e6:0c:
                    38:0a:90:24:a6:7a:65:0c:6f:e0:fb:a4:99:c8:05:
                    20:93:93:01:d8:97:de:d3:5f:d3:fc:97:11:ad:24:
                    3b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3F:F7:3B:DC:06:F8:B6:88:5F:0F:CE:3E:5D:D8:EF:C8:81:E1:58
            X509v3 Authority Key Identifier:
                keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:09:c6:a5:44:51:20:ec:ca:23:a1:53:6d:5b:a1:5e:36:10:
         cd:0a:17:62:6f:03:9a:b6:72:2d:06:ff:ac:2c:70:ac:e5:35:
         f8:15:2b:a7:de:c2:e0:db:e8:12:f9:e6:0a:36:80:bd:75:ab:
         49:92:b0:03:c9:41:58:5b:5c:03:d4:40:2f:86:10:0f:12:b1:
         a3:14:92:9d:eb:74:6d:a4:95:46:4d:8f:0a:32:f2:c2:1f:2b:
         6a:d1:8e:2f:45:e5:73:0f:e9:ce:76:42:ff:51:a7:52:9b:da:
         1f:23:b6:3a:f8:52:b8:11:40:96:a1:d6:3e:17:82:c2:e9:f0:
         97:f7:45:c9:be:3f:8d:44:ab:5d:d9:8b:c8:12:d9:7e:ff:54:
         89:a9:77:e0:a0:e7:72:96:d0:81:58:05:ed:d1:60:4a:a4:cb:
         0d:08:ea:44:ad:42:bf:9e:d6:37:92:22:ac:12:c8:b5:3c:73:
         4a:74:a6:e9:b6:ce:a5:65:01:fc:a0:14:52:05:68:f3:f1:da:
         a3:db:e3:40:5d:aa:47:e2:ad:53:25:79:05:3b:cd:4a:3a:fa:
         53:5a:bc:b4:d8:16:44:4d:84:c5:44:24:12:9d:be:73:91:7e:
         f4:ec:59:ae:c9:df:5b:46:34:e3:65:4d:71:7c:fe:30:8d:0a:
         9a:d8:50:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:12:52 2025 by rpki-client