Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
File:                     KXnMQ8JGn_pc-LesY5sB86dorFU.mft (raw, json)
Hash identifier:          2z8C/kPQcWepX5SYgSfUPBJbAOueagcLstEBq0DmL90=
Subject key identifier:   F5:6D:39:40:A8:56:6E:BC:B1:3B:F7:D3:58:43:26:B5:82:6E:E3:1C
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Certificate issuer:       /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial:       01976A05897B62B6FD54ED15550A2B9C85C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
Manifest number:          072D
Signing time:             Fri 13 Jun 2025 16:00:36 +0000
Manifest this update:     Fri 13 Jun 2025 16:00:36 +0000
Manifest next update:     Sat 14 Jun 2025 16:00:36 +0000
Files and hashes:         1: EI7dYlJh6LhMXB8o9nb3T4Z5aSU.roa (hash: MmSw3Gp5lTTxkK0eiPx+eF3FQfljG+ipyig54PF6DUw=)
                          2: KXnMQ8JGn_pc-LesY5sB86dorFU.crl (hash: 4af10jvVSx+iV4hbszSPgMECN5aib+SIKOW96kBrDpA=)
                          3: RnDsNDAUOmfocBcXgLTcHPDDhKQ.roa (hash: yyfreslJl3l+RdMxXIwzsT6k7E7HMN8jhFZGTbEdlJI=)
                          4: Y8zzieez_mdBu3g9ytJW3F1qtcM.roa (hash: IBQYnJmIJpRbjM/GjJNvEs/gT4e0NBRUv4AwTGSAB8I=)
                          5: _eEka1D2F9svheD7_1S50A6jg0c.roa (hash: FY3lzS47CrifHw8hxi2Yq9gCSugm8bX/KQaXGUUplkU=)
                          6: jTf4hu8p-YdeMkBcAMreST3RURY.roa (hash: IZtRwQReOQuA1Z4S5nLNVFRKIJVo5gpQ/QND37UUm9g=)
                          7: qV0bi1f4xUUogQC2jTvfOlCFNsY.roa (hash: JeZIDT/pHiJyZCYpNCof5wbSJ0INX3sJ+QZbs083uM0=)
                          8: tW9K0gmr3gNJNZi6H4Oj8e3Jn10.roa (hash: bWzKXJxMql9A44/Gmu3Ld5HFcp9B6Ivj+R3Ym/3BJEA=)
                          9: ueIl5HLpFqn43HBQc7-Q4ZVn06k.roa (hash: fzhg7jHCYT5oIQ824HH1vwjcqcxosVhT8YpZmbw8K50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:89:7b:62:b6:fd:54:ed:15:55:0a:2b:9c:85:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
        Validity
            Not Before: Jun 13 16:00:36 2025 GMT
            Not After : Jun 14 16:00:36 2025 GMT
        Subject: CN=f56d3940a8566ebcb13bf7d3584326b5826ee31c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ff:19:42:3c:5a:a7:72:7c:0f:49:6c:97:db:
                    17:2d:dd:d9:eb:a8:44:98:19:a9:29:b5:a0:36:e1:
                    4c:d1:45:58:9a:7d:ee:52:48:37:6d:7a:73:c1:6b:
                    a7:2d:bc:fc:f0:bb:13:98:0b:b0:c3:8f:30:0a:65:
                    b4:19:04:0c:9a:33:84:07:1a:6c:da:d9:10:c3:12:
                    0e:5a:eb:ef:d5:4c:9c:f0:17:1f:b1:d4:21:83:4a:
                    e2:82:24:f3:62:b8:15:eb:94:56:d8:f5:3b:af:32:
                    2f:99:da:37:34:f2:e3:11:40:b9:fd:72:f7:02:50:
                    c1:26:48:3b:2a:38:d8:a4:6c:15:ba:e7:98:53:a2:
                    38:8e:0d:b3:d6:fc:0a:39:2b:6a:0d:b5:b1:dd:37:
                    22:c9:13:eb:ae:f7:d1:2c:b2:3f:ee:8f:ef:a0:ac:
                    69:35:63:53:c5:dd:ba:de:dc:96:f9:d7:d4:24:01:
                    18:15:02:26:99:9b:c4:d5:fa:6f:42:5e:60:a5:99:
                    93:46:d9:86:99:1f:6d:f3:0d:e8:9b:15:68:74:42:
                    c5:df:5c:2b:ab:eb:73:7b:41:0e:b5:1e:25:c1:e2:
                    11:88:6d:7b:20:79:e6:66:cb:b6:2b:0c:06:ea:22:
                    e2:07:32:92:cb:26:04:c3:b4:66:67:f4:94:bd:53:
                    48:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6D:39:40:A8:56:6E:BC:B1:3B:F7:D3:58:43:26:B5:82:6E:E3:1C
            X509v3 Authority Key Identifier:
                keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:0c:bc:8e:36:04:ab:e6:30:14:f8:4f:e8:6b:2c:5d:22:bc:
         d5:61:84:fa:20:ab:95:07:44:6e:d2:86:ee:01:c6:d7:7c:22:
         6a:86:ee:31:f5:bd:7c:23:c6:0f:e7:71:69:7f:93:0b:77:73:
         b9:e8:59:b5:8d:7f:d3:8d:0f:e0:f8:70:7a:c7:54:a0:57:9e:
         3c:83:ce:95:fa:7a:3f:d2:77:e0:1d:69:35:9c:cb:7b:7f:22:
         df:e1:78:57:51:e2:91:d5:7a:9e:e2:09:b8:96:5a:21:50:61:
         7d:9b:71:18:02:dc:39:54:94:bb:f3:10:f6:12:3d:c6:2e:fe:
         34:35:d1:ef:6e:07:5d:6f:2b:9e:21:3c:61:11:e8:9f:09:78:
         fd:99:0f:15:da:3f:57:e5:ab:b8:1a:42:26:6f:f6:0e:59:06:
         2a:bf:dd:61:5e:14:7e:2a:4f:82:f1:70:c0:82:4e:b7:d4:c0:
         24:4a:45:93:12:d9:f4:c5:c6:d5:4a:05:67:78:c1:2d:1a:e6:
         b8:a4:0f:2f:84:e3:f6:68:6f:f2:fd:0c:d2:32:89:77:f6:11:
         cb:8c:6e:11:0f:6c:37:36:3d:8d:77:9d:25:ef:fa:17:b7:33:
         bf:8f:39:1a:61:f8:70:9b:4a:63:58:9e:85:4b:44:0d:10:d8:
         c8:c1:9c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:08:27 2025 by rpki-client