Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
File:                     rKZqWTivVnqeKbT3bxFWB8K4qiA.mft (raw, json)
Hash identifier:          Fla7PKPfK7RWnqzhV8xhJKM8AE/hbCQJbt7s+FB1IiQ=
Subject key identifier:   67:D5:19:2B:4F:8C:32:C2:F3:7A:7D:58:7A:01:13:5E:68:A4:C2:04
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Certificate issuer:       /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial:       019881D5596F7B26BF9012D24947F7544998
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
Manifest number:          1636
Signing time:             Thu 07 Aug 2025 00:01:39 +0000
Manifest this update:     Thu 07 Aug 2025 00:01:39 +0000
Manifest next update:     Fri 08 Aug 2025 00:01:39 +0000
Files and hashes:         1: A6WXTZEzXmIQ_NgfUonzU2PUwgA.roa (hash: woiA9rRwDxAjmj0pEa4K5XOpCIKapMbaEdUIwATG6G0=)
                          2: S_-0FDIrVQDzaijY6VxqByAB1lc.roa (hash: TfqMFDdllR/MppgsJbJ3DDwOFZhjdMJFII0e9w5g/s0=)
                          3: YMJHPYOCkpMfZfNHoGYeBjxWaOI.roa (hash: yJjrgN8kBsEfpA42zaZLGGIadnU9Q2CCBpQQsiqKfFk=)
                          4: YS8EyL0X_H_c4qE4GwI1B17qR08.roa (hash: 3DDadYTlUG0bmqRy14MjCUdovVAeoV0aa85eQ5tBk7Q=)
                          5: nna5EA2g1qX6KviopTAzfZKYgqM.roa (hash: +1+cT+lcsXs8CMprSc3uLnHvYXXY0ACjWW6HRhv0N78=)
                          6: rKZqWTivVnqeKbT3bxFWB8K4qiA.crl (hash: Ugs8zGbA7i1UY/pcg/IAdVdzyAlDDUB/0aGOCYDR40A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:d5:59:6f:7b:26:bf:90:12:d2:49:47:f7:54:49:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
        Validity
            Not Before: Aug  7 00:01:39 2025 GMT
            Not After : Aug  8 00:01:39 2025 GMT
        Subject: CN=67d5192b4f8c32c2f37a7d587a01135e68a4c204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f0:6b:91:c6:4c:3b:02:7e:2b:f4:64:3b:81:
                    ac:88:52:40:c2:c0:16:73:36:96:fb:40:72:82:74:
                    b7:77:00:a9:93:5e:9d:b9:b0:10:98:db:ef:f7:5c:
                    ad:d4:e3:3a:8c:ee:28:e4:7b:93:49:9d:b3:50:7a:
                    82:f0:3d:5e:f6:73:5b:7e:9c:63:2f:fa:84:ae:d8:
                    38:8c:6e:bd:3a:70:08:fd:c7:e2:69:bf:9f:b4:d4:
                    a5:7b:2b:24:33:fd:92:e1:7b:f2:46:39:08:45:e7:
                    41:74:16:bc:ce:30:0b:ac:96:9d:4f:55:1c:d4:97:
                    fc:d8:f4:38:5d:8f:8a:11:a7:09:a5:f2:ce:04:39:
                    65:8a:ba:c9:ca:ea:4e:3a:5e:69:81:87:2e:5f:5b:
                    2f:f7:a9:df:aa:26:4e:5d:ef:97:52:58:fa:34:17:
                    4e:79:db:d8:dc:ff:cf:f6:28:4e:9a:91:31:79:d4:
                    8e:0f:17:d0:ba:43:c7:9b:ff:11:07:03:7a:b2:da:
                    21:75:66:e8:e8:c7:f1:8e:66:e6:ac:e4:64:b7:27:
                    8d:fe:a6:e5:09:bb:1b:fb:42:81:6e:22:58:bc:2f:
                    9c:ad:5e:55:d0:7c:4f:cd:ee:84:98:67:ac:6f:b8:
                    f3:13:41:d9:1b:d4:eb:d4:30:85:ae:e0:fa:8c:12:
                    e5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D5:19:2B:4F:8C:32:C2:F3:7A:7D:58:7A:01:13:5E:68:A4:C2:04
            X509v3 Authority Key Identifier:
                keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:58:0d:56:e3:f8:c4:b9:f2:f5:d6:86:60:20:04:6e:57:ed:
         a5:56:35:62:87:80:de:a8:c2:f3:ad:f2:4b:a7:1c:29:9e:e0:
         72:be:3c:53:66:5e:54:da:2b:c8:63:ce:dc:a0:f1:35:e4:b3:
         57:5a:f6:7d:6b:87:6e:87:08:e8:cf:c5:7b:6c:1f:87:00:bc:
         00:9b:2f:fb:d7:63:3c:86:c4:8f:f9:25:61:6f:71:a7:18:f1:
         ff:03:4d:e9:a1:b9:dc:8b:db:0f:87:33:25:09:b9:d4:9a:21:
         50:2f:dc:3f:7d:1d:35:d3:2b:0f:d3:95:c4:01:95:c8:23:54:
         f7:a4:55:cf:2d:4f:d0:69:cb:00:0b:c1:35:aa:5c:35:56:ca:
         98:d6:47:b1:f1:9b:b8:ec:df:ac:73:17:c8:85:b3:c8:ab:3d:
         1f:ca:63:a7:18:07:e0:69:9f:ef:b9:b9:66:5e:d1:22:b9:bc:
         dc:59:b4:55:0d:e1:fb:d2:ff:1a:3e:48:b4:33:6b:49:5b:bf:
         37:8f:07:74:e5:1a:87:7a:f8:83:ef:9f:3a:7d:9c:76:d2:dd:
         2f:63:a1:3a:36:55:ac:b4:b6:84:aa:b8:09:5c:5a:d5:d9:07:
         25:62:f6:e9:d9:e5:35:63:e8:31:83:35:8f:be:1a:ab:9b:31:
         bd:77:90:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:29:42 2025 by rpki-client