Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
File:                     K76x-Fza0UW9L5et3QlB0y11jec.mft (raw, json)
Hash identifier:          vp87zPQtP4NL+rqw5WS4dsz1cMStSn8L2IQ40haW6Gw=
Subject key identifier:   0B:09:CF:1C:92:17:4D:9C:45:0E:30:71:89:8D:8E:8F:B7:65:32:D3
Authority key identifier: 2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
Certificate issuer:       /CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Certificate serial:       0198857AAE2E359EFFAE2646EB088CB1F18D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
Manifest number:          0386
Signing time:             Thu 07 Aug 2025 17:01:06 +0000
Manifest this update:     Thu 07 Aug 2025 17:01:06 +0000
Manifest next update:     Fri 08 Aug 2025 17:01:06 +0000
Files and hashes:         1: 8Zt8UHUusx_XQrfwEnBO0zgttVQ.roa (hash: 99GtToN6lghv1t5UehgYXJgLt9TbyulNLZ07g/FzqO4=)
                          2: K76x-Fza0UW9L5et3QlB0y11jec.crl (hash: dDwFEkik2hXv/FjcAtLG0EUhkuLLRBsR82YHnJrfafU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 16:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:85:7a:ae:2e:35:9e:ff:ae:26:46:eb:08:8c:b1:f1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
        Validity
            Not Before: Aug  7 17:01:06 2025 GMT
            Not After : Aug  8 17:01:06 2025 GMT
        Subject: CN=0b09cf1c92174d9c450e3071898d8e8fb76532d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2e:cb:90:00:03:06:65:bb:36:ab:60:97:f0:
                    7d:f0:6c:3b:e5:b4:b8:28:7a:44:08:4a:ef:7b:ca:
                    3d:23:ad:86:7c:fb:a3:b5:2d:69:ea:8b:34:a4:98:
                    ac:50:f7:c7:51:53:ee:d1:c4:61:b5:b1:31:d0:10:
                    7b:17:0e:a9:ac:32:da:28:3a:2b:ea:f7:7a:4e:ab:
                    74:bd:c2:02:c6:a7:92:20:85:62:e4:c1:90:7b:63:
                    cc:90:61:20:4a:b4:55:ef:c3:ed:74:17:fe:e0:da:
                    3d:34:04:f8:02:e4:03:85:98:46:6f:58:02:39:c1:
                    7b:bc:e7:a7:d7:c9:4e:b1:fc:09:88:47:79:ee:06:
                    0d:3a:24:bc:3d:a8:a1:45:88:b1:9c:b0:7d:89:e4:
                    1f:98:5d:78:67:54:e3:21:f5:e9:c9:f0:6e:a2:45:
                    f8:99:42:d2:a5:bf:f3:0b:83:56:97:72:8b:46:79:
                    cf:09:08:57:22:14:8f:08:49:b1:81:d4:2d:50:72:
                    86:4a:44:e4:20:22:2a:ff:55:28:9f:93:50:69:55:
                    e3:20:c9:d1:f4:e3:94:cc:dc:e1:c8:b7:43:44:a9:
                    33:cb:8d:eb:58:87:b8:ed:58:64:68:49:49:12:96:
                    b7:d9:72:e3:c7:05:35:f7:f0:f4:17:ab:bf:3b:b3:
                    c6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:09:CF:1C:92:17:4D:9C:45:0E:30:71:89:8D:8E:8F:B7:65:32:D3
            X509v3 Authority Key Identifier:
                keyid:2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:3d:d9:d4:1f:13:74:b1:cf:9e:1f:9f:02:1b:c6:a4:fc:89:
         aa:3d:7d:4e:dd:2b:2d:3a:5a:0d:b6:bb:c0:2c:49:b0:9d:0a:
         f8:c0:fb:34:a3:f7:b8:31:e6:dc:81:79:58:3a:ad:f1:78:cd:
         d0:38:3f:58:f5:24:00:79:5a:dc:01:0e:4b:3d:03:21:32:62:
         5c:bc:1e:31:5a:70:10:8b:ba:ee:9c:0d:55:3b:c4:f8:13:1d:
         e7:72:1d:27:15:71:74:24:3c:e9:7c:69:80:e8:ed:97:97:40:
         b4:92:80:47:00:99:37:c6:54:c8:33:94:fb:09:e5:7d:bd:0c:
         02:32:c8:4e:85:15:1f:b8:19:76:ca:3b:29:2b:a2:cc:3c:f7:
         c5:34:ce:8b:5b:75:b0:1c:cd:19:3f:04:fa:55:0c:7b:29:12:
         68:79:d0:d9:a5:6b:58:01:1b:bc:ef:d8:62:7c:f2:07:3d:4f:
         13:69:99:72:fa:ae:c2:da:31:37:61:9e:0a:01:de:0c:22:19:
         09:f8:94:0c:64:f0:3e:6b:74:25:18:aa:c3:74:4e:da:91:58:
         87:15:f1:20:a0:e2:d9:bb:cf:74:10:2e:ca:9b:e0:1b:f6:2f:
         77:34:1a:e3:df:ea:53:7e:71:db:d5:8e:8d:e6:f5:09:e3:15:
         d5:f2:69:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:27:51 2025 by rpki-client