Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
File:                     kVVkGgex5FW3iSuS2A1gkSORsg0.mft (raw, json)
Hash identifier:          XIoUzjBe/Nkk0pudjg0v9S0I09tZ//RPpB5A/5Lu304=
Subject key identifier:   B9:7A:64:6C:9A:96:64:4E:50:28:4C:2F:73:6C:41:AA:21:BD:99:CD
Authority key identifier: 91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D
Certificate issuer:       /CN=9155641a07b1e455b7892b92d80d60912391b20d
Certificate serial:       019874BE31031CC51C74B97542E816837E27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
Manifest number:          0624
Signing time:             Mon 04 Aug 2025 11:01:18 +0000
Manifest this update:     Mon 04 Aug 2025 11:01:18 +0000
Manifest next update:     Tue 05 Aug 2025 11:01:18 +0000
Files and hashes:         1: kVVkGgex5FW3iSuS2A1gkSORsg0.crl (hash: VAHQNtZiEvvGeecasEs8fzlcumJPlCXCQS17uDK3jvk=)
                          2: ynCtEcXqVCBeEil-xI3WvK_dPRE.roa (hash: 0SptmV2vPd6kYrXF10jAqlyhF9V/f+S3u2RzwXs1PmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:be:31:03:1c:c5:1c:74:b9:75:42:e8:16:83:7e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9155641a07b1e455b7892b92d80d60912391b20d
        Validity
            Not Before: Aug  4 11:01:18 2025 GMT
            Not After : Aug  5 11:01:18 2025 GMT
        Subject: CN=b97a646c9a96644e50284c2f736c41aa21bd99cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1b:9f:e3:b2:69:35:07:05:33:fd:96:a4:1b:
                    cb:32:b3:09:11:82:56:e0:f2:cd:6c:8b:24:88:6c:
                    8c:54:20:35:b8:6e:76:12:d6:46:71:69:f5:ab:3d:
                    01:47:6c:12:92:e0:7f:af:78:76:fb:81:c1:df:7f:
                    37:a4:a5:0b:d6:be:2d:d9:a8:66:ef:f0:b3:61:02:
                    26:76:1e:23:1d:35:f9:bd:55:87:25:cd:8c:3b:b2:
                    51:22:1f:91:d7:da:33:a8:81:4c:05:fe:60:5d:dc:
                    d3:df:ff:40:5a:d7:8b:5a:23:69:e1:49:2c:39:4e:
                    82:33:35:74:61:9d:41:c2:67:9b:9d:7b:c0:24:6a:
                    8b:a1:f5:67:1b:c0:bd:03:a8:9d:3c:93:bf:15:99:
                    f2:48:de:9f:27:93:01:cf:05:fa:f4:63:91:de:79:
                    e3:76:30:27:73:f0:cc:bb:c8:2e:fe:58:e6:ef:2b:
                    4f:2d:ee:0a:91:f8:0d:49:d9:1c:14:e9:9a:1b:60:
                    1c:b6:91:15:51:83:79:3d:3e:ec:f6:4f:10:38:e5:
                    d8:b9:31:03:8c:6e:b1:31:fb:32:51:c4:36:06:39:
                    b9:8a:5b:31:53:9a:8e:7e:c0:39:0d:ac:f0:8a:f4:
                    31:7c:b9:97:17:c6:a2:ea:23:44:d0:2a:2b:b1:d7:
                    60:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7A:64:6C:9A:96:64:4E:50:28:4C:2F:73:6C:41:AA:21:BD:99:CD
            X509v3 Authority Key Identifier:
                keyid:91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:0c:ac:ae:79:c5:4f:13:6b:a8:6b:81:20:c0:1d:f3:ef:96:
         5f:bd:32:05:72:aa:98:2b:0b:fe:53:d6:a1:2a:a7:2c:b1:85:
         ab:c1:91:6f:6c:c8:86:2a:2a:37:64:d8:65:3c:3a:21:ab:79:
         f2:d9:f5:3c:f2:f0:c4:de:55:3c:95:59:30:a6:07:92:6c:4a:
         03:2d:05:1a:b8:dc:a1:cc:5f:bf:85:81:e5:9f:db:e7:be:ee:
         31:57:75:1d:cf:f4:4c:c0:8f:25:cf:ef:7e:00:cf:a1:2e:b0:
         55:89:d4:27:45:8d:df:61:1c:cc:c6:b6:dd:d6:62:05:5d:ae:
         41:32:87:04:57:c6:56:f0:73:ad:cb:b6:63:98:3a:0d:c7:f1:
         ee:c8:9b:e9:5b:7f:8e:ee:4c:7d:6b:85:d2:42:29:06:79:21:
         9e:1c:7b:26:c7:c7:a8:7f:64:c5:ec:a5:94:f4:86:92:a7:21:
         dc:12:f7:c5:2c:df:d6:97:ed:97:e8:0e:31:da:d1:4d:11:31:
         a4:49:92:6c:41:95:5b:d7:a7:34:77:20:f0:3b:fc:b1:1e:36:
         d8:8d:59:98:ea:28:75:62:27:10:1e:53:1d:d3:74:88:16:02:
         35:94:57:53:ec:d3:c5:e5:5c:43:84:15:d3:14:08:2b:26:58:
         03:02:78:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:56:11 2025 by rpki-client