Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
File:                     kYkBZiqOxf9NP0jSkJkjCgV17Io.mft (raw, json)
Hash identifier:          A/Ba4210uMnd0xLa8ohjOITI1L9vcItcTHfQpRVYGQE=
Subject key identifier:   1F:82:A5:56:A2:3D:00:A1:34:B2:77:75:C1:B2:CE:8A:21:FE:0D:6B
Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
Certificate issuer:       /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Certificate serial:       01988DA1E242A0A4FBCC1FCE51904541F1F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
Manifest number:          0F34
Signing time:             Sat 09 Aug 2025 07:00:53 +0000
Manifest this update:     Sat 09 Aug 2025 07:00:53 +0000
Manifest next update:     Sun 10 Aug 2025 07:00:53 +0000
Files and hashes:         1: GWLdQp63HdvOf4msAVGTJwa7Pc0.roa (hash: lF9IocpGAD+RCCazxV1bkIzHwzFIWOektkqyFGjVilw=)
                          2: NXDT_tx5Vl2oHF11vBi6wOJ0LL8.roa (hash: 5chLz8e80WncT0K4TRUx46Jx2KFlA/OouooGEChtx14=)
                          3: ZcvBTfoXIkdWjCXtigYCRkxwU_E.roa (hash: OrUuvu33nOrNM9H7GJKTSRXbyuxdfvDLNi4s7scTDWk=)
                          4: kYkBZiqOxf9NP0jSkJkjCgV17Io.crl (hash: xuCvRzAFxi97Ks/YmH2McuC2v1OjuX7iOGvNHbfKhVw=)
                          5: r816-sGxaSURDTSpC0B66tGRbZs.roa (hash: Cpfj6jfuACJLukpFk9QhkAV4pZmQtjlQ3iLHO8mpk3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:a1:e2:42:a0:a4:fb:cc:1f:ce:51:90:45:41:f1:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
        Validity
            Not Before: Aug  9 07:00:53 2025 GMT
            Not After : Aug 10 07:00:53 2025 GMT
        Subject: CN=1f82a556a23d00a134b27775c1b2ce8a21fe0d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bd:94:b3:6c:89:14:9d:45:61:cf:32:e6:7b:
                    ac:bb:b5:9d:a3:12:ba:b6:bc:63:53:32:b6:a6:bc:
                    bb:19:7e:27:79:ad:8e:1a:79:d6:c8:c1:77:88:38:
                    d5:a6:b9:86:db:7b:b1:be:27:83:47:08:73:b2:9e:
                    80:a4:f8:b1:7d:a9:9d:dd:6d:e4:1d:93:89:93:1e:
                    da:f1:14:05:a2:d8:fa:5f:75:a1:d8:47:87:4b:60:
                    09:88:60:09:11:c5:c7:e5:dc:be:c0:d6:30:71:a4:
                    9c:3b:9a:6f:06:36:e8:54:a1:40:e2:a9:ac:81:c5:
                    ca:08:f2:94:22:ef:99:12:59:ae:b1:8c:c9:c6:c5:
                    9b:6e:84:5e:89:91:67:57:62:ee:a5:c8:2e:1f:20:
                    7a:4d:d8:94:28:9e:bd:3d:d8:cb:af:4d:ac:eb:14:
                    05:77:8c:fc:3c:ad:ba:88:80:d7:b6:0a:ba:2e:5a:
                    73:06:ba:0a:f2:6d:37:04:90:64:09:ca:ab:99:50:
                    be:21:ea:7f:3c:f1:0c:c2:f2:67:50:41:7a:02:18:
                    e0:98:f3:0a:9a:a1:d9:c5:ec:af:91:5e:65:ef:b3:
                    e6:d0:9b:e4:f0:01:f7:65:d8:05:fa:11:1a:57:51:
                    35:9b:06:02:0f:f3:56:f5:0c:d6:53:73:31:0e:ba:
                    55:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:82:A5:56:A2:3D:00:A1:34:B2:77:75:C1:B2:CE:8A:21:FE:0D:6B
            X509v3 Authority Key Identifier:
                keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ba:1c:04:38:80:2a:6e:6c:9f:0a:e2:a7:99:75:b4:ee:02:
         d6:05:c8:29:d5:64:98:84:90:00:00:8d:19:5e:36:42:e3:b6:
         c6:0b:d5:03:cb:ac:d8:bb:92:ca:82:86:05:4e:87:1a:60:a2:
         31:9a:cb:da:7e:ce:44:86:e4:28:c6:3a:c3:b3:dc:48:5b:c6:
         23:dc:44:14:69:37:83:b6:34:e0:3d:b5:9c:64:a6:2d:b8:3f:
         81:0a:c4:36:a6:77:9e:97:0f:e8:4a:bf:73:43:cb:3a:5e:99:
         19:0c:fa:20:78:16:45:5b:f9:cb:0d:4c:2e:33:41:45:bf:b5:
         b9:93:ae:bd:41:20:73:1b:94:99:1a:e7:77:d1:8c:d6:ac:cb:
         cf:ef:ee:48:db:f0:44:cb:3f:ff:4d:51:a6:14:88:8b:74:4e:
         f3:40:d2:6d:65:97:c1:6e:ea:36:a8:a1:d0:c1:ac:0c:07:cc:
         eb:f0:3f:ae:b2:e5:e8:89:7b:c2:0a:7f:23:e0:62:38:ff:4a:
         4e:56:3f:0a:98:f0:01:9b:01:08:fa:de:72:ed:b3:85:de:59:
         cc:b6:80:74:75:93:51:e4:71:90:a0:f8:d0:16:c5:08:2c:39:
         a6:c0:b5:c1:af:d4:aa:8a:b7:27:aa:52:ed:0f:9a:ab:1a:ed:
         db:32:78:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:22:52 2025 by rpki-client