Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
File:                     Kf49-nfrAgHIVtHh6_AyvMixJNg.mft (raw, json)
Hash identifier:          hYfueI70/YETTP6OjulVIUC+Dx+wivq8MhXK3sQZaww=
Subject key identifier:   F4:64:0A:34:1F:73:58:6F:5F:ED:D2:C1:0B:87:68:62:98:8C:56:A5
Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
Certificate issuer:       /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Certificate serial:       01988EEC354697FF61C375E913204F195C42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
Manifest number:          15B7
Signing time:             Sat 09 Aug 2025 13:01:41 +0000
Manifest this update:     Sat 09 Aug 2025 13:01:41 +0000
Manifest next update:     Sun 10 Aug 2025 13:01:41 +0000
Files and hashes:         1: Kf49-nfrAgHIVtHh6_AyvMixJNg.crl (hash: JuhcEHiL/xxh/Zv0rSMS9TJRjzXL4ImLL3zF6NADjx4=)
                          2: m11OWXhefXzJ44FLBlsWKfsOtOo.roa (hash: djUPPyQWxYPvFQMatObPciTtNbLwqpNgMtWLRjYVwc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:ec:35:46:97:ff:61:c3:75:e9:13:20:4f:19:5c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
        Validity
            Not Before: Aug  9 13:01:41 2025 GMT
            Not After : Aug 10 13:01:41 2025 GMT
        Subject: CN=f4640a341f73586f5fedd2c10b876862988c56a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8b:ea:84:7b:6b:ed:23:8d:3d:be:03:63:38:
                    1e:a7:9d:4f:a3:e4:bd:33:a0:23:79:ec:00:fb:c7:
                    3b:5f:52:e1:2e:b4:ac:e1:d8:b3:c3:ab:0e:39:95:
                    15:63:f8:93:6f:95:82:8e:60:68:b7:73:72:1c:22:
                    6f:bd:f7:c9:ac:47:4a:95:fc:6b:ee:d4:3e:b5:65:
                    bb:20:c0:4b:3d:b7:a5:84:c8:50:67:9f:8f:b6:e6:
                    81:6a:f3:db:e6:23:d0:eb:38:e1:85:f6:c5:bf:58:
                    07:46:92:83:64:30:bd:63:aa:9e:f1:6f:53:31:df:
                    54:3e:ce:3b:2b:d7:19:19:a1:b7:cf:54:de:7c:9e:
                    b9:c6:2c:23:55:fd:1f:57:b2:90:8b:a6:3c:13:c4:
                    44:85:6c:0a:e4:99:f0:72:d4:a8:d3:57:b4:0f:0f:
                    fc:ea:ed:71:2f:03:9a:0d:51:bd:c6:53:7c:3b:88:
                    66:b3:fa:33:34:98:06:8c:2a:78:40:10:45:ab:07:
                    5e:c4:8a:3b:21:b8:10:b0:1d:f6:dd:c9:72:82:72:
                    fa:a4:73:e8:11:18:44:bd:c5:ef:ee:98:95:53:e9:
                    6b:3b:f2:bd:c5:46:0e:86:56:1c:02:0a:44:c8:65:
                    13:af:fa:55:fc:8e:aa:2b:6b:80:9f:d2:02:d2:16:
                    9a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:64:0A:34:1F:73:58:6F:5F:ED:D2:C1:0B:87:68:62:98:8C:56:A5
            X509v3 Authority Key Identifier:
                keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d4:15:a8:38:9b:96:be:df:a7:21:2e:2f:7e:6a:fe:94:d4:
         ca:8e:2c:64:46:de:80:b0:b6:f9:2f:e1:48:f9:74:50:64:0f:
         d7:8f:90:32:38:47:64:07:ba:e9:b3:33:e0:d7:27:cf:83:ac:
         0f:69:62:c7:e8:07:19:26:a9:e9:cc:b3:c9:f0:39:1e:02:4b:
         0f:e5:be:06:9f:6a:79:23:86:80:33:9b:31:db:50:4c:f5:8b:
         c4:18:5e:34:07:09:05:a2:df:48:7e:80:a5:a4:f4:e9:b0:b4:
         c5:63:90:72:61:7e:6f:fc:f5:36:a3:56:fb:fa:6b:8d:26:a5:
         6f:f4:ee:df:dc:5c:8f:98:81:21:95:4f:fd:bf:b7:9e:a9:15:
         41:67:b1:d4:3e:dd:c1:24:b3:aa:30:8e:18:c9:54:f3:7d:fb:
         86:96:1d:a4:8d:6b:fd:6a:ca:08:fe:a6:4d:1c:12:ce:72:84:
         87:e6:ce:0e:d6:0f:99:fd:0a:ad:6b:28:71:3b:b3:6a:a2:2f:
         c9:f1:8f:3c:c9:16:01:bf:80:c1:3d:77:46:a6:96:68:8c:99:
         00:e5:07:2b:24:33:9f:fc:75:37:ca:de:d4:9b:44:88:44:88:
         69:f9:b5:57:2d:ed:54:c3:a2:a4:9d:5f:65:97:2f:be:32:a3:
         91:94:23:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:23:18 2025 by rpki-client