Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
File:                     KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft (raw, json)
Hash identifier:          wfiKKFlkWMQ7zFMyWEaTy7VtxI7mMKG3mqSFMb53ltM=
Subject key identifier:   4C:26:05:3A:38:F7:1C:7E:DE:55:30:B8:0C:F4:7C:46:4B:92:F9:C3
Authority key identifier: 29:D5:9E:88:9F:99:AE:FD:DE:5E:94:9F:E8:07:9D:33:7B:57:F4:47
Certificate issuer:       /CN=29d59e889f99aefdde5e949fe8079d337b57f447
Certificate serial:       0198763EDC19BAA831DDC2F5CB55453CBE5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
Manifest number:          1206
Signing time:             Mon 04 Aug 2025 18:01:27 +0000
Manifest this update:     Mon 04 Aug 2025 18:01:27 +0000
Manifest next update:     Tue 05 Aug 2025 18:01:27 +0000
Files and hashes:         1: KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl (hash: mPcBumdY0vkHgHH+y1uA/kf0z5BhRgcgAuvFjlq9UJg=)
                          2: if3bRvhywq0-AQAvqAMvn9zf2xA.roa (hash: e1PwQotXLXaCqhVV0IcDbX0I5jTk19F7wuKZ3aHr5MQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:76:3e:dc:19:ba:a8:31:dd:c2:f5:cb:55:45:3c:be:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d59e889f99aefdde5e949fe8079d337b57f447
        Validity
            Not Before: Aug  4 18:01:27 2025 GMT
            Not After : Aug  5 18:01:27 2025 GMT
        Subject: CN=4c26053a38f71c7ede5530b80cf47c464b92f9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c5:a4:0f:29:05:b9:59:46:27:bb:30:9c:3a:
                    40:ae:aa:1e:4b:7f:da:df:6e:c3:4e:d3:a1:29:a4:
                    45:cb:12:69:c5:8a:c1:67:0b:75:e3:1f:40:aa:ab:
                    14:13:83:fc:95:b3:0e:a6:d8:c8:db:cc:91:e5:ad:
                    4e:68:44:4e:e3:31:7c:35:8e:47:1c:30:40:e1:00:
                    ab:ca:fc:99:ec:b5:20:b5:69:3f:c0:0a:d5:33:59:
                    73:2e:1a:ed:6c:63:8e:38:a3:48:e9:5b:a7:5b:77:
                    a6:82:ed:06:52:10:7d:84:6c:ce:2e:81:53:38:84:
                    f1:1f:6a:60:ce:6a:64:b5:f7:14:fb:4e:73:ba:91:
                    cc:6c:a5:a7:2d:e1:02:eb:07:3d:6b:a4:9f:30:d4:
                    96:45:4c:b3:35:b4:82:35:55:90:f4:56:d2:c9:b4:
                    53:a4:95:5b:a0:16:10:e4:fe:e9:11:32:24:f8:55:
                    fe:f8:4c:2c:b2:ef:3d:a5:73:b8:e3:d4:58:88:a9:
                    ce:14:88:9b:84:12:fb:9c:e9:84:f9:e8:b8:b8:a9:
                    44:c5:8b:32:47:77:83:95:8c:1a:3c:74:58:20:9d:
                    13:b8:05:e8:26:3b:95:29:9a:62:93:7e:ff:db:ed:
                    b1:ed:6f:89:c9:1f:96:e5:fb:2f:d1:52:b0:c2:8c:
                    05:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:26:05:3A:38:F7:1C:7E:DE:55:30:B8:0C:F4:7C:46:4B:92:F9:C3
            X509v3 Authority Key Identifier:
                keyid:29:D5:9E:88:9F:99:AE:FD:DE:5E:94:9F:E8:07:9D:33:7B:57:F4:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:eb:73:93:c4:9c:f6:21:af:7f:75:f8:ef:8d:bf:ce:32:0a:
         73:c1:34:3d:db:18:75:aa:9a:89:d6:f8:da:ce:29:16:24:6b:
         5f:03:83:7c:b3:ca:6c:f1:19:92:1e:25:64:12:57:57:d4:70:
         0e:9a:ce:7e:fc:16:41:71:cc:ac:93:f9:db:4c:ad:be:71:84:
         7e:04:57:7a:56:d8:96:ed:49:85:74:e7:7d:34:93:17:2e:0d:
         80:04:6a:c5:67:e4:1c:51:2e:4c:34:e7:0b:34:74:f8:4b:48:
         9e:9b:33:27:c6:37:b7:d7:bc:9d:0d:ed:80:ee:63:05:38:85:
         af:24:21:14:0f:64:71:c6:60:54:25:9c:fa:0d:45:6b:8e:4b:
         18:0e:fc:a7:3b:8c:e2:5f:47:3a:b1:bc:df:71:ee:17:9e:55:
         41:a2:e0:06:1a:f4:44:fc:eb:c3:21:96:78:d1:ec:47:d2:35:
         c2:48:be:56:ec:99:26:11:26:59:a5:32:10:39:92:f6:a1:9f:
         e3:74:d6:dc:6e:62:04:9a:b0:0b:f9:2b:7a:bf:07:85:75:b2:
         37:b0:7c:f7:c6:69:8c:aa:ae:62:25:a5:2c:41:ce:b2:11:04:
         d7:69:95:fd:a8:51:78:4d:00:77:7d:bb:37:08:a4:37:65:18:
         45:e5:85:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:16:55 2025 by rpki-client