Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
File:                     Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft (raw, json)
Hash identifier:          q1Jmn6C1YpTINYCBREtakSg+AcxUQFBrOxuIUIOISF8=
Subject key identifier:   AB:3F:48:78:52:A3:4C:7E:33:6F:30:FD:4E:3E:9C:7A:1D:2C:CA:25
Authority key identifier: 2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4
Certificate issuer:       /CN=2abb5cd85f525302fd04ff2b6721862b204064d4
Certificate serial:       019880C27B8D6D56FA4C7F4671E8DE95CD74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
Manifest number:          06BE
Signing time:             Wed 06 Aug 2025 19:01:25 +0000
Manifest this update:     Wed 06 Aug 2025 19:01:25 +0000
Manifest next update:     Thu 07 Aug 2025 19:01:25 +0000
Files and hashes:         1: Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl (hash: Xn9dr0yHASfxX+fS/4VR+vxi/oWx6b6KqEqcb2pAPbo=)
                          2: rGYm_uYpmZhwpYcdJzQVjEwEpj8.roa (hash: jRbiNS0Ka01gqXF1TeFMzqMm+Pa1Z/+jEZGkmARhwF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:c2:7b:8d:6d:56:fa:4c:7f:46:71:e8:de:95:cd:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2abb5cd85f525302fd04ff2b6721862b204064d4
        Validity
            Not Before: Aug  6 19:01:25 2025 GMT
            Not After : Aug  7 19:01:25 2025 GMT
        Subject: CN=ab3f487852a34c7e336f30fd4e3e9c7a1d2cca25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7f:8e:d7:5a:e1:40:76:23:d5:0c:41:60:c4:
                    67:35:9b:c3:8d:9a:42:50:d3:33:ec:de:7e:d1:dc:
                    1e:9d:8a:f2:ed:b4:36:71:12:8d:16:59:f9:a9:65:
                    98:08:bc:75:e3:47:08:76:1b:c0:4b:87:fa:fc:22:
                    c9:80:cb:60:3e:c7:1a:ac:9e:3b:69:84:f4:5a:04:
                    7a:9b:45:f8:f1:93:3a:4d:04:f6:d1:60:f6:e7:c7:
                    bd:bf:38:d0:75:90:81:d1:11:a0:0b:5e:06:f2:27:
                    2e:70:74:39:ae:8d:02:b7:99:73:b7:06:13:48:2d:
                    da:f3:7c:c6:b7:7a:96:c8:96:3d:3d:d0:83:57:9e:
                    e7:ce:a8:d2:7a:a6:81:8c:3b:53:17:36:eb:c4:44:
                    99:8e:b5:ba:c8:3a:4f:58:7d:7c:53:7a:5d:2b:ad:
                    6b:f0:40:e8:85:69:51:d0:d9:d2:11:da:38:5d:92:
                    49:ea:af:13:3c:3b:6a:8c:ed:02:36:6c:f5:9b:3a:
                    df:85:85:b2:1c:6e:86:23:95:67:f6:5b:ee:1b:92:
                    d0:5e:61:e3:a4:54:e7:1e:80:aa:4c:ac:6b:ac:75:
                    bc:d4:64:14:5f:f0:a8:d3:fe:f5:2a:16:6d:17:f0:
                    58:3e:93:92:ab:6f:42:3f:87:e1:0a:ea:b6:12:69:
                    e1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3F:48:78:52:A3:4C:7E:33:6F:30:FD:4E:3E:9C:7A:1D:2C:CA:25
            X509v3 Authority Key Identifier:
                keyid:2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f5:60:e7:f2:20:da:ba:06:3d:ea:ac:ee:ee:84:3a:5b:9e:
         1b:60:10:e6:2c:df:90:8c:b1:db:55:f0:75:10:16:93:6e:5c:
         e3:03:30:85:90:7b:12:c2:42:4e:d3:e1:dd:8b:14:a5:f5:59:
         2e:0a:75:76:1c:c7:56:0d:da:eb:db:94:9f:ea:db:e8:a0:00:
         ce:d3:16:20:5b:cc:ae:b3:4d:fb:06:54:51:22:fe:c8:d0:91:
         85:7c:32:92:36:7c:af:d0:27:6c:3f:d9:4a:b4:6b:b0:80:f8:
         e3:e5:ac:fd:32:ad:a0:7e:fa:13:b6:2f:43:d4:23:d3:4a:7e:
         83:42:b6:37:1c:c5:5b:54:18:02:a6:98:fa:00:14:4d:b5:4a:
         4b:9b:c5:cd:34:5b:31:02:44:85:bd:d3:78:53:ce:99:7b:bc:
         06:81:78:8d:99:44:e7:24:16:04:ab:8e:11:dc:45:5e:d6:86:
         60:6b:bd:22:bc:8d:cd:11:c0:3e:b5:5f:64:07:ea:61:e9:19:
         ab:d8:24:f1:5c:b3:5f:ad:09:b9:f1:70:35:91:d2:4d:8a:77:
         dc:e5:b8:59:74:ec:0a:d3:a0:a5:90:ca:90:97:ce:d8:f6:65:
         b8:c1:0b:8e:54:af:4c:ee:f8:dd:b7:3f:c4:b3:cd:a0:ea:57:
         32:6d:a5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:55:21 2025 by rpki-client