Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
File:                     kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft (raw, json)
Hash identifier:          Mrh8/nh+kGO+45E1jVIUX2zJWh8q+pQgUFjWypoF2r4=
Subject key identifier:   1F:F2:95:82:D0:39:54:BB:77:92:1B:60:F5:67:1E:AC:AA:16:8D:6A
Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
Certificate issuer:       /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Certificate serial:       019881D52D728550BD5C3D3D8B45C3DB57C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
Manifest number:          09CA
Signing time:             Thu 07 Aug 2025 00:01:28 +0000
Manifest this update:     Thu 07 Aug 2025 00:01:28 +0000
Manifest next update:     Fri 08 Aug 2025 00:01:28 +0000
Files and hashes:         1: QskXpCpWaerncmB5Tx33KABcmDs.roa (hash: fifxhbdZnzofmDMHP2JVB3uX7ui63rFuuabdauCyEO0=)
                          2: cpWvTztcB_PVgTrvB1pOMqOcrgg.roa (hash: F85tpYix9Q/joiRkP3de92k+CoUDGGFBzb+mLGcQwm8=)
                          3: kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl (hash: DxMAu9L9K2C2LBlq5sjYTjbOchVfbYg5GSi7oBZUtvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:d5:2d:72:85:50:bd:5c:3d:3d:8b:45:c3:db:57:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
        Validity
            Not Before: Aug  7 00:01:28 2025 GMT
            Not After : Aug  8 00:01:28 2025 GMT
        Subject: CN=1ff29582d03954bb77921b60f5671eacaa168d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7d:3e:68:f1:ec:0a:4d:e0:7f:51:73:b9:09:
                    60:f6:33:d5:df:c4:7a:17:38:d5:7a:4c:e4:49:4c:
                    8c:d6:77:1b:70:24:36:fd:9c:a5:b5:b8:40:97:04:
                    b3:e3:c9:78:48:2b:36:80:97:f7:86:c8:d7:5d:67:
                    83:ca:52:ba:86:81:2c:2c:14:9a:57:af:e4:4e:d1:
                    42:88:e1:7a:3b:a6:a8:33:42:42:f0:89:41:52:46:
                    3b:56:b3:41:e4:0a:d4:b2:dc:b9:8c:7b:05:e3:03:
                    c3:99:bf:13:ca:e2:f6:49:e1:58:c4:d7:90:15:15:
                    56:8d:71:19:a6:59:47:78:c2:3a:56:97:0d:f3:93:
                    6d:f0:17:de:54:40:fc:cf:41:86:41:4b:85:c8:81:
                    f4:f9:bb:74:a6:af:99:ff:c6:f0:12:6c:57:24:52:
                    d8:a2:52:64:ed:ac:ae:79:fe:a8:dc:ce:e7:d4:0e:
                    b8:9a:5f:06:b0:92:7f:4c:08:0e:1a:5e:1d:16:33:
                    fb:06:36:c7:28:bd:dd:6f:23:41:0c:de:85:4b:9e:
                    2a:13:fb:93:9f:3f:51:e2:f6:6d:79:41:f5:e8:b4:
                    4f:39:49:db:0a:a9:96:c1:28:82:3b:eb:52:5e:c6:
                    70:de:ad:be:e1:2a:72:b3:ea:aa:4f:4b:fe:18:74:
                    1c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F2:95:82:D0:39:54:BB:77:92:1B:60:F5:67:1E:AC:AA:16:8D:6A
            X509v3 Authority Key Identifier:
                keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:2b:c0:d3:b8:50:b2:86:ab:df:f2:d5:14:31:41:a6:9e:b9:
         6e:e8:10:00:be:a4:91:f5:8c:49:68:96:8d:41:69:4f:a5:6a:
         c3:d4:58:27:57:f6:17:ca:6e:3d:49:e6:54:fd:05:bb:8d:63:
         0e:80:c8:9a:f0:09:27:98:8d:d7:b3:c7:5d:b5:0b:6c:8a:6d:
         9a:ce:04:3e:8e:5e:7d:7b:e5:ae:74:a8:9a:e8:8d:9d:bb:d1:
         b8:99:60:67:f1:de:cb:ee:66:f4:27:e6:36:07:44:0c:1f:c1:
         dd:93:21:4f:63:21:f5:2e:f5:99:11:61:47:5d:81:b7:82:4c:
         3a:19:8e:ab:52:ee:1b:4d:db:01:69:2d:38:19:4e:90:d6:22:
         21:3f:7a:5e:d7:aa:94:90:12:48:ea:dc:ee:4b:03:f9:b7:5b:
         eb:ab:f7:04:0f:bd:b1:79:7f:89:ae:ec:60:32:05:dd:ac:ad:
         7b:a0:76:c8:7f:ae:db:fc:f5:7a:cd:b4:b9:c3:9c:30:a4:53:
         5a:cc:6a:75:06:ec:60:65:9a:c0:bb:3d:70:bf:e1:16:fd:a4:
         70:01:31:2a:60:fb:78:16:28:de:28:9f:35:a5:fb:49:c6:b5:
         6c:b5:fb:92:7f:33:be:89:5a:e9:5d:2d:dc:7a:c8:b0:b6:e4:
         90:38:62:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:22:49 2025 by rpki-client