Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
File:                     kkUytPdDz5XL7BhoG6Z6xduFTzM.mft (raw, json)
Hash identifier:          s6xzqT7rjuDa2XclPh/9Ayi5oWUw+y5rZu7lIqY4DLw=
Subject key identifier:   94:09:55:DF:F8:31:79:CB:40:65:DA:3B:59:53:48:03:35:CB:FA:67
Authority key identifier: 92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
Certificate issuer:       /CN=924532b4f743cf95cbec18681ba67ac5db854f33
Certificate serial:       01987DF85621579A3D00DAB6111AEDB49097
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
Manifest number:          09BA
Signing time:             Wed 06 Aug 2025 06:01:23 +0000
Manifest this update:     Wed 06 Aug 2025 06:01:23 +0000
Manifest next update:     Thu 07 Aug 2025 06:01:23 +0000
Files and hashes:         1: 1-nmX1WTJ49yJbme7KYE3jeC7q4Y.roa (hash: zAEWgizXd30YPkGAc5Kl/PvBR6kbJd2FV8oWGwFvE/I=)
                          2: kkUytPdDz5XL7BhoG6Z6xduFTzM.crl (hash: AYAVx6V853ut9D02WRGwQspTZlZ8wj15WrmGbEkp8yY=)
                          3: qJnDw_Xmq2bfel2_89lbdiftBRQ.roa (hash: O4ff3v5t1d6BKPF64qTARMkRfucrOU0EI+MHTwPLMTc=)
                          4: yyVSocue_VD1x2HepimmN6bExsc.roa (hash: 6+QKFhEGkikap65WiEFQ9q79rIkGnFuCa6iQx/4KnWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 06:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:f8:56:21:57:9a:3d:00:da:b6:11:1a:ed:b4:90:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=924532b4f743cf95cbec18681ba67ac5db854f33
        Validity
            Not Before: Aug  6 06:01:23 2025 GMT
            Not After : Aug  7 06:01:23 2025 GMT
        Subject: CN=940955dff83179cb4065da3b5953480335cbfa67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:90:9b:78:96:54:6c:a6:1e:3d:ee:c2:e6:56:
                    e7:93:51:d0:2f:4a:f6:ae:96:cc:26:a8:5c:51:28:
                    40:92:0c:a0:0d:9e:4f:41:d7:0a:71:7c:de:6b:3e:
                    f7:2c:54:3d:d7:b1:2c:13:20:14:24:3f:b1:c0:5e:
                    4c:17:c5:dd:67:f1:04:54:ef:60:e1:f2:9c:07:2d:
                    8b:f2:dd:2c:6d:6c:4a:e7:2b:3a:5b:6d:15:c8:f9:
                    8d:fb:e1:59:87:9a:6c:38:c4:4f:8f:0f:15:06:3b:
                    2e:74:0a:08:a0:15:0c:c6:df:a5:ae:c6:ad:44:cf:
                    09:8d:1e:b1:7e:d6:a5:49:90:54:b6:a5:a2:04:4f:
                    e4:39:fa:2e:47:6c:eb:b4:b1:fc:54:43:78:25:b5:
                    60:a0:da:44:60:a1:2e:97:ee:d1:83:69:6b:18:e6:
                    a3:d8:04:2c:f6:ff:90:a7:a8:14:ee:e2:6c:81:0f:
                    36:f7:61:ac:f2:de:d1:00:2e:b8:07:8a:bf:38:d8:
                    ec:f9:60:c0:96:27:62:b4:42:36:b6:49:3a:5a:ee:
                    f3:c8:db:fe:a6:51:ba:81:33:5a:53:b7:72:01:be:
                    01:e7:18:61:32:d6:f8:67:43:88:58:31:2d:d4:4b:
                    42:6e:7e:0e:87:f8:be:46:5b:fe:91:f7:8a:b2:3e:
                    fd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:09:55:DF:F8:31:79:CB:40:65:DA:3B:59:53:48:03:35:CB:FA:67
            X509v3 Authority Key Identifier:
                keyid:92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:9e:0a:7d:42:50:87:24:18:5a:39:bf:86:e6:df:d4:fb:21:
         02:4f:4f:5a:e1:ea:fe:60:56:74:f5:77:d5:4d:17:6d:73:d6:
         6b:5d:21:85:69:c6:14:4f:d6:eb:41:fa:3a:95:18:16:e4:d7:
         94:a1:96:5a:3d:70:43:8f:8a:fd:b4:b8:0f:84:e6:27:a7:84:
         43:35:24:36:52:3a:08:25:83:54:5b:dc:12:32:6d:13:d5:a7:
         b6:4b:bb:b6:70:fd:fb:4b:fc:37:66:36:2b:34:29:f7:e8:0e:
         a3:da:7e:1a:96:07:fb:43:e8:aa:fd:83:4c:62:dc:6c:62:05:
         46:13:91:24:29:d6:cc:90:db:8a:c6:be:38:e7:34:e0:0a:fc:
         c1:75:f5:09:64:81:5d:db:df:b0:a7:4f:d1:13:78:75:22:45:
         d2:8c:64:32:d2:24:05:ea:b8:ba:b2:6a:63:81:7c:42:b9:cd:
         4f:d8:a8:f6:94:12:85:af:ac:a7:1f:47:00:25:b0:a6:ec:80:
         34:0f:14:69:10:81:a6:a8:6f:cc:54:3b:20:b0:38:87:38:a5:
         88:36:2e:e5:dd:8d:81:bd:08:bf:d0:2d:f5:d3:96:53:06:74:
         d1:f0:68:8a:0c:4f:7f:f0:3a:e4:e0:65:f8:cf:11:70:e1:6b:
         e0:3c:af:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:32:04 2025 by rpki-client