Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft
File:                     pKN763_WXKqa_EbZ8kJzzSfA-WA.mft (raw, json)
Hash identifier:          GJWKfk7rA5phYMwdGTtgd+BjKxhAHqKDF/1vH/rupxM=
Subject key identifier:   F1:A0:EF:B8:1B:FC:AF:D2:7D:C5:0B:29:DF:9B:1A:13:F3:08:78:E3
Authority key identifier: A4:A3:7B:EB:7F:D6:5C:AA:9A:FC:46:D9:F2:42:73:CD:27:C0:F9:60
Certificate issuer:       /CN=a4a37beb7fd65caa9afc46d9f24273cd27c0f960
Certificate serial:       019891B530AB72B4A6E794891545E4143EA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft
Manifest number:          1626
Signing time:             Sun 10 Aug 2025 02:00:27 +0000
Manifest this update:     Sun 10 Aug 2025 02:00:27 +0000
Manifest next update:     Mon 11 Aug 2025 02:00:27 +0000
Files and hashes:         1: eZY2teiRCMuc8ordB3siE6vvyrU.roa (hash: eYVuxyQrp/ArDQADFzcG2OxANFHCCc8GbHzB/2LAyF8=)
                          2: pKN763_WXKqa_EbZ8kJzzSfA-WA.crl (hash: prxRnR3UIndwmSvzSfmstPUPuCUL3d+XKIj7WK8Z3t4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:91:b5:30:ab:72:b4:a6:e7:94:89:15:45:e4:14:3e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4a37beb7fd65caa9afc46d9f24273cd27c0f960
        Validity
            Not Before: Aug 10 02:00:27 2025 GMT
            Not After : Aug 11 02:00:27 2025 GMT
        Subject: CN=f1a0efb81bfcafd27dc50b29df9b1a13f30878e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:79:ca:57:cc:1b:db:ca:d4:22:97:63:80:87:
                    52:5d:6e:ea:45:b8:36:0a:65:6b:48:7e:cb:eb:57:
                    aa:bf:23:9c:76:dc:60:10:5d:3e:1e:78:7b:71:87:
                    c0:4d:1d:a9:79:18:12:46:81:6f:13:9f:81:50:0f:
                    c8:52:7a:9b:fd:96:1b:b0:8a:2e:f0:76:a1:42:0f:
                    f0:00:7f:74:88:c9:df:db:45:a5:3f:a8:10:e8:d0:
                    a9:b8:6b:f1:c8:7d:a7:43:d4:7f:e3:30:ed:5c:be:
                    16:5a:aa:c9:c1:69:0e:0b:74:a7:73:8f:1d:07:eb:
                    a3:9c:30:a9:37:7f:53:c1:3b:5d:aa:7d:61:69:63:
                    6f:f3:e7:b7:89:67:bb:71:b0:b4:08:f3:ce:0d:1a:
                    8f:bd:de:02:8c:c1:fb:45:14:e6:95:22:21:07:c9:
                    61:e7:a7:39:6c:cc:01:05:2d:64:ef:05:f2:97:71:
                    4c:2d:8b:ff:1f:67:14:25:1c:b9:bb:d1:08:2e:d1:
                    8a:b9:18:f4:b5:d6:f2:9c:84:9f:9a:6a:b2:5e:aa:
                    e7:cd:29:10:6a:bb:84:b5:df:61:78:89:13:57:b1:
                    0c:cf:a0:ca:de:a9:70:09:55:bd:60:b7:a2:27:0e:
                    9e:5d:66:45:30:2a:a1:f5:1d:30:ed:45:a9:e1:1e:
                    f1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A0:EF:B8:1B:FC:AF:D2:7D:C5:0B:29:DF:9B:1A:13:F3:08:78:E3
            X509v3 Authority Key Identifier:
                keyid:A4:A3:7B:EB:7F:D6:5C:AA:9A:FC:46:D9:F2:42:73:CD:27:C0:F9:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d3:ba:a8:2a:80:8e:1e:6e:d1:cb:45:8e:4e:fa:bc:99:07:
         d6:3b:6a:e8:79:90:3d:70:bc:5e:07:83:6d:7f:60:ca:a5:ea:
         a3:be:e5:cd:56:a1:40:06:40:9d:36:89:a2:20:cc:20:c7:de:
         5a:98:01:60:b5:5a:e5:2a:80:8f:f8:bf:ed:a0:4e:c7:27:a4:
         91:cb:75:cc:7b:c1:1c:03:3b:52:2c:49:d6:59:7b:f9:b6:da:
         3b:2a:a3:44:0e:f7:57:29:c3:a8:16:7d:19:b8:26:ee:b9:2a:
         1e:13:89:88:e0:cf:4c:07:7b:83:fc:1f:27:00:ec:ad:7b:81:
         1f:8c:9e:35:1b:6a:f3:f9:52:a7:77:26:32:00:5a:7d:98:ef:
         90:11:04:47:81:36:c2:49:0f:9e:28:d3:2a:a2:ae:50:37:ab:
         df:ce:9f:c4:e6:0b:e7:e2:b4:4a:d9:57:40:0d:fb:de:0d:8a:
         51:34:b9:c2:cc:f3:35:78:18:96:ea:23:32:54:3d:4e:7a:6a:
         57:39:2d:ee:4e:61:90:ef:6a:56:51:30:39:44:c6:3f:5c:9c:
         f1:f5:a1:16:22:47:c1:e1:88:b0:b8:e1:ed:3a:fc:fe:56:48:
         5d:06:30:9a:55:d3:d2:5c:78:16:22:6d:9e:35:4a:ad:c2:21:
         f4:e0:a3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:28:46 2025 by rpki-client