Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
File:                     kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft (raw, json)
Hash identifier:          Ws2igSBG5IbcWCjorJN9d6I1xql/JDcYc0ejZjkwfis=
Subject key identifier:   1A:C6:B1:86:66:E0:27:23:AD:DC:C8:3B:57:69:37:A0:53:E2:35:9E
Authority key identifier: 92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37
Certificate issuer:       /CN=924a97d912d71f80fd36b73efc0fc7969762f337
Certificate serial:       01987D1C62BECA5F7B8A8DCD484D840E5D0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
Manifest number:          161C
Signing time:             Wed 06 Aug 2025 02:01:08 +0000
Manifest this update:     Wed 06 Aug 2025 02:01:08 +0000
Manifest next update:     Thu 07 Aug 2025 02:01:08 +0000
Files and hashes:         1: 1-JNlJinjq7kuel35O_T8kUcWQBw.roa (hash: 1A2mPTXvGu8ShjNKjNG8ljmXuNzR5l5s2QNyKormBf0=)
                          2: kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl (hash: KPbKmqXUQHiAGfbOqfOR951zGGh+ph4BCrA92/Evj2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:1c:62:be:ca:5f:7b:8a:8d:cd:48:4d:84:0e:5d:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=924a97d912d71f80fd36b73efc0fc7969762f337
        Validity
            Not Before: Aug  6 02:01:08 2025 GMT
            Not After : Aug  7 02:01:08 2025 GMT
        Subject: CN=1ac6b18666e02723addcc83b576937a053e2359e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:58:91:fc:d0:19:29:9e:7e:fd:d2:32:4d:c3:
                    11:f0:01:83:d0:2b:bd:e3:b6:4f:b3:57:43:e4:c1:
                    e3:bb:00:4d:3c:e5:e1:37:d6:1f:99:a0:5c:51:06:
                    cf:e9:d6:54:a2:fe:f7:67:32:ac:02:c1:46:90:ae:
                    eb:f6:ab:b6:d5:13:e4:bd:4f:35:31:d9:2a:b0:05:
                    d2:26:61:fd:7d:52:be:e1:97:aa:d7:dd:68:73:50:
                    c7:02:ff:2f:a3:83:a3:a8:78:c0:00:8a:31:b0:0f:
                    6f:8b:6e:b1:3d:5f:23:8b:a7:b9:0e:ef:26:31:85:
                    46:86:cf:6c:aa:9b:b3:cc:74:bf:8b:e8:89:99:f4:
                    cf:c2:b8:76:0b:09:04:c3:1c:0f:5a:bb:ba:5e:1f:
                    4f:b4:96:56:34:52:d3:b7:c3:61:ff:67:11:30:5f:
                    78:37:65:e7:ac:33:79:5c:26:9e:de:27:7b:1c:9a:
                    ac:9c:7b:c3:68:82:40:98:ef:67:1b:8b:bd:e1:f7:
                    5b:fc:27:b2:a6:b3:df:a6:e8:81:56:6b:9c:20:4a:
                    4a:08:1b:1a:be:c9:37:46:a9:d1:d7:10:ba:af:9f:
                    79:bb:aa:ce:9b:02:b8:10:96:49:a6:8c:d5:d6:1e:
                    da:08:2b:75:6c:9f:d0:5e:ed:e7:20:05:9d:46:35:
                    6d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C6:B1:86:66:E0:27:23:AD:DC:C8:3B:57:69:37:A0:53:E2:35:9E
            X509v3 Authority Key Identifier:
                keyid:92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a0:62:da:0f:ad:ea:b0:0a:fc:02:10:49:30:5d:17:cf:32:
         08:0f:fb:78:72:b7:f5:c4:b8:65:ef:7d:7e:d0:f8:63:06:84:
         88:b5:d1:91:0a:60:38:a1:a6:54:43:b9:07:32:5b:fe:a4:22:
         1e:17:e0:e6:8e:a2:9f:a7:34:a0:0c:68:35:93:48:59:bd:03:
         ae:17:9c:e1:63:e7:54:d6:74:21:0a:ac:1b:f4:0e:bb:2a:f5:
         a6:85:7d:bb:ad:a1:40:fe:82:f1:89:6b:1b:1a:ea:78:06:45:
         58:5f:22:0b:34:17:c0:47:97:b3:43:45:79:4f:7f:26:04:7d:
         e9:94:f0:77:8d:a4:09:68:46:e3:0c:84:5c:ba:2e:8b:a1:5a:
         39:a7:a1:4c:a5:f2:be:8b:d4:21:c1:88:af:c3:70:3c:37:7e:
         25:74:21:fc:15:2e:b5:7f:17:15:67:66:a4:5c:32:bc:6e:3e:
         96:6b:28:a6:d7:a8:ea:d9:c2:71:3d:59:7d:3f:56:22:af:6f:
         0d:18:ab:5a:eb:88:73:a3:f3:43:e2:2a:dc:b1:0e:01:45:66:
         0a:8c:7e:a5:14:ff:6d:06:9f:08:be:90:b8:ae:40:c2:87:80:
         34:27:1f:07:ae:2a:23:03:53:6c:de:12:05:b8:fe:df:68:35:
         47:ac:4b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:26:26 2025 by rpki-client