Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
File:                     kY9WbI_5USpXSMwUifCTXCXYxKs.mft (raw, json)
Hash identifier:          nO371c1t2n7ANBTzlZRIbZcG/0s5Ljup+7GBOQ0xRAQ=
Subject key identifier:   A6:D6:7F:F5:77:CD:7C:AB:2F:04:7A:92:0F:A8:D8:FB:97:98:E3:67
Authority key identifier: 91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB
Certificate issuer:       /CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab
Certificate serial:       01987D8A91BCD54F5AE7AF15B8EB34FFAD80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
Manifest number:          AB
Signing time:             Wed 06 Aug 2025 04:01:29 +0000
Manifest this update:     Wed 06 Aug 2025 04:01:29 +0000
Manifest next update:     Thu 07 Aug 2025 04:01:29 +0000
Files and hashes:         1: Hma6GYWs5Tdom6T2R14STXiUtLo.roa (hash: nzMAO+8FCPXY1wL1mWVZEzCo6GePIs/i8E7UJEjZ+GM=)
                          2: kY9WbI_5USpXSMwUifCTXCXYxKs.crl (hash: urBMqJ81FcNMmBNXHS0gPrCxaAnHMDXMTjp7IMxM4Ds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8a:91:bc:d5:4f:5a:e7:af:15:b8:eb:34:ff:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab
        Validity
            Not Before: Aug  6 04:01:29 2025 GMT
            Not After : Aug  7 04:01:29 2025 GMT
        Subject: CN=a6d67ff577cd7cab2f047a920fa8d8fb9798e367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fe:d0:3d:d6:53:c3:2d:ec:88:d9:64:fe:78:
                    30:88:f9:85:5b:57:64:2e:60:ac:62:42:d0:ad:1e:
                    6a:94:e4:8f:90:86:dc:6b:de:8d:fe:c7:b6:19:8b:
                    67:57:16:ef:5c:8e:44:59:16:c2:f6:5d:6b:03:d2:
                    de:dc:2b:d7:da:e7:ba:61:0b:6a:4f:16:a5:01:0b:
                    7f:f0:e1:56:24:e4:f1:d6:cd:6c:45:ae:3a:9d:ad:
                    de:76:52:fd:77:eb:26:66:c2:95:1b:a0:32:81:0d:
                    33:75:5f:89:e0:e4:20:b8:4f:0f:7c:1a:55:ea:cf:
                    a2:8f:56:64:3c:7b:f2:e7:f7:2f:19:30:55:bd:6e:
                    18:89:bf:4f:65:09:b3:d2:c3:79:46:b9:ef:18:80:
                    8a:1a:02:48:0c:90:9c:cf:57:29:e4:92:45:b9:8a:
                    22:92:f8:ed:b4:72:40:ac:5c:32:de:f3:73:60:b9:
                    dc:03:35:06:e0:0c:2f:58:50:5e:45:4b:0e:6c:a8:
                    b8:93:20:24:6a:11:2f:61:84:54:e5:64:59:37:d9:
                    f1:1c:9c:b2:81:07:13:05:4f:67:8f:a5:a0:fa:1a:
                    54:cb:ae:01:6b:98:40:d4:31:10:cc:de:12:61:49:
                    5b:2c:aa:de:32:0c:40:80:2b:ce:c1:77:b2:ba:af:
                    32:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D6:7F:F5:77:CD:7C:AB:2F:04:7A:92:0F:A8:D8:FB:97:98:E3:67
            X509v3 Authority Key Identifier:
                keyid:91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d0:f9:4d:be:cb:78:23:8c:c8:29:20:4b:ad:0e:26:45:6c:
         6f:9f:70:e2:6c:a4:c9:c9:5e:fd:78:6c:32:58:49:99:81:43:
         50:5b:6a:1f:9c:e9:3d:d2:63:05:c2:70:ab:55:a7:bd:70:45:
         d0:da:22:3f:d9:43:4c:48:64:ad:9a:99:45:a7:a8:b6:6f:a8:
         1d:76:fa:d2:fc:1d:64:36:73:63:3f:4b:07:9b:32:ac:e7:78:
         97:92:3b:a8:8b:c5:60:71:49:9a:c5:29:25:15:58:33:1c:4f:
         4f:77:ae:90:25:72:82:4d:2c:16:fe:7c:82:79:d3:e5:35:38:
         38:53:be:85:05:b3:2f:27:ba:37:08:04:98:e9:28:e0:ab:65:
         35:76:67:b8:d9:d8:8b:0d:ac:c5:c6:7c:02:63:dd:63:5b:80:
         75:78:e4:03:43:e7:74:bf:27:ac:01:a1:77:5f:e6:b1:9d:90:
         5d:9b:53:5b:6e:73:7d:70:0f:5f:72:5a:c7:4b:a0:39:09:a9:
         32:32:a8:21:ad:4a:41:75:23:7a:8a:c9:15:47:ce:e6:ef:f0:
         08:79:66:a2:8e:38:21:90:15:2a:81:03:92:38:d5:43:6d:f2:
         42:cc:e7:96:e6:05:9b:fa:50:49:69:8c:b5:d9:15:41:af:ca:
         ae:9d:95:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:22:56 2025 by rpki-client