Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
File:                     kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft (raw, json)
Hash identifier:          fLdkoqyQ86cGiRUfOEEyf/xP8z4fpGNh0Vzh8LYk5AM=
Subject key identifier:   11:7E:5A:F3:E3:CC:2D:8C:8F:5A:F8:77:ED:CE:4D:81:CD:CE:60:F4
Authority key identifier: 90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
Certificate issuer:       /CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Certificate serial:       01987306B7E908FEB44209E2DBE7513F8B4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
Manifest number:          0913
Signing time:             Mon 04 Aug 2025 03:01:16 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:16 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:16 +0000
Files and hashes:         1: NfRATxtwxdk8t5k10NmnaIEBcI8.roa (hash: 48zogp0gFyhuprEhPJDieZAGrOKDhLcNh+8XpGM82yA=)
                          2: kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl (hash: V0+FEm69YDmN4Ar/8hsOG6ZwdFuNCgXmcE372h7uAEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:b7:e9:08:fe:b4:42:09:e2:db:e7:51:3f:8b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
        Validity
            Not Before: Aug  4 03:01:16 2025 GMT
            Not After : Aug  5 03:01:16 2025 GMT
        Subject: CN=117e5af3e3cc2d8c8f5af877edce4d81cdce60f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:fa:7e:f4:80:39:49:c0:ca:07:5d:9a:b1:
                    da:d1:bf:d3:f8:9a:c5:39:14:46:b4:0a:e4:ac:af:
                    52:a7:a5:05:70:45:94:9e:9f:79:a9:37:b4:ad:4e:
                    a1:a8:14:16:05:13:8a:cd:d7:0d:1d:8f:25:68:7c:
                    6e:52:2a:7d:c4:0b:ea:6e:00:56:3b:7b:52:93:19:
                    9a:17:95:2f:6d:9b:e8:23:1c:8f:ba:1c:01:0d:75:
                    69:5e:01:86:26:57:d4:5e:24:4f:6d:e6:1b:ad:e4:
                    da:b7:04:44:62:0a:92:94:93:61:0d:48:de:a5:2f:
                    0b:a4:6e:47:49:46:ca:a9:89:e2:92:3a:04:75:76:
                    cc:87:2e:53:ab:4e:18:28:d9:e4:13:a7:b3:f6:27:
                    0c:93:09:0a:5e:0a:10:78:5d:b6:3a:99:52:0a:5e:
                    c0:b9:92:13:0e:00:c8:09:31:64:ce:de:70:2f:4f:
                    f1:b5:1f:fb:e3:cd:08:a1:8d:6f:bf:5b:13:d5:47:
                    48:06:eb:9c:ad:8a:49:1b:c5:a9:f2:18:b3:69:21:
                    c6:d0:d4:e4:88:94:f6:33:fd:19:d7:57:74:a3:ed:
                    e4:e8:02:fb:38:50:ea:4c:11:c5:43:6e:67:70:4f:
                    5b:38:cb:2f:18:69:45:fb:6e:8d:bd:da:03:7e:fe:
                    a8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7E:5A:F3:E3:CC:2D:8C:8F:5A:F8:77:ED:CE:4D:81:CD:CE:60:F4
            X509v3 Authority Key Identifier:
                keyid:90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f8:c5:db:aa:26:11:4d:e4:90:f0:35:37:ad:21:90:6e:90:
         49:80:a7:c1:65:ae:40:e7:94:f8:01:8a:85:02:18:93:77:2d:
         ee:64:8c:f6:72:17:a6:8d:06:84:c7:cf:2b:95:59:9c:80:9e:
         eb:5c:21:f5:8b:db:39:c7:c8:e2:31:bf:58:a9:d3:f7:d7:65:
         fb:97:93:68:81:69:71:49:a7:96:ba:64:b5:7b:1d:4b:3d:84:
         ef:e2:c7:20:ca:50:5f:04:d1:07:46:03:1e:11:11:3c:33:15:
         9e:d5:dd:79:28:2f:10:76:c7:25:dc:90:60:25:bb:4f:09:8a:
         55:19:01:b3:0b:1b:9d:47:62:9d:3f:73:50:82:d4:ce:b5:cf:
         5d:e7:18:5a:cf:be:43:3f:99:ad:68:05:d6:06:1a:56:0f:de:
         43:95:f1:cb:42:e6:02:12:7f:4d:84:10:47:b9:de:43:fa:d3:
         4b:e2:6d:cc:86:69:b9:73:b2:e0:02:b3:09:94:4f:d7:83:83:
         35:ec:71:e1:9d:35:a2:90:4b:f1:69:e2:5b:f3:9e:d1:f0:8b:
         30:0f:3c:53:5e:57:70:4d:ed:71:a2:93:5a:da:79:7b:7a:eb:
         d3:27:df:6b:5c:02:71:fb:b5:f0:5d:bf:2c:84:59:a2:1c:47:
         3e:e7:78:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:48 2025 by rpki-client