Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
File:                     K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft (raw, json)
Hash identifier:          4sru7i5+8LNl6ekbKb2dHHEQfVoL/qfbOJGw0DQYfa4=
Subject key identifier:   40:48:9B:52:2E:C6:F4:B0:73:E8:E2:2E:8E:F8:98:F5:79:61:2A:27
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Certificate issuer:       /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial:       01988279C6A3793C07F2197E6B5168AD44E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
Manifest number:          0A36
Signing time:             Thu 07 Aug 2025 03:01:15 +0000
Manifest this update:     Thu 07 Aug 2025 03:01:15 +0000
Manifest next update:     Fri 08 Aug 2025 03:01:15 +0000
Files and hashes:         1: 553lKMIKwThYw8AISbuyrXf1Y3Y.roa (hash: nZE4YzzK77LLVsV2aH36whqra+m62dlwzfCf/rC05r0=)
                          2: K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl (hash: x4KtXn/azMWE9Wqu4sCeL1bC9wOZXwga1trJNmms/5U=)
                          3: eAJf1shLltuAdbTmGWti91t3LTg.roa (hash: 8/RHu353a+jymfpXxCoIOn3xjWTjYdrxghHFteMflfs=)
                          4: gtgQ_ekA3bJACMevsOtUHfK0VcE.roa (hash: zrHM5OvfHbRJdC+cVcDeqn1NqWi0xhX/yY641YqUbM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:79:c6:a3:79:3c:07:f2:19:7e:6b:51:68:ad:44:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
        Validity
            Not Before: Aug  7 03:01:15 2025 GMT
            Not After : Aug  8 03:01:15 2025 GMT
        Subject: CN=40489b522ec6f4b073e8e22e8ef898f579612a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:55:70:b0:27:1f:4c:17:ab:cf:97:b8:7c:5d:
                    07:a8:28:c3:d1:dd:bb:03:30:bc:22:cb:f4:0d:97:
                    97:99:45:de:1a:07:25:1d:81:7c:e5:32:12:92:02:
                    86:2e:cd:70:0f:ca:0a:0e:60:0d:b3:bb:18:4f:2b:
                    a9:51:1a:81:0f:a2:fc:3d:50:6d:f2:97:b3:a4:3d:
                    f1:e1:45:73:57:ce:26:b8:7b:ca:30:74:fa:ee:a3:
                    7a:9d:1a:4d:10:c7:b5:98:c6:a0:71:fc:e5:c7:32:
                    d9:cf:e7:b5:f3:64:d9:50:d0:43:01:44:a7:95:e3:
                    22:b0:8c:f8:4c:1e:6c:b2:c0:bc:75:cd:25:70:18:
                    e4:1e:5f:32:17:8d:c5:70:04:98:9d:c1:06:3a:4b:
                    a5:6a:8d:2d:ae:98:d9:35:02:98:35:1c:c7:9d:3b:
                    8c:6f:c6:47:0d:03:6a:2b:98:37:68:1a:34:ee:4b:
                    ee:c9:c4:51:bd:8e:37:9e:1f:df:af:1c:92:cb:a9:
                    5b:27:ec:ff:7c:36:2a:4d:5b:d0:af:32:ae:ce:fa:
                    2d:a1:1a:93:48:51:d6:e2:19:8e:52:2e:51:a0:1f:
                    75:11:ec:10:91:50:77:fd:60:5a:1c:1d:cd:73:ee:
                    f8:b0:f5:5a:fc:1f:75:c7:b6:72:64:79:95:6c:0b:
                    fa:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:48:9B:52:2E:C6:F4:B0:73:E8:E2:2E:8E:F8:98:F5:79:61:2A:27
            X509v3 Authority Key Identifier:
                keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ac:66:3f:d1:d4:56:90:d7:13:56:10:74:ab:e2:c2:b0:f8:
         48:07:37:2c:cc:5a:fc:8c:bf:74:2c:80:51:c4:ff:38:b2:34:
         11:24:ee:37:db:2c:69:6c:0e:a5:19:84:83:a0:d8:ab:0a:e7:
         99:5c:46:5b:61:92:aa:fb:eb:2c:ca:76:41:e4:fe:af:8a:ec:
         02:8e:83:e7:0e:4b:5a:bd:62:95:91:a5:e5:1b:a5:58:aa:44:
         3a:43:0c:9e:de:47:82:0b:6b:27:95:6d:94:06:af:e4:9d:e7:
         e8:e6:8b:a8:f6:fb:40:27:49:0e:e4:af:00:1f:b1:22:4e:4a:
         de:b4:12:90:0f:99:83:06:8e:d7:88:bd:be:2b:c8:5c:b1:8b:
         7d:d5:b0:e3:7e:8b:e3:d8:bb:50:ac:53:e7:1e:61:eb:bc:41:
         db:c8:8f:13:2b:f2:37:20:70:eb:58:9c:9d:48:b8:c3:aa:ab:
         e6:38:e6:21:2c:2e:c3:80:a8:05:62:73:c6:b1:d5:3a:68:da:
         69:1b:00:ba:40:bc:e0:1b:30:03:36:32:aa:fb:6a:07:a7:c7:
         0f:73:d9:97:78:da:f8:7c:de:b9:e5:47:6e:a6:6b:cc:41:74:
         2c:21:3f:eb:e2:54:bf:bf:30:be:c7:74:a6:3e:7e:99:14:90:
         dd:ef:94:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:29:59 2025 by rpki-client