Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
File:                     KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft (raw, json)
Hash identifier:          o4dsn+EJw3fTZSbSAudKjClFLffc28n4sqlnxj27Df0=
Subject key identifier:   F8:0A:D4:0D:0B:CE:81:8B:47:D6:8B:75:78:E3:0A:49:E9:3D:C8:74
Authority key identifier: 29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
Certificate issuer:       /CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Certificate serial:       01976BBCE9796F3CB4FCE356E6D5C226D5D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
Manifest number:          063A
Signing time:             Sat 14 Jun 2025 00:00:31 +0000
Manifest this update:     Sat 14 Jun 2025 00:00:31 +0000
Manifest next update:     Sun 15 Jun 2025 00:00:31 +0000
Files and hashes:         1: 0ew3GDGdcko8IEl72SU1gGU7W_k.roa (hash: 9xx5BwMCjSrUJr+68yVrM18oEIPDjZ9uwovBe4fuSRQ=)
                          2: KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl (hash: FJ/3bALjM7HMRS+InyalJ2D0rsERWEZgloD38L5yi7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bc:e9:79:6f:3c:b4:fc:e3:56:e6:d5:c2:26:d5:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
        Validity
            Not Before: Jun 14 00:00:31 2025 GMT
            Not After : Jun 15 00:00:31 2025 GMT
        Subject: CN=f80ad40d0bce818b47d68b7578e30a49e93dc874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6f:bb:9d:2f:a4:bf:40:a2:59:b6:d0:01:34:
                    12:99:ec:72:a0:9f:e6:ee:c3:6e:cb:ea:37:66:19:
                    9e:cb:fc:89:e8:38:6d:78:0d:47:1d:5c:49:91:23:
                    67:34:4f:2f:3d:12:01:ea:74:df:10:e6:b7:12:4d:
                    49:8f:82:5e:c2:57:17:8d:ad:50:8d:dc:6e:e5:4e:
                    a3:ff:6e:b4:d1:bd:d6:9e:33:c8:a4:3e:a2:bc:1c:
                    75:49:8d:59:6d:e3:41:5c:20:62:b1:ec:06:ab:0e:
                    40:ac:aa:0d:7e:74:c0:45:53:b3:a8:ec:f0:cc:c2:
                    5e:d6:0b:f9:31:13:01:5d:df:7d:84:41:16:7d:99:
                    49:67:54:90:34:d1:eb:ed:00:b3:16:cd:be:69:07:
                    c3:03:6f:be:25:b2:5e:77:5f:d0:1b:f8:7a:17:fd:
                    66:dd:a6:64:57:3d:20:ff:ae:b8:e4:b3:49:51:fd:
                    d3:04:23:76:93:f4:e3:4a:30:47:25:c8:9f:ff:08:
                    0d:8d:ee:1a:15:5a:1b:1a:e8:34:bb:ce:7b:3a:b4:
                    14:c0:5e:0a:10:6f:da:41:06:d6:46:d7:2f:ec:32:
                    74:29:a9:43:1f:6b:b0:a3:7e:a8:f8:31:aa:f5:74:
                    0c:6c:03:20:75:a6:a0:ac:29:81:04:6d:dd:68:8a:
                    3f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0A:D4:0D:0B:CE:81:8B:47:D6:8B:75:78:E3:0A:49:E9:3D:C8:74
            X509v3 Authority Key Identifier:
                keyid:29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:28:23:be:24:a8:13:fa:9d:bb:e6:7a:cd:20:d0:12:2c:6e:
         ee:92:d0:73:7c:2f:38:93:e4:55:de:cf:44:d8:40:94:bb:51:
         ca:54:14:6f:9a:e6:0a:1c:ed:7a:15:08:54:19:01:5c:85:f0:
         19:3c:23:c5:d8:8b:d9:55:4d:51:95:68:94:e2:c9:dc:59:93:
         4f:19:9a:e3:55:f4:7c:57:cc:d8:d5:00:f4:3b:43:fb:19:b3:
         23:c1:87:5c:78:61:6e:6e:8d:18:ec:e9:29:38:40:5f:4e:ce:
         f9:8b:19:63:9e:4d:49:d2:86:c4:b4:43:e0:23:95:40:0a:72:
         8f:aa:0b:af:39:59:84:40:50:d2:48:e2:28:63:e5:70:46:cd:
         35:54:05:1c:7f:4d:45:09:ce:7c:8e:54:ca:f0:eb:7a:9d:27:
         a2:a1:41:5f:db:b2:47:ef:67:91:ee:73:18:bc:81:26:16:73:
         71:34:cd:57:63:08:1c:37:d8:d1:49:94:67:20:b9:c0:b2:ef:
         9f:4d:bf:13:91:c0:94:08:0f:78:46:60:50:96:a6:d4:ce:fa:
         d6:ff:a1:02:7c:29:6e:9f:5c:0b:1c:c3:c0:73:bc:71:85:a7:
         d8:15:21:af:3b:e9:9f:ff:b5:1a:5b:de:67:17:8a:c9:a1:2a:
         87:3d:71:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:31:10 2025 by rpki-client