Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft
File:                     kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft (raw, json)
Hash identifier:          5K1p75EnBRvlWbWzOYQ74tn+qCKWOB5HoMaQ3pBMMr0=
Subject key identifier:   14:DD:E8:6C:84:46:D2:24:49:31:C0:0A:80:97:7E:1E:0C:6A:49:DD
Authority key identifier: 92:60:A8:C6:6A:BD:B6:E5:06:81:00:70:06:D5:7F:7D:1F:E9:CA:2E
Certificate issuer:       /CN=9260a8c66abdb6e50681007006d57f7d1fe9ca2e
Certificate serial:       019873E2F52D3D3AA6B8797214635E5DD1CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft
Manifest number:          0B9A
Signing time:             Mon 04 Aug 2025 07:01:50 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:50 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:50 +0000
Files and hashes:         1: LZy1osNQUhfVUq7phinZnPKl6sg.roa (hash: reyk0Zvn/J6AzXb7QQ8ewqifkrvY/15JT8YFCCBaMEM=)
                          2: kmCoxmq9tuUGgQBwBtV_fR_pyi4.crl (hash: TpT/Au/VAG6twjIO11ILhyxpWnJVBQLwLD4uCedRA8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:f5:2d:3d:3a:a6:b8:79:72:14:63:5e:5d:d1:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9260a8c66abdb6e50681007006d57f7d1fe9ca2e
        Validity
            Not Before: Aug  4 07:01:50 2025 GMT
            Not After : Aug  5 07:01:50 2025 GMT
        Subject: CN=14dde86c8446d2244931c00a80977e1e0c6a49dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:db:1e:d5:47:ca:7c:56:68:d9:f2:56:a5:37:
                    88:78:5a:fa:44:bf:00:b2:49:8d:1a:77:ce:f0:2a:
                    7d:0b:15:b3:cb:ac:3b:75:ae:af:b7:ce:e7:5d:16:
                    52:4b:9d:80:15:60:2b:42:d3:96:00:8b:50:39:b2:
                    0e:cc:35:41:4e:31:46:9c:4e:ef:b4:fa:37:dd:4e:
                    c5:1e:0c:3f:cd:43:c6:3a:24:ec:ef:0b:bd:a2:c9:
                    1f:52:dd:06:99:f1:8a:32:6c:b1:ab:09:e5:3f:70:
                    2e:5f:a2:27:59:91:89:1b:7c:54:c4:3a:3d:b4:23:
                    3e:07:27:18:1a:01:a7:fc:06:d4:ba:fa:d3:27:d0:
                    64:f9:97:05:71:ab:da:37:48:de:d4:ba:67:42:87:
                    a0:5e:52:0a:36:8e:5a:51:eb:d5:49:ac:b4:67:52:
                    cf:90:5f:d5:d6:8a:f9:0d:c3:02:18:d0:5f:b7:1f:
                    08:e2:20:b6:b5:a5:87:97:24:96:2d:31:fb:b6:e1:
                    50:87:51:af:33:91:15:a7:4b:cf:f4:70:35:a5:e7:
                    e0:64:05:7d:58:68:e7:e0:40:30:1c:77:47:60:1c:
                    95:cc:19:9b:8a:ac:41:6a:30:c8:dd:33:43:cd:e3:
                    81:e8:8e:3f:ee:13:aa:e3:f3:d1:ad:19:3c:89:b3:
                    30:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DD:E8:6C:84:46:D2:24:49:31:C0:0A:80:97:7E:1E:0C:6A:49:DD
            X509v3 Authority Key Identifier:
                keyid:92:60:A8:C6:6A:BD:B6:E5:06:81:00:70:06:D5:7F:7D:1F:E9:CA:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:19:15:f4:f0:a1:87:31:ef:b7:53:44:6b:65:68:83:98:90:
         85:43:ab:39:cb:59:b0:92:ba:1a:77:40:8f:ef:1d:f6:a7:62:
         45:aa:af:b2:c9:2f:28:64:c5:62:4b:4d:7a:87:a8:50:5f:94:
         91:9e:c7:d7:58:2c:61:04:cb:fa:48:d7:c1:59:57:e0:c0:20:
         40:bc:9a:12:16:3a:91:16:ce:8b:ef:b9:ab:5a:e8:ed:3f:f3:
         f2:39:64:95:7c:71:44:3d:a0:f4:87:47:a5:57:64:e5:25:f5:
         09:7f:56:d4:99:24:13:48:88:55:b7:02:f4:46:3b:3e:7f:da:
         02:f4:5c:14:3f:bb:13:23:2a:33:22:1b:6a:73:eb:1b:a4:2c:
         77:c1:e8:d8:75:91:81:ca:a1:17:d7:88:cb:52:b1:63:83:12:
         bd:63:1d:db:e2:0b:9f:42:0f:b5:82:c3:b3:cf:3d:6b:83:66:
         d8:d7:15:8a:5c:ab:f9:95:bc:69:b2:21:7f:45:40:e2:50:8d:
         05:20:99:cb:d6:38:3d:9b:ea:28:70:39:ee:20:4c:c6:a7:b8:
         af:75:a9:c5:b5:61:48:46:72:84:50:89:2a:b8:7c:45:23:88:
         a8:7c:5b:9d:30:d0:4c:cf:19:0f:3c:2e:2c:b6:b3:f8:c8:9b:
         e3:cc:b0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:05 2025 by rpki-client