Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
File:                     kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft (raw, json)
Hash identifier:          F5Fl2l0fj5Lqjt5avr0LpdyBsRSl2htmZS+x7LQUvT0=
Subject key identifier:   9A:BF:85:80:67:40:98:3C:2D:3E:B9:60:0B:51:F0:DC:45:93:8A:2D
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Certificate issuer:       /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial:       0198744FD63B315E4AB2CCF51B772550E230
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
Manifest number:          1625
Signing time:             Mon 04 Aug 2025 09:00:45 +0000
Manifest this update:     Mon 04 Aug 2025 09:00:45 +0000
Manifest next update:     Tue 05 Aug 2025 09:00:45 +0000
Files and hashes:         1: L3kS7Jn1yhF9Sq1B0Zxhnxy-UmQ.roa (hash: 7USsx/75CcWYYXOpIrJthPZ+SLbNDigaF6/K5IzHy04=)
                          2: L3xdjIH2zy7v5Cj6gtkLDE8Ij7M.roa (hash: Q+o3qtQDOHZiPtx1qsjKwH4+/xbmKCsf4LWPeNV0Toc=)
                          3: Te7YHi2pfVF9zbo2M3FU6X9QFw8.roa (hash: iefxuR6cCSeQuUVD7gHNM5oNj3aGdVfsEjg121b/nwY=)
                          4: YbdTZXXJ_bhou-ns1MRKdw7L4Hs.roa (hash: Yu99aBSHIFLARWNtpLmDu4XobT/yupAF1F7TMAyI2tE=)
                          5: Z82XkiOXgkgyHP_qUTQtV9ipAQI.roa (hash: Pcm+DnawQak47wg3O3tVgdWOq8t4gYDBeT6sBFXXJVE=)
                          6: kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl (hash: hfv8ZkbBAvTZMwBhQj2LIrd/5ROMDTTG+zn3smhVw0Y=)
                          7: xzAOimHDia6u9KEZ2lcYuzbmUh8.roa (hash: twU3Zu+3OA4eLfmXFSTTDjCKPfrJ6o8S1Q+yF0JIdC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:4f:d6:3b:31:5e:4a:b2:cc:f5:1b:77:25:50:e2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
        Validity
            Not Before: Aug  4 09:00:45 2025 GMT
            Not After : Aug  5 09:00:45 2025 GMT
        Subject: CN=9abf85806740983c2d3eb9600b51f0dc45938a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fb:04:08:9e:9b:48:bb:aa:fa:36:06:af:26:
                    57:ac:b3:94:b8:35:fa:96:0a:cf:a2:9a:3e:31:6d:
                    0c:61:0a:78:43:98:79:4d:62:3e:a5:68:c1:32:28:
                    fa:07:f9:6d:ba:5d:3a:2e:7c:1a:a6:b1:02:31:c8:
                    bf:0e:93:09:78:6b:92:9a:84:75:28:3a:a5:6d:2c:
                    0e:3d:1a:80:0c:d1:09:74:96:73:db:1d:19:70:d9:
                    ec:10:a1:96:10:d6:ed:66:a5:4a:dc:3a:5f:36:19:
                    bc:45:32:d0:91:a5:2a:96:73:ff:87:e4:88:19:04:
                    cc:02:42:50:3b:8f:e8:9c:16:00:27:0a:81:9f:ef:
                    f3:bf:94:7f:f2:24:7b:b8:35:e2:8a:ee:b4:2e:76:
                    12:0e:03:4d:d2:6a:d0:71:9f:1e:31:f7:f8:c0:ae:
                    81:fe:92:4d:0d:09:6a:10:fc:4b:00:41:54:ea:f5:
                    26:9e:a3:13:4f:75:60:c8:8c:41:67:d0:da:8b:79:
                    d7:d4:bf:91:4b:38:28:01:e9:82:c2:1a:4b:84:b8:
                    3c:d9:25:a2:0b:3c:3d:9c:b5:54:ba:f3:ef:6c:f7:
                    b2:f8:4c:4a:5e:04:98:81:92:5e:0e:6d:09:3e:05:
                    f0:5d:05:01:32:0b:0c:7f:85:77:2c:5e:0e:94:4a:
                    91:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BF:85:80:67:40:98:3C:2D:3E:B9:60:0B:51:F0:DC:45:93:8A:2D
            X509v3 Authority Key Identifier:
                keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:96:41:6a:9c:4b:27:79:47:53:b4:ab:4d:4e:ec:a0:a6:9c:
         47:8b:cf:40:dc:82:44:75:ec:57:54:cd:9e:eb:52:49:e0:05:
         e5:33:f7:07:2e:61:3c:60:15:88:89:39:eb:e2:48:c9:23:6e:
         1c:c8:11:2f:7a:6d:0f:f3:f7:ee:9d:17:b2:48:79:bf:12:e6:
         29:ab:01:4c:47:f3:b0:8f:4e:9b:5b:b0:57:a9:54:6b:a4:01:
         d4:5f:e8:ee:2b:cc:37:72:ee:16:dc:07:a8:3a:e2:b1:46:6a:
         a8:e9:af:5e:a7:47:ed:ea:1a:73:2c:e4:76:81:79:20:67:49:
         e9:bf:9c:f2:88:22:14:53:69:41:ed:77:50:35:23:7d:18:e8:
         d0:42:bd:2d:a9:1e:42:e8:03:6a:65:da:03:29:b2:3f:3d:90:
         e9:a7:a6:2d:f5:c4:c2:48:b8:4c:3b:5f:bd:47:8d:e7:87:d8:
         92:1a:75:3f:54:71:aa:c7:ef:c4:d5:e1:94:62:eb:9c:79:1d:
         74:ed:dc:9c:44:cc:bf:32:31:f8:8f:ab:34:b6:09:a5:b1:4a:
         df:94:00:66:76:48:b5:61:aa:d1:e0:c9:d9:5a:10:2e:79:aa:
         b9:43:fd:07:a9:18:74:5a:20:94:6c:09:61:ed:c5:32:68:64:
         16:4a:ad:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:08:19 2025 by rpki-client