Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
File:                     Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft (raw, json)
Hash identifier:          dP4NIP2hADsn61Xx/i9Ys1uKZKNb69E6tIo1laeDVbg=
Subject key identifier:   92:4D:61:F8:05:9B:C7:DF:6E:0A:5C:7F:CE:49:57:98:D5:E9:8A:10
Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
Certificate issuer:       /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Certificate serial:       019873E22EF9ABC466FF1E5178D489F1C284
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
Manifest number:          120D
Signing time:             Mon 04 Aug 2025 07:00:59 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:59 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:59 +0000
Files and hashes:         1: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl (hash: iAOCoaidtJpXeQA/VOMTxYrhwrnkKCYjvmdLXRLf4Pc=)
                          2: wWu_mnG1mF1XhVWaW0DZDLRaMZA.roa (hash: OxlFGiJEt7spgwhfyEKbeiDTLip5JYbp9FNAPkL6rNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:2e:f9:ab:c4:66:ff:1e:51:78:d4:89:f1:c2:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
        Validity
            Not Before: Aug  4 07:00:59 2025 GMT
            Not After : Aug  5 07:00:59 2025 GMT
        Subject: CN=924d61f8059bc7df6e0a5c7fce495798d5e98a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:07:b1:1e:83:b2:69:36:05:a5:d9:48:1c:4c:
                    7a:26:62:6c:11:2c:14:dc:b2:66:94:db:24:63:bd:
                    f6:6e:ea:aa:01:8f:3d:86:1d:0f:5f:51:ce:d9:bf:
                    21:b8:81:d3:8d:47:bd:bb:b4:ab:c1:e4:c9:6d:7c:
                    87:a2:a8:ec:02:38:9a:25:ee:50:b6:25:b3:c2:01:
                    2c:39:f0:10:8f:1e:1b:55:a7:a9:eb:9a:17:4b:96:
                    76:62:b7:87:de:45:09:16:b4:7a:11:39:52:ce:6c:
                    26:57:d8:74:ca:df:a3:97:eb:9f:a8:bc:48:2f:dc:
                    5c:c3:6e:89:f8:24:50:31:3c:ef:d5:d0:73:35:e7:
                    22:23:a4:99:d1:41:03:fe:c8:78:35:5d:23:3b:5f:
                    45:64:eb:58:59:2b:d8:6b:a2:57:25:d5:07:48:56:
                    2f:6f:7f:01:13:aa:6b:a3:23:24:1d:26:12:98:cd:
                    99:90:fe:af:a7:7f:43:60:7c:18:43:f5:5a:2f:02:
                    3b:78:01:46:56:3f:18:22:55:2f:67:aa:23:1d:98:
                    0e:8d:13:9b:09:c4:99:30:bf:cd:ca:b7:dc:46:95:
                    9b:db:bd:e8:f8:3c:ec:17:bc:4f:82:a5:72:f5:32:
                    fe:77:a7:15:bd:c4:1d:9c:b0:b0:3b:47:2f:84:8b:
                    02:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4D:61:F8:05:9B:C7:DF:6E:0A:5C:7F:CE:49:57:98:D5:E9:8A:10
            X509v3 Authority Key Identifier:
                keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:00:d9:1b:fe:25:40:cc:0d:36:4c:2c:ce:32:e7:84:c9:76:
         d5:2d:4f:10:fb:3d:d8:3c:bd:f6:75:df:a0:e3:b8:0a:70:d8:
         07:10:cd:82:ff:58:ab:8e:7e:29:cc:12:16:01:92:e4:76:39:
         8f:65:80:e3:68:c5:d9:1b:92:f1:d6:4c:68:ad:2e:d5:36:97:
         8d:48:db:81:82:80:28:d9:2e:f0:55:6c:b0:0b:43:15:35:42:
         5b:56:42:29:5a:57:68:03:83:3e:1a:b7:37:35:35:ff:d3:39:
         49:fe:b5:87:0b:6e:ac:76:b6:69:ed:d5:62:4c:fe:09:c7:95:
         0b:0f:8c:f5:dc:2a:a9:f1:93:34:e5:66:b8:b4:93:64:9d:ff:
         b1:a3:05:c5:b0:e6:b0:a3:46:c7:26:3b:13:22:b3:d9:07:ca:
         d6:95:2c:a5:33:ad:14:db:4c:55:32:88:d5:13:30:0b:47:bf:
         b8:ab:81:cd:6a:f9:87:40:98:66:88:59:9b:1a:e6:c0:75:8f:
         3d:50:79:0e:23:46:7f:c0:be:88:73:6d:53:bb:35:4c:b4:5a:
         bc:3b:27:04:2d:7e:c8:5c:94:56:e0:57:c4:93:58:3e:ab:1a:
         f3:8a:80:32:a6:23:aa:8d:c4:8c:36:b0:e0:d7:04:e6:eb:e7:
         5d:32:10:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:05 2025 by rpki-client