Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
File:                     kFTGmagd2WKohg8_sLfQM0Pev3Y.mft (raw, json)
Hash identifier:          XvDjMK9CYtREe3/5clSV1Jad+7lYwQgPzoy8LEEc3u4=
Subject key identifier:   84:7E:92:3B:0D:37:DD:55:95:95:66:34:0D:C0:C4:C1:2F:82:A8:F3
Authority key identifier: 90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76
Certificate issuer:       /CN=9054c699a81dd962a8860f3fb0b7d03343debf76
Certificate serial:       01988EED39D738F915A804A3BE2CB97E5931
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
Manifest number:          1626
Signing time:             Sat 09 Aug 2025 13:02:48 +0000
Manifest this update:     Sat 09 Aug 2025 13:02:48 +0000
Manifest next update:     Sun 10 Aug 2025 13:02:48 +0000
Files and hashes:         1: AJkLm8QLqcA4cpdlMxjyYpGgKig.roa (hash: Kdq77qB2Z4PyfWGbDab2B0pk/vx4xIRx3C/YwD+0yYQ=)
                          2: kFTGmagd2WKohg8_sLfQM0Pev3Y.crl (hash: L8714CNTXBP/Mhu8KJH/O5hhzqIYTA2yyTEAujxNM0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 13:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:ed:39:d7:38:f9:15:a8:04:a3:be:2c:b9:7e:59:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9054c699a81dd962a8860f3fb0b7d03343debf76
        Validity
            Not Before: Aug  9 13:02:48 2025 GMT
            Not After : Aug 10 13:02:48 2025 GMT
        Subject: CN=847e923b0d37dd55959566340dc0c4c12f82a8f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4b:00:43:9a:b3:7f:3c:58:dc:c2:79:ce:61:
                    98:13:f8:87:5f:e7:13:48:c6:08:a4:27:af:82:49:
                    8d:77:21:f3:5c:1f:27:c3:68:70:c0:e4:73:ac:ca:
                    3e:e3:0d:c4:14:6d:50:be:c0:b9:1a:f3:ea:b1:05:
                    24:cd:7c:15:01:2f:11:0e:03:cc:09:f1:7c:a4:0b:
                    d6:d8:d8:0f:a4:1c:8d:6e:ab:1a:a6:db:27:f8:fa:
                    af:eb:f7:fc:2e:b9:d8:d3:ad:2b:1b:ca:c1:38:3d:
                    85:56:fc:43:94:53:cc:b7:91:1f:5a:90:c3:9c:ea:
                    cd:04:21:61:8b:0d:a9:88:83:d8:38:87:5f:dc:e5:
                    4b:ee:ec:14:09:e5:21:17:82:16:14:26:b9:69:dd:
                    60:48:ff:3a:d7:30:b9:da:c5:64:34:15:08:ce:cf:
                    61:da:ad:30:eb:f0:25:d9:74:8d:42:84:47:07:fd:
                    7b:a1:85:bd:24:07:08:9c:ea:e8:64:d1:74:83:33:
                    4f:55:98:f6:f1:58:c6:8d:b5:8b:9e:1c:c4:75:a6:
                    b1:fb:b7:fc:fd:82:c5:8a:0d:09:52:b9:24:7e:27:
                    29:ee:35:02:00:7d:55:8f:89:ef:52:5d:fa:fe:04:
                    49:c0:db:2d:ea:62:46:fc:31:d1:6e:92:56:73:85:
                    8f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7E:92:3B:0D:37:DD:55:95:95:66:34:0D:C0:C4:C1:2F:82:A8:F3
            X509v3 Authority Key Identifier:
                keyid:90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c5:64:04:f7:4c:9a:23:29:07:31:d5:f5:85:47:25:11:b0:
         0c:18:4d:3d:35:74:60:ad:a9:8c:cb:d0:ff:c3:24:46:54:70:
         4d:d1:5a:35:55:ad:79:dc:bb:63:30:66:f6:07:c5:f6:1e:7e:
         21:a3:54:20:a3:6f:5b:a1:a3:1d:2f:d6:2e:e4:5b:f1:af:a1:
         c1:c3:f4:47:8a:4d:56:11:bb:93:bc:7c:b2:1c:2f:be:47:e3:
         b2:d8:bb:50:c5:e9:35:56:05:2f:ea:86:51:b2:b5:a1:b7:f1:
         d8:40:12:33:17:b1:c7:25:b3:73:29:f5:7f:44:29:38:c9:e3:
         7c:8c:91:3c:21:21:15:a8:d0:19:c7:4a:e3:4f:83:e1:d8:42:
         72:a2:31:4a:17:3a:62:d2:19:1a:e2:99:d2:88:94:73:aa:66:
         a4:0a:42:69:95:00:12:88:c6:35:ac:f6:cb:2c:af:d1:3f:26:
         ab:c3:12:00:80:cb:87:f6:b2:de:9a:59:0d:c9:79:27:a0:bb:
         2a:ef:a7:4d:db:61:21:87:f5:69:87:50:87:c9:9f:48:dd:c6:
         45:b6:15:dd:3e:30:4f:cf:1a:21:b2:92:32:76:5c:00:ab:1d:
         48:36:54:05:b0:d9:6e:89:6b:ff:14:77:7e:02:97:24:24:a2:
         1d:ff:62:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:36:23 2025 by rpki-client