Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
File:                     KslDUX9eO3R-dTAyB4mgNES0ORI.mft (raw, json)
Hash identifier:          0sNfRQ1cDDnlu3aKeHNlxyGPD6/vw4W6va4C4dZJ/7M=
Subject key identifier:   60:7B:AE:23:00:7B:C9:9D:30:F8:41:28:7B:EF:F4:27:E6:1A:97:B2
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Certificate issuer:       /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial:       019874195D1336920329C6DDF0421FF9F582
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
Manifest number:          0F06
Signing time:             Mon 04 Aug 2025 08:01:15 +0000
Manifest this update:     Mon 04 Aug 2025 08:01:15 +0000
Manifest next update:     Tue 05 Aug 2025 08:01:15 +0000
Files and hashes:         1: KslDUX9eO3R-dTAyB4mgNES0ORI.crl (hash: e2FfwVy67+tstLTJr+QRhNPVi9tk/HQZZB4e1AO9syo=)
                          2: hRopNkKlsL4OwqAqAiJ3QXD2oug.roa (hash: NMdRr2OaOIcyhizjr1sKy4ahHmQgfdQZAiHU+pJ6knM=)
                          3: wXKkmEzVnT6wH-e4RUZ5ISziflM.roa (hash: 0ibg6oISPGaXyJMIkBYpRfjFyr2Dyc5Kyu9O/zaq9rU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:19:5d:13:36:92:03:29:c6:dd:f0:42:1f:f9:f5:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
        Validity
            Not Before: Aug  4 08:01:15 2025 GMT
            Not After : Aug  5 08:01:15 2025 GMT
        Subject: CN=607bae23007bc99d30f841287beff427e61a97b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:33:de:ab:e2:0b:c3:87:a0:f1:89:1b:44:b7:
                    74:0c:f6:7f:44:42:92:21:c6:9f:65:3c:b0:7a:d7:
                    5e:c9:46:b6:b6:2c:2b:66:25:1c:16:db:cd:37:0a:
                    72:8a:6c:90:fc:d6:9c:07:d7:bd:3f:2b:08:73:a3:
                    a3:28:cf:f5:e3:a4:d4:d0:23:79:0d:5b:e8:cd:27:
                    7f:1c:d1:3a:81:dc:fb:02:af:b2:18:b8:f5:a5:bf:
                    d2:a6:46:bd:8b:f3:b3:01:f6:11:70:88:ba:70:33:
                    1f:6a:92:30:8c:45:c0:69:91:a3:0e:41:68:57:7f:
                    55:70:f2:cf:bd:40:cd:13:39:51:db:20:3a:e0:ec:
                    eb:bd:30:4d:2d:60:da:93:cd:a1:09:3c:e0:86:05:
                    0c:a9:57:80:ce:f9:c0:bb:b7:55:29:f1:64:05:14:
                    80:81:12:20:be:f3:4c:5c:18:12:d0:9e:02:25:4e:
                    3c:e8:a2:50:4d:ce:b6:20:19:09:94:d8:c6:fe:a5:
                    d0:a4:e8:23:a1:00:d6:79:69:47:b7:05:e6:2e:e6:
                    b0:e6:bf:25:fd:12:5d:72:bd:e8:8b:3d:9a:8a:8d:
                    9d:1b:89:77:ce:a4:a1:45:10:1b:41:01:07:e2:20:
                    15:9b:ea:a3:be:14:9d:85:36:17:c3:6a:e4:54:bf:
                    7b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7B:AE:23:00:7B:C9:9D:30:F8:41:28:7B:EF:F4:27:E6:1A:97:B2
            X509v3 Authority Key Identifier:
                keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:da:c8:69:ce:1f:98:6b:4b:a3:b4:53:24:0c:f3:18:78:73:
         aa:8f:39:fa:9f:eb:97:13:79:83:1d:d9:34:63:6b:1b:c3:20:
         47:19:54:2b:e6:6f:2b:11:35:27:5e:9c:42:17:ef:ca:2d:d4:
         91:37:af:b5:d3:df:3c:e2:7a:0d:cd:18:bd:80:26:db:7b:e0:
         d9:b8:5a:52:75:bc:80:ff:29:5b:de:93:a8:94:a3:1e:c7:f8:
         df:8c:3f:65:d1:d2:3f:68:f2:72:92:7d:06:76:4d:9c:b5:be:
         6c:25:0f:58:17:e8:c6:9d:19:7d:ff:7d:53:90:ae:9d:0f:42:
         29:65:30:4c:1e:03:26:31:d2:ec:ca:44:06:ce:f6:c2:4b:1e:
         72:e0:1f:d9:8b:5b:2e:16:a7:ec:1b:f7:58:dd:da:ad:d0:00:
         d8:34:9c:3f:69:56:e7:d8:98:7b:3f:e3:3e:54:5a:93:7f:58:
         2c:06:21:37:c3:37:57:18:45:20:fb:9a:38:b2:0c:f8:14:88:
         66:a4:0c:08:53:a3:25:2c:f9:27:da:3a:41:99:91:e7:e0:b1:
         6e:89:8c:6a:a3:2e:ef:9f:1c:54:f8:2c:8d:35:b2:1d:ff:7c:
         c6:a3:5d:0b:50:5b:51:26:13:b9:3c:e2:db:f4:21:dc:bf:27:
         f9:50:b4:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GV0TNpIDKcbd8EIf+fWCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzk0MzUxN2Y1ZTNiNzQ3ZTc1MzAzMjA3ODlhMDM0NDRi
NDM5MTIwHhcNMjUwODA0MDgwMTE1WhcNMjUwODA1MDgwMTE1WjAzMTEwLwYDVQQD
Eyg2MDdiYWUyMzAwN2JjOTlkMzBmODQxMjg3YmVmZjQyN2U2MWE5N2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzPeq+ILw4eg8YkbRLd0DPZ/REKS
IcafZTywetdeyUa2tiwrZiUcFtvNNwpyimyQ/NacB9e9PysIc6OjKM/146TU0CN5
DVvozSd/HNE6gdz7Aq+yGLj1pb/Spka9i/OzAfYRcIi6cDMfapIwjEXAaZGjDkFo
V39VcPLPvUDNEzlR2yA64OzrvTBNLWDak82hCTzghgUMqVeAzvnAu7dVKfFkBRSA
gRIgvvNMXBgS0J4CJU486KJQTc62IBkJlNjG/qXQpOgjoQDWeWlHtwXmLuaw5r8l
/RJdcr3oiz2aio2dG4l3zqShRRAbQQEH4iAVm+qjvhSdhTYXw2rkVL97WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGB7riMAe8mdMPhBKHvv9CfmGpeyMB8GA1UdIwQY
MBaAFCrJQ1F/Xjt0fnUwMgeJoDREtDkSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xOTUxMWQtNTM3ZS00MjQxLWEwZDgt
MmQ5MWNmZDdhYWY0LzEvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8xOTUxMWQtNTM3ZS00MjQxLWEwZDgtMmQ5MWNmZDdhYWY0
LzEvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkdrIac4f
mGtLo7RTJAzzGHhzqo85+p/rlxN5gx3ZNGNrG8MgRxlUK+ZvKxE1J16cQhfvyi3U
kTevtdPfPOJ6Dc0YvYAm23vg2bhaUnW8gP8pW96TqJSjHsf434w/ZdHSP2jycpJ9
BnZNnLW+bCUPWBfoxp0Zff99U5CunQ9CKWUwTB4DJjHS7MpEBs72wksecuAf2Ytb
Lhan7Bv3WN3ardAA2DScP2lW59iYez/jPlRak39YLAYhN8M3VxhFIPuaOLIM+BSI
ZqQMCFOjJSz5J9o6QZmR5+CxbomMaqMu758cVPgsjTWyHf98xqNdC1BbUSYTuTzi
2/Qh3L8n+VC0XA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:27 2025 by rpki-client