Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
File:                     kmyYtRBh80DM5OC0zjYc40q8L84.mft (raw, json)
Hash identifier:          8KP9Z7EJD/oyQ0P2jbxivY1kJGr6bbmxXG2nvJOugRU=
Subject key identifier:   F7:F2:3E:01:69:71:1A:0A:0B:C9:18:10:7A:1E:98:78:C8:C4:3B:75
Authority key identifier: 92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE
Certificate issuer:       /CN=926c98b51061f340cce4e0b4ce361ce34abc2fce
Certificate serial:       01988A32DED7DC0D0C8F8B0A0054F4AE26D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
Manifest number:          066F
Signing time:             Fri 08 Aug 2025 15:00:46 +0000
Manifest this update:     Fri 08 Aug 2025 15:00:46 +0000
Manifest next update:     Sat 09 Aug 2025 15:00:46 +0000
Files and hashes:         1: NSppdy32pK0kuht35Ks5xIRdV5s.roa (hash: e3lqo49PNkPXZsVtpcSw5P8QfGbIbaYvIeXnhh1mWBY=)
                          2: kmyYtRBh80DM5OC0zjYc40q8L84.crl (hash: iBan4bKFUfAiDrwKsosnaL/u5Te/Gb7X7ey/K9/xWlI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 15:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:32:de:d7:dc:0d:0c:8f:8b:0a:00:54:f4:ae:26:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926c98b51061f340cce4e0b4ce361ce34abc2fce
        Validity
            Not Before: Aug  8 15:00:46 2025 GMT
            Not After : Aug  9 15:00:46 2025 GMT
        Subject: CN=f7f23e0169711a0a0bc918107a1e9878c8c43b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:69:86:5d:c4:b0:90:99:55:82:c9:b4:e7:29:
                    f8:0a:79:cb:2a:50:04:1e:6d:40:8a:1b:60:a1:6c:
                    c0:6a:74:29:c6:36:d5:8c:0a:6c:0f:b7:69:bf:1e:
                    d5:ff:f5:96:e3:9a:d9:e0:95:0a:83:a9:28:91:1d:
                    ff:4b:6b:94:53:b4:f9:0b:2b:f4:05:89:5a:08:9f:
                    b1:2e:6c:a8:61:d2:b0:ae:a9:56:3e:e9:e5:cd:09:
                    0e:03:e0:b1:09:bf:84:d6:ef:9c:50:83:f9:52:2e:
                    06:e7:b9:e5:da:17:3f:08:0d:fc:c6:2a:c7:a0:b5:
                    3e:07:85:1f:4d:eb:3c:aa:34:2c:50:91:e1:e8:13:
                    33:6b:43:4e:a0:e9:52:e4:59:a9:f8:df:72:96:ec:
                    cc:b7:f5:8f:1c:26:ff:88:6c:cc:ca:ee:65:d4:cf:
                    58:21:ac:c4:05:c4:9a:8b:90:da:8f:57:59:c0:e0:
                    89:e0:bf:52:fa:a7:c3:e4:e0:62:36:49:98:1f:27:
                    28:2d:4d:05:26:43:e3:fd:9f:5a:16:37:da:4b:0a:
                    fe:d6:63:2f:56:de:00:5b:c0:71:5f:01:8d:a3:7f:
                    63:9b:6c:e2:15:fc:06:6f:0e:c3:92:b4:40:7b:3b:
                    8a:45:c8:a9:f7:9c:41:92:ed:82:b3:89:5b:b0:13:
                    df:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F2:3E:01:69:71:1A:0A:0B:C9:18:10:7A:1E:98:78:C8:C4:3B:75
            X509v3 Authority Key Identifier:
                keyid:92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:5e:37:94:0f:5d:d1:02:1a:6c:94:b8:bb:41:6e:50:bf:f9:
         b2:99:a7:f9:bf:94:bf:0d:61:2f:6a:85:94:a1:21:e9:ff:44:
         39:21:33:6e:27:28:7d:80:de:8f:71:9f:8d:60:48:6d:fb:37:
         e1:08:8d:da:ae:62:ac:eb:f0:bb:b3:e0:21:fd:46:aa:db:56:
         fd:a9:4f:a5:6b:f4:00:af:04:8b:04:d2:96:6a:f5:f2:42:88:
         11:92:81:c1:ef:88:e7:d2:93:2c:6e:84:23:26:1e:83:76:9f:
         3f:c1:c5:4b:72:a6:ea:4d:65:f2:46:ca:99:5b:ac:19:5c:49:
         8b:59:6b:42:ad:94:b7:cb:9e:b0:1f:06:b7:ac:30:3c:98:27:
         4a:d5:ad:25:4c:4f:2b:d6:16:7c:53:30:af:4f:20:a2:3e:79:
         6a:5b:2d:e5:31:f5:14:64:21:88:ae:73:4c:81:94:eb:c9:05:
         b3:03:34:a7:76:2c:c2:d9:2d:5c:89:db:51:63:ef:44:1c:7f:
         4c:be:27:57:d7:20:53:b7:33:ce:2e:81:30:86:04:65:6b:09:
         6d:41:48:ce:72:b1:e1:09:46:d4:1f:80:f6:08:3d:f7:d5:e0:
         d7:17:b5:d7:07:ed:7d:5d:70:f5:12:8a:ca:eb:43:1b:1d:42:
         e9:08:12:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:36 2025 by rpki-client